NIST · ИТ

IR 8607

Workshop Summary Report for “Cyber AI Profile” Hybrid Workshop #2

IR 8578

Workshop Summary Report for “Cyber AI Profile” Hybrid Workshop #1

Human-Centered Cybersecurity Guidelines and Resources Concept Paper

Human-Centered Cybersecurity Guidelines and Resources Concept Paper

This concept paper introduces NIST's goal to publish guidelines and resources to assist organizations and professionals in addressing the human aspects of cybersecurity, collectively known as human-centered cybersecurity.

Guidance and Templates for Public-Facing AI Documentation: An AI Standards "Zero Draft" (Initial Public Draft)

Guidance and Templates for Public-Facing AI Documentation: An AI Standards "Zero Draft" (Initial Public Draft)

SP 800-239

AI Data Center Security Analysis: A High-Performance Computing (HPC) Driven Approach

SP 800-209 Rev. 1

Security Guidelines for Storage Infrastructure

Other 2607.19146

Sarus: Privacy-Preserving Multi-Vendor Perception Fusion via Homomorphic Encryption

Agentic AI-Assisted Coding Offers a Unique Opportunity to Instill Epistemic Grounding during Software Development

Agentic AI-Assisted Coding Offers a Unique Opportunity to Instill Epistemic Grounding during Software Development

The capabilities of AI-assisted coding are progressing at a breakneck speed. Chat-based vibe coding has evolved into fully fledged AI-assisted, agentic software development using agent scaffolds, where the human developer creates a plan that agentic AIs

Beyond the Click: Experts Weigh in on the Phishing Training Debate

Beyond the Click: Experts Weigh in on the Phishing Training Debate

The efficacy of phishing simulation training is a hotly-debated topic. Three cybersecurity experts from academia and industry discuss the reasons why many phishing training programs fail to change behavior, the importance of meaningful measures of

NIST Cybersecurity Supply Chain Management: Due Diligence Assessment Quick-Start Guide

NIST Cybersecurity Supply Chain Management: Due Diligence Assessment Quick-Start Guide

Due diligence research is the investigative process of researching all available, pertinent information about a given supplier or product so that informed decisions can be made on new acquisitions or existing systems. This Quick-Start Guide provides

SP 1326

NIST Cybersecurity Supply Chain Risk Management: Due Diligence Assessment Quick-Start Guide

Captured: High-Fidelity Measurements of Spatter Sizes, Shapes, and Landing Sites within a Laser Powder Bed Fusion Machine

Captured: High-Fidelity Measurements of Spatter Sizes, Shapes, and Landing Sites within a Laser Powder Bed Fusion Machine

Parts produced by laser powder bed fusion of metals (PBF-LB/M) continue to suffer from defects caused by spatter particles, byproducts of the melt-pool and vapor plume, that land on parts during printing and limit broader adoption of the process. Prior

Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems

Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems

The system security plan, system privacy plan, and cybersecurity supply chain risk management plan are collectively referred to as system plans. They describe the purpose of the system, the operational status of the controls selected and allocated for

Communications Technology Laboratory's 6G Communications Roadmap

Communications Technology Laboratory's 6G Communications Roadmap

The National Institute of Standards and Technology (NIST) Communications Technology Laboratory (CTL) developed the 6G Communications Roadmap (the roadmap) to prioritize future NIST investments in 6G Communications research that aligns with high-priority

SP 800-18 Rev. 2

Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems

CSWP 39upd1

Considerations for Achieving Crypto Agility: Strategies and Practices

Project Description

Asset Management as a Foundation for Operational Technology Cybersecurity

Cybersecurity for the Water and Wastewater Sector:

Cybersecurity for the Water and Wastewater Sector:

The Water and Wastewater Systems (WWS) sector plays an important role in our national critical infrastructure in supplying clean water to our communities and removing harmful materials from wastewater. The WWS sector is undergoing a digital transformation

SP 800-213 Rev. 1

IoT Product Cybersecurity Guidelines for the Federal Government: Establishing IoT Product Cybersecurity Requirements

SP 1800-45

Cybersecurity for the Water and Wastewater Sector: Build Architecture (Operational Technology Remote Access)

SP 800-219 Rev. 2

Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP)

Conference Paper

Swift-Healer: Firmware-Reconfigurable Self-Healing for Remote Glitch-Injection on Autonomous Navigation Systems

Workshop Summary Report for "Cybersecurity for IoT Workshop: Future Directions"

Workshop Summary Report for "Cybersecurity for IoT Workshop: Future Directions"

This report summarizes the presentations and feedback received by the NIST Cybersecurity for the Internet of Things (IoT) Program at the hybrid workshop on "Cybersecurity for IoT Workshop: Future Directions" held March 31 – April 1, 2026. The purpose of

SP 1339

OT Backup Quick Start Guide

IR 8618

Workshop Summary Report for “Cybersecurity for IoT Workshop: Future Directions”

SP 800-78-6

Cryptographic Algorithms and Key Sizes for Personal Identity Verification

SP 800-73-6

Interfaces for Personal Identity Verification: Part 2 – PIV Card Application Card Command Interface

SP 800-73-6

Interfaces for Personal Identity Verification: Part 1 – PIV Card Application Namespace, Data Model and Representation

NIST IR 8374r1 Ransomware Risk Management: A Cybersecurity Framework 2.0 Community Profile

NIST IR 8374r1 Ransomware Risk Management: A Cybersecurity Framework 2.0 Community Profile

Ransomware is a type of malicious attack where attackers encrypt an organization's data and demand payment to restore access. Attackers may also steal an organization's information and demand an additional payment in return for not disclosing the

IR 8374 Rev. 1

Ransomware Risk Management: A Cybersecurity Framework 2.0 Community Profile