Standards & Guidelines

NIST SP 800-208: Recommendation for Stateful Hash-Based Signature Schemes

The National Institute of Standards and Technology (NIST) has issued the NIST SP 800-208 Recommendation for Stateful Hash-Based Signature Schemes. The Special Publication (SP) 800-208 provides deployment guidance for an authentication andauthorization framework within a ...
Read More

NIST SP 800-209: Security Guidelines for Storage Infrastructure

The National Institute of Standards and Technology (NIST) has issued the NIST SP 800-209 Security Guidelines for Storage Infrastructure. The Special Publication (SP) 800-209 provides a comprehensive set of security recommendations for the current landscape ...
Read More

NIST SP 800-210: General Access Control Guidance for Cloud Systems

The National Institute of Standards and Technology (NIST) has issued the NIST SP 800-210 General Access Control Guidance for Cloud Systems. The Special Publication (SP) 800-210 provides cloud access control (AC) characteristics and a set ...
Read More

NIST SP 800-128: Security-Focused Configuration Management of Information Systems Guidelines

The National Institute of Standards and Technology (NIST) has issued new Security-Focused Configuration Management of Information Systems guidelines (SP 800-128). The Special Publication (SP) 800-128 provides updated guidance to help organizations securely configure (or “harden”), ...
Read More

NIST SP 800-52 Rev. 2: Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations

The National Institute of Standards and Technology (NIST) has released its Security Publication (SP) 800-52 Rev. 2: Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations. NIST SP 800-52 Rev. 2 ...
Read More

NISTIR 8228: Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks

The National Institute of Standards and Technology (NIST) has released a new Interagency/Internal Report (NISTIR) 8228, that includes guidelines for organizations in managing IoT cybersecurity and privacy risks. The NISTIR 8228 report titled “Considerations for ...
Read More

New CIS Controls Version 7.1 released

The Center for Internet Security (CIS) has released its new version 7.1 of the top 20 Critical Security Controls. The updated version includes new Implementation Groups designed to identify relevant CIS controls that are reasonable for an organization with ...
Read More

FIPS 140-3: Security Requirements for Cryptographic Modules

The Federal Information Processing Standards (FIPS) has issued the FIPS 140-3 Security Requirements for Cryptographic Modules. The National Institute of Standards and Technology (NIST) has developed FIPS, a set of standards and guidelines, in accordance with ...
Read More

NIST SP 800-177 Revision 1: “Trustworthy Email”

The National Institute of Standards and Technology (NIST) has released its Security Publication (SP) 800-177 Revision 1, that includes security recommendations for achieving "Trustworthy Email." SP 800-177 Rev 1 includes updated guidelines for securing email ...
Read More

NIST SP 1800-4: Mobile Device Security

The National Institute of Standards and Technology (NIST) has released its Security Publication (SP) 1800-4, that includes security guidelines for mobile device security in cloud and hybrid environments. SP 1800-4 document titled "Mobile Device Security: ...
Read More

Tags: