This is a potential security issue, you are being redirected to https://csrc.nist.gov.
An official website of the United States government
Here’s how you know
Official websites use .gov
A
.gov website belongs to an official government
organization in the United States.
Secure .gov websites use HTTPS
A
lock (
) or https:// means you’ve safely connected to
the .gov website. Share sensitive information only on official,
secure websites.
Current Publications
-
NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
- Other Pubs
Public Drafts: Current list of all draft NIST cybersecurity documents--they are typically posted for public comment. "Current" public drafts are the latest draft versions that have not yet been published as "Final." FIPS: Current Federal Information Processing Standard Publications (FIPS). Includes current (Final and Draft) FIPS.
SP 800 Series: Current NIST Special Publication (SP) 800 series publications, which focus on Computer/Information Security. Includes current (Final and Draft) SP 800 pubs.
All SP Series: Current NIST Special Publications (SP), including SP 800 (Computer/Information Security) and SP 1800 (Cybersecurity Practice Guides) pubs. Also includes SP 500 (Computer Systems Technology) pubs related to cybersecurity and privacy. Includes current (Final and Draft) NIST Special Publications.
NISTIRs: Current list of NIST Interagency or Internal Reports (NISTIR) related to cybersecurity and privacy. Includes current (Final and Draft) NISTIRs.
ITL Bulletins: Current list of NIST Information Technology Laboratory (ITL) Bulletins. White Papers: Consists of NIST Cybersecurity White Papers; NCCoE Project Descriptions, Building Blocks and Use Cases; and other NIST-authored papers that are not part of a formal series. Includes current (Final and Draft) papers.
Journal Articles: NIST-authored articles published in external journals and in the NIST Journal of Research (JRES).
Conference Papers: NIST-authored conference papers related to cybersecurity and privacy.
Books: NIST-authored books, book sections, and encyclopedia entries related to cybersecurity and privacy.
Search Results
| Series | Number | Title Publications | Status | Release Date |
|---|---|---|---|---|
| SP | 800-133 Rev. 3 |
4/17/2026
Status: Draft |
Draft | 4/17/2026 |
| SP | 1800-40 |
4/15/2026
Status: Draft |
Draft | 4/15/2026 |
| CSWP | 50 |
4/14/2026
Status: Draft |
Draft | 4/14/2026 |
| SP | 800-230 |
4/13/2026
Status: Draft |
Draft | 4/13/2026 |
| Other |
Other (Initial Preliminary Draft)
Secure Software Development, Security, and Operations (DevSecOps) Practices
3/24/2026
Status: Draft |
Draft | 3/24/2026 | |
| SP | 1347 |
SP 1347 (Initial Public Draft)
NIST Cybersecurity Framework 2.0: Informative References Quick-Start Guide
3/23/2026
Status: Draft |
Draft | 3/23/2026 |
| SP | 1800-42 |
SP 1800-42 (Initial Public Draft)
Digital Identities – Mobile Driver’s License (mDL): Accelerating Development and Adoption of Digital Identity for Financial Institutions
3/18/2026
Status: Draft |
Draft | 3/18/2026 |
| SP | 1800-39 |
2/12/2026
Status: Draft |
Draft | 2/12/2026 |
| Other |
Other (Initial Public Draft)
[Concept Paper] Accelerating the Adoption of Software and Artificial Intelligence Agent Identity and Authorization
2/05/2026
Status: Draft |
Draft | 2/05/2026 | |
| SP | 800-82 Rev. 4 |
SP 800-82 Rev. 4 (Initial Preliminary Draft)
Pre-Draft Call for Comments: Guide to Operational Technology (OT) Security
1/22/2026
Status: Draft |
Draft | 1/22/2026 |
| IR | 8576 |
1/22/2026
Status: Draft |
Draft | 1/22/2026 |
| IR | 8587 |
IR 8587 (Initial Public Draft)
Protecting Tokens and Assertions from Forgery, Theft, and Misuse: Implementation Recommendations for Agencies and Cloud Service Providers
12/22/2025
Status: Draft |
Draft | 12/22/2025 |
| SP | 800-218 Rev. 1 |
SP 800-218 Rev. 1 (Initial Public Draft)
Secure Software Development Framework (SSDF) Version 1.2: Recommendations for Mitigating the Risk of Software Vulnerabilities
12/17/2025
Status: Draft |
Draft | 12/17/2025 |
| IR | 8596 |
IR 8596 (Initial Preliminary Draft)
Cybersecurity Framework Profile for Artificial Intelligence (Cyber AI Profile): NIST Community Profile
12/16/2025
Status: Draft |
Draft | 12/16/2025 |
| SP | 800-126A Rev. 4 |
SP 800-126A Rev. 4 (Initial Public Draft)
SCAP 1.4 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 4
12/11/2025
Status: Draft |
Draft | 12/11/2025 |
| SP | 800-126 Rev. 4 |
SP 800-126 Rev. 4 (Initial Public Draft)
Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.4
12/11/2025
Status: Draft |
Draft | 12/11/2025 |
| SP | 800-70 Rev. 5 |
SP 800-70 Rev. 5 (Initial Public Draft)
National Checklist Program for IT Products: Guidelines for Checklist Users and Developers
12/09/2025
Status: Draft |
Draft | 12/09/2025 |
| SP | 800-57 Rev. 6 |
12/05/2025
Status: Draft |
Draft | 12/05/2025 |
| CSWP | 53 |
12/02/2025
Status: Draft |
Draft | 12/02/2025 |
| SP | 1308 |
SP 1308 (2nd Public Draft)
NIST Cybersecurity Framework 2.0: Cybersecurity, Enterprise Risk Management, and Workforce Management Quick-Start Guide
11/24/2025
Status: Draft |
Draft | 11/24/2025 |
| IR | 8183 Rev. 2 |
9/29/2025
Status: Draft |
Draft | 9/29/2025 |
| SP | 800-172 Rev. 3 |
SP 800-172 Rev. 3 (Final Public Draft)
Enhanced Security Requirements for Protecting Controlled Unclassified Information
9/29/2025
Status: Draft |
Draft | 9/29/2025 |
| SP | 800-172A Rev. 3 |
SP 800-172A Rev. 3 (Initial Public Draft)
Assessing Enhanced Security Requirements for Controlled Unclassified Information
9/29/2025
Status: Draft |
Draft | 9/29/2025 |
| CSWP | 48 |
CSWP 48 (Initial Public Draft)
Mappings of Migration to PQC Project Capabilities to NIST Cybersecurity Framework 2.0 and to Security and Privacy Controls for Information Systems and Organizations
9/18/2025
Status: Draft |
Draft | 9/18/2025 |
| IR | 8588 |
9/17/2025
Status: Draft |
Draft | 9/17/2025 |
| CSWP | 37B |
CSWP 37B (Initial Public Draft)
Automation of the NIST Cryptographic Module Validation Program: April 2025 Status Report
9/10/2025
Status: Draft |
Draft | 9/10/2025 |
| SP | 800-90A Rev. 2 |
SP 800-90A Rev. 2 (Initial Preliminary Draft)
PRE-DRAFT Call for Comments: Recommendation for Random Number Generation Using Deterministic Random Bit Generators
9/04/2025
Status: Draft |
Draft | 9/04/2025 |
| SP | 1331 |
SP 1331 (Initial Public Draft)
Quick-Start Guide for Using CSF 2.0 to Improve Management of Emerging Cybersecurity Risks
8/21/2025
Status: Draft |
Draft | 8/21/2025 |
| SP | 1800-43 |
8/05/2025
Status: Draft |
Draft | 8/05/2025 |
| IR | 8536 |
7/31/2025
Status: Draft |
Draft | 7/31/2025 |
| IR | 8579 |
IR 8579 (Initial Public Draft)
Developing the NCCoE Chatbot: Technical and Security Learnings from the Initial Implementation
7/31/2025
Status: Draft |
Draft | 7/31/2025 |
| SP | 800-197A |
SP 800-197A (Initial Preliminary Draft)
PRE-DRAFT Call for Comments: NIST Launches Development of Cryptographic Accordions
6/06/2025
Status: Draft |
Draft | 6/06/2025 |
| SP | 800-18 Rev. 2 |
SP 800-18 Rev. 2 (Initial Public Draft)
Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems
6/04/2025
Status: Draft |
Draft | 6/04/2025 |
| SP | 800-234 |
5/01/2025
Status: Draft |
Draft | 5/01/2025 |
| CSWP | 40 |
4/14/2025
Status: Draft |
Draft | 4/14/2025 |
| SP | 1800-33 |
3/18/2025
Status: Draft |
Draft | 3/18/2025 |
| IR | 8323 Rev. 2 |
IR 8323 Rev. 2 (Initial Preliminary Draft)
PRE-DRAFT Call for Comments: NIST is Aligning the Foundational Positioning, Navigation, and Timing (PNT) Profile (NIST IR 8323) with CSF 2.0
3/12/2025
Status: Draft |
Draft | 3/12/2025 |
| IR | 8546 |
IR 8546 (Initial Public Draft)
Cybersecurity Framework Version 2.0 Semiconductor Manufacturing Profile
2/27/2025
Status: Draft |
Draft | 2/27/2025 |
| IR | 8011 Vol. 1 Rev. 1 |
IR 8011 Vol. 1 Rev. 1 (Initial Public Draft)
Testable Controls and Security Capabilities for Continuous Monitoring: Volume 1 — Overview and Methodology
2/20/2025
Status: Draft |
Draft | 2/20/2025 |
| SP | 800-38G Rev. 1 |
SP 800-38G Rev. 1 (2nd Public Draft)
Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption
2/03/2025
Status: Draft |
Draft | 2/03/2025 |
| IR | 8374 Rev. 1 |
IR 8374 Rev. 1 (Initial Public Draft)
Ransomware Risk Management: A Cybersecurity Framework 2.0 Community Profile
1/13/2025
Status: Draft |
Draft | 1/13/2025 |
| SP | 800-38D Rev. 1 |
SP 800-38D Rev. 1 (Initial Preliminary Draft)
Pre-Draft Call for Comments: GCM and GMAC Block Cipher Modes of Operation
1/06/2025
Status: Draft |
Draft | 1/06/2025 |
| SP | 800-189 Rev. 1 |
1/03/2025
Status: Draft |
Draft | 1/03/2025 |
| SP | 800-197 |
SP 800-197 (Initial Preliminary Draft)
PRE-DRAFT Call for Comments: NIST Proposes to Standardize a Wider Variant of AES
12/23/2024
Status: Draft |
Draft | 12/23/2024 |
| CSWP | 35 |
CSWP 35 (Initial Public Draft)
Cybersecurity Threat Modeling the Genomic Data Sequencing Workflow: An example threat model implementation for genomic data sequencing and analysis
12/16/2024
Status: Draft |
Draft | 12/16/2024 |
| IR | 8467 |
12/16/2024
Status: Draft |
Draft | 12/16/2024 |
| CSWP | 38 |
11/21/2024
Status: Draft |
Draft | 11/21/2024 |
| SP | 800-157 Rev. 1 |
SP 800-157 Rev. 1 (Final Public Draft)
Guidelines for Derived Personal Identity Verification (PIV) Credentials
11/14/2024
Status: Draft |
Draft | 11/14/2024 |
| SP | 800-217 |
11/14/2024
Status: Draft |
Draft | 11/14/2024 |
| IR | 8547 |
11/12/2024
Status: Draft |
Draft | 11/12/2024 |
| SP | 1326 |
SP 1326 (Initial Public Draft)
NIST Cybersecurity Supply Chain Risk Management: Due Diligence Assessment Quick-Start Guide
10/30/2024
Status: Draft |
Draft | 10/30/2024 |
| SP | 800-131A Rev. 3 |
SP 800-131A Rev. 3 (Initial Public Draft)
Transitioning the Use of Cryptographic Algorithms and Key Lengths
10/21/2024
Status: Draft |
Draft | 10/21/2024 |
| IR | 8480 |
IR 8480 (Initial Public Draft)
Attribute Validation Services for Identity Management: Architecture, Security, Privacy, and Operational Considerations
10/07/2024
Status: Draft |
Draft | 10/07/2024 |
| SP | 800-224 |
SP 800-224 (Initial Public Draft)
Keyed-Hash Message Authentication Code (HMAC): Specification of HMAC and Recommendations for Message Authentication
6/28/2024
Status: Draft |
Draft | 6/28/2024 |
| TN | 2283 |
TN 2283 (Initial Public Draft)
Cybersecurity for the Water and Wastewater Sector: Build Architecture. Operational Technology Remote Access
6/12/2024
Status: Draft |
Draft | 6/12/2024 |
| Other |
Other (Initial Preliminary Draft)
Proposal of Requirements for an Accordion Mode: Discussion Draft for the NIST Accordion Mode Workshop 2024
4/10/2024
Status: Draft |
Draft | 4/10/2024 | |
| CSWP | 33 |
CSWP 33 (Initial Public Draft)
Product Development Cybersecurity Handbook: Concepts and Considerations for IoT Product Manufacturers
4/03/2024
Status: Draft |
Draft | 4/03/2024 |
| CSWP | 32 |
CSWP 32 (Initial Public Draft)
NIST Cybersecurity Framework 2.0: A Guide to Creating Community Profiles
2/26/2024
Status: Draft |
Draft | 2/26/2024 |
| SP | 800-60 Rev. 2 |
SP 800-60 Rev. 2 (Initial Working Draft)
Guide for Mapping Types of Information and Systems to Security Categories
1/31/2024
Status: Draft |
Draft | 1/31/2024 |
| SP | 800-100 Rev. 1 |
SP 800-100 Rev. 1 (Initial Preliminary Draft)
PRE-DRAFT Call for Comments | Information Security Handbook: A Guide for Managers
1/09/2024
Status: Draft |
Draft | 1/09/2024 |
| SP | 1800-38 |
SP 1800-38 (Initial Preliminary Draft)
Migration to Post-Quantum Cryptography: Preparation for Considering the Implementation and Adoption of Quantum Safe Cryptography
12/19/2023
Status: Draft |
Draft | 12/19/2023 |
| SP | 800-79 Rev. 3 |
SP 800-79 Rev. 3 (Initial Public Draft)
Guidelines for the Authorization of PIV Card and Derived PIV Credential Issuers
12/13/2023
Status: Draft |
Draft | 12/13/2023 |
| SP | 800-92 Rev. 1 |
10/11/2023
Status: Draft |
Draft | 10/11/2023 |
| IR | 8481 |
8/31/2023
Status: Draft |
Draft | 8/31/2023 |
| SP | 1800-40 |
SP 1800-40 (Initial Preliminary Draft)
Automation of the NIST Cryptographic Module Validation Program
6/07/2023
Status: Draft |
Draft | 6/07/2023 |
| IR | 8460 |
4/26/2023
Status: Draft |
Draft | 4/26/2023 |
| SP | 1800-39 |
4/25/2023
Status: Draft |
Draft | 4/25/2023 |
| IR | 8320D |
2/23/2023
Status: Draft |
Draft | 2/23/2023 |
| IR | 8214B |
8/12/2022
Status: Draft |
Draft | 8/12/2022 |
| SP | 1800-33 |
4/25/2022
Status: Draft |
Draft | 4/25/2022 |
| IR | 8320C |
IR 8320C (Initial Public Draft)
Hardware-Enabled Security: Machine Identity Management and Protection
4/20/2022
Status: Draft |
Draft | 4/20/2022 |
| Project Description |
12/09/2021
Status: Draft |
Draft | 12/09/2021 | |
| CSWP | 22 |
12/06/2021
Status: Draft |
Draft | 12/06/2021 |
| SP | 800-140F Rev. 1 |
SP 800-140F Rev. 1 (Initial Public Draft)
CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759
8/20/2021
Status: Draft |
Draft | 8/20/2021 |
| CSWP | 19 |
6/22/2021
Status: Draft |
Draft | 6/22/2021 |
| IR | 8335 |
6/16/2021
Status: Draft |
Draft | 6/16/2021 |
| IR | 8336 |
IR 8336 (Initial Public Draft)
Background on Identity Federation Technologies for the Public Safety Community
6/09/2021
Status: Draft |
Draft | 6/09/2021 |
| IR | 8334 |
6/02/2021
Status: Draft |
Draft | 6/02/2021 |
| CSWP | 18 |
5/14/2021
Status: Draft |
Draft | 5/14/2021 |
| Other |
1/21/2021
Status: Draft |
Draft | 1/21/2021 | |
| IR | 8259C |
IR 8259C (Initial Public Draft)
Creating a Profile Using the IoT Core Baseline and Non-Technical Baseline
12/15/2020
Status: Draft |
Draft | 12/15/2020 |
| CSWP | 17 |
CSWP 17 (Initial Public Draft)
Securing Data Integrity Against Ransomware Attacks: Using the NIST Cybersecurity Framework and NIST Cybersecurity Practice Guides
10/01/2020
Status: Draft |
Draft | 10/01/2020 |
| SP | 800-46 Rev. 3 |
SP 800-46 Rev. 3 (Initial Preliminary Draft)
PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security
9/10/2020
Status: Draft |
Draft | 9/10/2020 |
| CSWP | 16 |
CSWP 16 (Initial Public Draft)
Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management
9/08/2020
Status: Draft |
Draft | 9/08/2020 |
| Project Description |
Improving Cybersecurity of Managed Service Providers (Supporting Small- and Medium-Sized Businesses)
Project Description (Initial Public Draft)
Improving Cybersecurity of Managed Service Providers (Supporting Small- and Medium-Sized Businesses)
10/08/2019
Status: Draft |
Draft | 10/08/2019 | |
| IR | 8267 |
10/01/2019
Status: Draft |
Draft | 10/01/2019 |
| Project Description |
Project Description (Initial Public Draft)
Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses
6/17/2019
Status: Draft |
Draft | 6/17/2019 | |
| Other |
Other (Initial Public Draft)
An Application of Combinatorial Methods for Explainability in Artificial Intelligence and Machine Learning
5/22/2019
Status: Draft |
Draft | 5/22/2019 | |
| IR | 8213 |
5/06/2019
Status: Draft |
Draft | 5/06/2019 |
| Project Description |
Project Description (Initial Public Draft)
Security for IoT Sensor Networks: Building Management Case Study
2/01/2019
Status: Draft |
Draft | 2/01/2019 | |
| Other |
10/17/2018
Status: Draft |
Draft | 10/17/2018 | |
| IR | 8193 |
IR 8193 (Initial Public Draft)
National Initiative for Cybersecurity Education (NICE) Framework Work Role Capability Indicators: Indicators for Performing Work Roles
11/08/2017
Status: Draft |
Draft | 11/08/2017 |
| Project Description |
Project Description (Initial Public Draft)
Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector
10/12/2017
Status: Draft |
Draft | 10/12/2017 | |
| Project Description |
9/13/2016
Status: Draft |
Draft | 9/13/2016 | |
| IR | 8144 |
IR 8144 (Initial Public Draft)
Assessing Threats to Mobile Devices & Infrastructure: the Mobile Threat Catalogue
9/12/2016
Status: Draft |
Draft | 9/12/2016 |
| Project Description |
Project Description (Initial Public Draft)
Securing Non-Credit Card, Sensitive Consumer Data: Consumer Data Security for the Retail Sector
5/09/2016
Status: Draft |
Draft | 5/09/2016 | |
| SP | 800-154 |
3/14/2016
Status: Draft |
Draft | 3/14/2016 |
Current Publications
-
NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
- Other Pubs
Public Drafts: Current list of all draft NIST cybersecurity documents--they are typically posted for public comment. "Current" public drafts are the latest draft versions that have not yet been published as "Final." FIPS: Current Federal Information Processing Standard Publications (FIPS). Includes current (Final and Draft) FIPS.
SP 800 Series: Current NIST Special Publication (SP) 800 series publications, which focus on Computer/Information Security. Includes current (Final and Draft) SP 800 pubs.
All SP Series: Current NIST Special Publications (SP), including SP 800 (Computer/Information Security) and SP 1800 (Cybersecurity Practice Guides) pubs. Also includes SP 500 (Computer Systems Technology) pubs related to cybersecurity and privacy. Includes current (Final and Draft) NIST Special Publications.
NISTIRs: Current list of NIST Interagency or Internal Reports (NISTIR) related to cybersecurity and privacy. Includes current (Final and Draft) NISTIRs.
ITL Bulletins: Current list of NIST Information Technology Laboratory (ITL) Bulletins. White Papers: Consists of NIST Cybersecurity White Papers; NCCoE Project Descriptions, Building Blocks and Use Cases; and other NIST-authored papers that are not part of a formal series. Includes current (Final and Draft) papers.
Journal Articles: NIST-authored articles published in external journals and in the NIST Journal of Research (JRES).
Conference Papers: NIST-authored conference papers related to cybersecurity and privacy.
Books: NIST-authored books, book sections, and encyclopedia entries related to cybersecurity and privacy.
