csrc.nist.gov

Workshop on SI Incident Management: NIST Publishes IR 8621

NIST Workshop on SI Incident Management, on stakeholder perspectives and key findings from the May 14, 2026, workshop. Motivated by the federal directive 'America's AI Action Plan', the report ...
csrc.nist.gov

Recommended Cybersecurity Requirements for Consumer-Grade Router Products

Ensuring the security of routers is crucial for safeguarding not only individuals’ data but also the integrity and availability of entire networks. With the increasing prevalence of smart home ...
csrc.nist.gov

Automotive Cybersecurity Community of Interest (COI)

The automotive industry is facing significant challenges from increased cybersecurity risk and adoption of AI and opportunities from rapid technological innovations. NIST is setting up this community ...
csrc.nist.gov

Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio

The increasing frequency, creativity, and severity of technology attacks means that all enterprises should ensure that information and communications technology (ICT) risk is receiving appropriate ...
csrc.nist.gov

Vetting the Security of Mobile Applications

Mobile applications have become an integral part of our everyday personal and professional lives. As both public and private organizations rely more on mobile applications, securing these mobile ...
csrc.nist.gov

system owner

CSRC Home Page See the identified Source document to understand each term-definition pair in its proper context. Send inquiries about terminology to the Source's authors; NIST publications will ...
csrc.nist.gov

private key

The secret part of an asymmetric key pair that is typically used to digitally sign or decrypt data. Sources: FIPS 201-3 under Private Key A cryptographic key that is used with an asymmetric (public ...
csrc.nist.gov

Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers

Share to Facebook Share to X Share to LinkedIn Share ia Email electronic commerce (e-commerce) security; internet shopping security; multifactor authentication (MFA) ...
csrc.nist.gov

Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy

This publication describes the Risk Management Framework (RMF) and provides guidelines for applying the RMF to information systems and organizations. The RMF provides a disciplined, structured, and ...
csrc.nist.gov

Transition to Post-Quantum Cryptography Standards

This report describes NIST’s expected approach to transitioning from quantum-vulnerable cryptographic algorithms to post-quantum digital signature algorithms and key-establishment schemes. It ...
csrc.nist.gov

Cyber Threat

CSRC Home Page Any circumstance or event with the potential to adversely impact organizational operations (including mission, functions, image, or reputation), organizational assets, or individuals ...