It has been seven years since the last major update to NIST’s flagship security and privacy guidance document Special Publication (SP) 800-

NIST has revised the framework to help benefit all sectors, not just critical infrastructure.

The purpose of these courses is to provide those new to risk management with an introduction to key publications associated with the NIST Risk Management Framework (RMF) methodology for managing...

This Quick Start Guide intends to provide direction and guidance to those organizations – in any sector or community – seeking to improve

Critical Software: Enhancing the Security of the Software Supply Chain

NIST Special Publication (SP) 800-53B, 'Control Baselines for Information Systems and Organizations,' has been published.

The strategy promotes technologically sound standards that help American industry compete internationally on a level playing field.

The NIST Privacy Framework: A Tool for Improving Privacy through Enterprise

This Quick Start Guide intends to provide direction and guidance to those organizations – in any sector or community – seeking to improve

In my spare time, I have been casually researching my family genealogy, and like many of us, I’ve discovered I come from a long line of sma

Project OverviewLow-cost genomic sequencing technologies facilitate collection, sequencing, and analysis of vast quantities of genomic data, fueling our nation’s economic and health leadership...

NIST today fulfilled two of its

We all need supplements sometimes.

This publication provides a catalog of security and privacy controls for information systems and organizations to protect organizational operations and assets, individuals, other organizations, and...

The venerable cryptographic hash function has vulnerabilities that make its further use inadvisable.

You can download a pdf version of this page 

A new update to the National Institute of Standards and Technology’s foundational cybersecurity supply chain risk management (C-SCRM) guidance aims to help organizations protect themselves as they...

In this animated story, two professionals discuss ransomware attacks and the impacts it can have on small businesses. Since ransomware is a common threat for...

In today’s highly connected, interdependent world, all organizations rely on others for critical products and services. However, the reality of globalization, while providing many benefits, has...

This document provides guidance on how an organization can use metrics to identifies the adequacy of an in-place security controls, policies, and procedures. It provides an approach to help managem...

NIST announces the selection of the Ascon family for lightweight cryptography standardization.

The collaborative process to

This document calls for public submissions of multi-party threshold schemes, to support the National Institute of Standards and Technology (NIST) in developing future recommendations and guidelines....

Project AbstractThe proliferation of cloud computing, mobile device use, and the Internet of Things has dissolved conventional network boundaries. The workforce is more distributed, with remote...

This NIST AI report develops a taxonomy of concepts and defines terminology in the field of adversarial machine learning (AML). The taxonomy is built on survey of the AML literature and is arranged...

The NIST Cybersecurity for IoT program published Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks (

This publication provides a catalog of security and privacy controls for information systems and organizations to protect organizational operations and assets, individuals, other organizations, and...

Researchers at the National Institute of Standards and Technology (NIST) have developed a new method called the Phish Scale that could help organizations bet

Helping organizations to better understand and improve their management of cybersecurity risk

Tasked with creating a cybersecurity policy framework, the National Institute of Standards and Technology (NIST) had its work cut out for it—and then some. After all, it’s one thing to agree that orga

Project AbstractThe proliferation of cloud computing, mobile device use, and the Internet of Things has dissolved conventional network boundaries. The workforce is more distributed, with remote...

This publication provides a catalog of security and privacy controls for information systems and organizations to protect organizational operations and assets, individuals, other organizations, and...

Want to learn more about how you or your organization can get involved in Cybersecurity Awareness Month 2022? Take an in-depth dive into the campaign during this special webinar presented by the...

Thanks for helping shape our ransomware guidance! We've published the final NISTIR 8374, Ransomware Risk Management: A Cybersecurity Framework Profile and the Quick Start Guide: Getting Started with...

During this week’s blog series, we sat down with two of our NIST experts from the Visualization and Usability Group at NIST —

Does your organization want to aggregate and analyze data to learn trends, but in a way that protects privacy?

This publication describes an example methodology for assessing an organization’s Information Security Continuous Monitoring (ISCM) program. It was developed directly from NIST guidance and is...

Responses will be accepted until Feb. 2, 2024.

As we celebrate Data Privacy Day 2020, let’s take a moment to reflect on the changes to privacy as a discipline — not just here at NIST, but as a

Revised draft publication aims to help organizations comply with HIPAA Security Rule.

The Human-Cent

Conference calls and web meetings—virtual meetings—are a constant of modern work.

2020 saw a major disruption in the way many people work, learn, and socialize online. Our homes are more connected than ever.

In this animated story, a business manager receives an urgent email from what she believes to be her bank. Before she clicks an included web link, a business...