NIST · ИТ

CSWP 37B

Automation of the NIST Cryptographic Module Validation Program: April 2025 Status Report

CSWP 36G

False Base Station: Applying 5G Cybersecurity and Privacy Capabilities

TCRR: A Channel Quality Prediction Framework for Industrial Wireless Communication

TCRR: A Channel Quality Prediction Framework for Industrial Wireless Communication

Reliable wireless communication in industrial Internet of Things (IoT) environments helps to manage varying operational conditions and ensure robust connectivity among devices, actuators, and machines. The anticipation of a channel's behavior can

SP 800-82 Rev. 4

Guide to Operational Technology (OT) Security

IR 8623

Cybersecurity Framework 2.0 Community Profile for Federal Agency Open Radio Access Network (O-RAN) Deployment

Assessing Security Requirements for CUI: NIST SP 800-171Ar3 Small Business Primer

Assessing Security Requirements for CUI: NIST SP 800-171Ar3 Small Business Primer

Small businesses juggle many competing priorities with their limited resources (time, budget, IT staff, etc.). A CUI security assessment can be unfamiliar and intimidating to those new and experienced with CUI security requirements. This guide provides

SP 1352

Assessing Security Requirements for Controlled Unclassified Information (CUI): NIST Special Publication 800-171A, Revision 3. Small Business Primer

Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations for Agencies and Cloud Service Providers

Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations for Agencies and Cloud Service Providers

This report provides implementation guidance to help federal agencies and cloud service providers (CSPs) protect tokens and assertions from forgery, theft, and misuse. Building on updates to NIST SP 800-53 (Release 5.1.1), it outlines principles for CSPs

IR 8587

Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations for Agencies and Cloud Service Providers

Automated Passive Interoperability Testing for Cellular V2X

Automated Passive Interoperability Testing for Cellular V2X

Cellular Vehicle-to-Everything (C-V2X), a critical component of Intelligent Transportation Systems (ITS), is a wireless technology that enables vehicles to communicate with their surroundings (e.g., other vehicles, roadway infrastructure like traffic

IR 8536

Supply Chain Traceability: Manufacturing Meta-Framework

SP 800-38E Rev. 1

Recommendation for Block Cipher Modes of Operation: XTS-AES Mode for Confidentiality on Storage Devices

Workshop on Rolling Next-Generation Secure Hardware Into Standards

Workshop on Rolling Next-Generation Secure Hardware Into Standards

The Sustainable Hardware Security (SUSHI@NIST) Workshop on January 26, 2026, convened stakeholders from industry, academia, and government to identify priorities and develop actionable recommendations for advancing hardware security across the

Phish Out of Water: A Large-Scale Study of Phishing Email Cues

Phish Out of Water: A Large-Scale Study of Phishing Email Cues

This poster presents the results of a study on people's perceptions of phishing email cues. The study, conducted in collaboration with Walmart's information security research team, examined whether the presence of certain cues impacts human phishing email

Beyond EER: Multi-Dimensional Evaluation of Information Leakage in Speaker De-Identification

Beyond EER: Multi-Dimensional Evaluation of Information Leakage in Speaker De-Identification

Speaker de-identification (SDID) aims to preserve privacy by concealing speaker identity while maintaining speech utility. However, current evaluations often reduce privacy to a single dimension—biometric verification performance—typically measured by

IR 8615

Workshop on Rolling Next-Generation Secure Hardware into Standards

SP 800-213A Rev. 1

PRE-DRAFT Call for Comments: IoT Device Cybersecurity Requirement Catalog

IR 8611

m-NGAC: Transcending Traditional Database Security Models

NIST Cybersecurity Framework 2.0 Informative References Quick-Start Guide

NIST Cybersecurity Framework 2.0 Informative References Quick-Start Guide

This publication explains what informative references are and how they support achieving the outcomes of the CSF 2.0. The guide introduces readers to NIST tools available for accessing, viewing, and using informative references for cybersecurity risk

SP 1347

NIST Cybersecurity Framework 2.0: Informative References Quick-Start Guide

IR 8613

Multi-Cloud Architecture Challenges: Security and Compliance Implications

SP 1353

NIST Cybersecurity Framework 2.0: Quick-Start Guide for Using Artificial Intelligence (AI) for CSF Analysis and Reporting

Other

Human-Centered Cybersecurity Guidelines and Resources Concept Paper

What is Human-Centered Cybersecurity?

What is Human-Centered Cybersecurity?

Without a shared understanding of human-centered cybersecurity (HCC), organizations may struggle to know if and how to incorporate meaningful and impactful human-centered cybersecurity approaches. As a first step towards developing a shared understanding

CSWP 36F

Initial NAS Message Security: Applying 5G Cybersecurity and Privacy Capabilities

Transit Cybersecurity Framework Community Profile

Transit Cybersecurity Framework Community Profile

The transit Cybersecurity Framework Community Profile is a Cybersecurity Framework (CSF) Community Profile developed to support United States-based transit agencies. This "Transit Profile" is aligned with transit sector priorities and best practices and

IR 8576

Transit Cybersecurity Framework Community Profile

Communications Technology Laboratory Spectrum Science Roadmap

Communications Technology Laboratory Spectrum Science Roadmap

The National Institute of Standards and Technology (NIST) Communications Technology Laboratory (CTL) developed the Spectrum Science Roadmap to prioritize future investments in spectrum science research that align with high-priority stakeholder needs and

Workshop Summary Report for "Cyber AI Profile" Hybrid Workshop #1

Workshop Summary Report for "Cyber AI Profile" Hybrid Workshop #1

This report summarizes the discussion at the April 2025 "Cyber AI Profile Workshop" in which NIST sought feedback toward the development of a NIST Cybersecurity Framework Community Profile for AI. The Cyber AI Profile will provide guidelines for managing

Workshop Summary Report for "Cyber AI Profile" Hybrid Workshop

Workshop Summary Report for "Cyber AI Profile" Hybrid Workshop

This report summarizes the discussion at the January 2026 "Cyber AI Profile Workshop", which focused on the NIST IR 8596 Preliminary Draft of the NIST Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile). The workshop gathered