Search Cybersecurity Insights

Displaying 26 - 50 of 337

Front view picture of studio workplace with blank notebook, laptop. Designer comfortable work table, home office.

Telework Security Basics

March 18, 2020

… Your employer has unexpectedly directed you to telework—and you are feeling overwhelmed. With many changes happening at once, telework security could be an afterthought or completely overlooked. This could … proceeding. For more information on telework security, see: User’s Guide to Telework and Bring Your Own Device (BYOD) Security STOP. THINK. …

Concept of online communication or social networking. Wooden cubes with speech bubbles linked to each other with lines.

IoT Non-Technical Supporting Capabilities: You Talked, We Listened

July 14, 2021

Barbara Cuthill

… Capability Core Baseline . The roundtables spanned four weeks, and addressed the four core capabilities defined in NISTIR 8259B as well … specific audiences and use cases. General Need to Improve Consumer Security Awareness. A view consistently expressed was that efforts to raise consumers’ awareness of their role in IoT device security were important and valuable. If the manufacturer is already …

How Many Engineers Does It Take to Digitally Secure a Solar Panel?

May 4, 2020

Eileen Division

… spent 20 years in various roles supporting energy technology research and development, but renewable energy technology was not my strength. I … out in search of answers. We met with industry experts, cybersecurity solution companies, utility managers, and researchers from NIST, … internet of things (IIoT) technologies that may lack communications security. Additionally, the distribution utility does not always own or …

New pilot opportunity: health records + federated identity = a better online experience

March 31, 2016

… electronic medical records – but it likely also means a new account and yet another password to remember. When your healthcare team includes … means time and money saved – and, if done right, better outcomes for security and privacy. We're looking for projects that: Pilot a federated credential solution in which at least two hospitals or regional healthcare systems …

The Importance of Transparency – Fueling Trust and Security Through Communication

April 3, 2023

Katerina Megas, Angela Smith, Dr. Elaine Newton, Dr. Amit Elazari, Barbara Cuthill

… Who needs to know ‘What,’ ‘When,’ and ‘How’ to tell them The Challenge There are many challenges to … connected world. While product developers increasingly consider security as they design and build products, they may not always … stakeholders—especially customers—who have limited insight into the security processes, functions and features that protect connected …

Data Security: Where We’ve Been and Where We’re Going

February 6, 2020

Milissa McGinnis

… new. There have been so many media reports about data breaches and how they affect our daily lives that it can be overwhelming. Can … questions — and many others — are being tackled every day by the Data Security team at NIST’s National Cybersecurity Center of Excellence … from Ransomware and Other Destructive Events , a practical, hands-on guide that provides example solutions organizations can use to help …

Engineering works with the tablet in the production control room.Control room of a steam Turbine,Generators of Oil refinery industry plant for monitor process, business and industry concept

NIST Releases Tips & Tactics for Control System Cybersecurity

June 8, 2021

Keith Stouffer, Victoria Yan Pillitteri

… clear that cybersecurity is an important factor in ensuring the safe and reliable delivery of goods and services. For infrastructure control … risks. We also coordinated with the Cybersecurity & Infrastructure Security Agency (CISA) to find out what resources they may recommend and … and links to a suite of NIST standards and guidelines to support implementation of risk management programs to meet the requirements of …

Interim Identity Ecosystem: “Are we there yet?”

November 6, 2013

Jeremy Grant

… meeting in Boston that discussions relating to trust frameworks and trustmarks appeared to have splintered into a number of camps, … time—but always with a baseline of privacy, interoperability, and security.” As such, the NSTIC perspective is quite broad in how it … derived requirements were: to help level-set discussions regarding implementation of the NSTIC guiding principles, and to serve as a …

Identity is the Great Enabler: Putting Patients at the Center of Health IT

January 20, 2015

… Addressing Health IT privacy and security concerns are complicated. Often the focus is to zero in on a specific technical solution and leave the often more important issues – policy, privacy, …

Staff Stories Spotlight Series: Cybersecurity Awareness Month 2024

September 18, 2024

Eduardo Takamura

… staff members who have interesting backgrounds, stories to tell, and projects in the world of cybersecurity. This year’s Cybersecurity … responsibility is to protect oneself and others from harm – security depends on the collective efforts of IT users to ensure … to the Nation, the cybersecurity community, and the world regarding security and privacy. Thus, our contributions to cybersecurity go beyond …

Celebrating 50 years of Cybersecurity at NIST

Identity and Access Management at NIST: A Rich History and Dynamic Future

June 10, 2022

Nelson Hastings, Andrew Regenscheid, Hildegard Ferraiolo, David Temoshok, Bill Fisher

… Digital identity for access control is a fundamental and critical cybersecurity capability that ensures the right people and … Identity Verification (PIV) credentials. It began with Homeland Security Presidential Directive 12 (HSPD-12) to establish requirements … initiatives, including the adoption of multi-factor authentication, implementation of mobile driver’s licenses, and foundation for privacy …

Essential Cybersecurity for the Hotel Tech Community

October 26, 2020

Marisa Harriston

… In recent years criminals and other attackers have compromised the networks of several major … organizations and technology vendors to develop an example solution demonstrating how hotels can secure its PMS and its connections … cybersecurity approaches, which include the tenets of zero trust security, moving target defense, tokenization of credit card data, and …

Celebrating 1 Year of CSF 2.0

February 24, 2025

Stephen Quinn

… the NIST Cybersecurity Framework (CSF) 2.0 ! To make improving your security posture even easier, in this blog we are: Sharing new CSF 2.0 resources; Taking a retrospective look at some resources and applications you may have missed; and Highlighting ways you can … have worked over the last year to continue expanding the CSF 2.0 implementation resources to help you secure your enterprise. …

What Does it Mean to Embrace the NSTIC Guiding Principles?

September 11, 2013

… approaches to support a trustmark scheme for the Identity Ecosystem – and other IDESG committees such as standards, security, and privacy contemplate the appropriate requirements – … models and evaluated relative to the NSTIC guiding principles of Security, Privacy, Interoperability and Usability?” One further question …

Putting the Fed in Federation (Part 3): A New Way to Buy Identity Services

February 20, 2014

… by: Dave McClure, Associate Administrator, Office of Citizen Services and Innovative Technologies, GSA; Jeremy Grant, Senior Executive Advisor, Identity Management, NIST; and Randy Miskanic, Vice President Secure Digital Solutions, USPS As … – which NSTIC defines as “an online environment where individuals and organizations are able to trust each other because they follow …

Rounding Up Your IoT Security Requirements: Draft NIST Guidance for Federal Agencies

December 14, 2020

Katerina Megas

… with the goal of ensuring IoT devices are integrated into the security and privacy controls of federal information systems. The comment period … into a federal information system. IoT devices and their support for security controls are presented in the context of organizational and … Rounding Up Your IoT Security Requirements: Draft NIST Guidance for Federal Agencies …

Making Privacy Concrete (Three Words Not Usually Found Together)

January 4, 2017

Sean Brooks, Mike Garcia, Naomi Lefkovitz, Suzanne Lightman, Ellen Nadeau

… NIST Internal Report 8062 , An Introduction to Privacy Engineering and Risk Management in Federal Systems (NISTIR 8062), we are taking a … of discussion. NIST has produced a wealth of guidance on information security risk management (the foundation of which is NIST’s Risk … could help bridge the gap between privacy principles and their implementation in systems. Here’s what we came up with. Lastly, we …

Cybersecurity Awareness Month Blog Image

Cybersecurity Awareness Month: Securing Internet-Connected Devices in Healthcare

October 16, 2020

Nakia Grayson

… industry is increasingly relying upon internet-connected devices and solutions to improve patient care, organizational efficiency, speed … – how did you end up at NIST working on privacy? I am an IT Security Specialist. I joined NIST in 2012 through a clerical staffing … Telehealth Remote Monitoring Patient (RPM) Ecosystem practice guide to provide a reference architecture that will help healthcare …

2016 Year in Review: (TIG-ing stock of) Innovation in the Identity Ecosystem

December 30, 2016

Mike Garcia

… in digital identity this year, we try to keep our eyes on the prize. And there’s been a lot of progress toward the long-term goal. … Identity Ecosystem workshop in January brought together more than 200 security practitioners, identity solution providers, subject matter experts, and policy makers from … Events and Workshops …

Cybersecurity and AI: Integrating and Building on Existing NIST Guidelines

May 6, 2025

Katerina Megas, Victoria Yan Pillitteri

… What is NIST up to? On April 3, 2025, NIST hosted a Cybersecurity and AI Profile Workshop at our National Cybersecurity Center of … tuned for the soon to be released Workshop Summary Report! What about Implementation Guidelines? Community Profiles provide a way for … cybersecurity Frameworks and technical guidelines (specifically the Security and Privacy Controls ) to develop a series of use case-focused, …

Celebrating 50 Years of Cybersecurity at NIST!

February 24, 2022

Kevin Stine

… With each day bringing new cybersecurity challenges and advances, it is easy to understand why people feel like it’s hard to … 1972 | The National Bureau of Standards (NBS) establishes a Computer Security Program. 1974 | NBS publishes its first guide: the pocket Executive Guide to Computer Security, intended for …

Staff Spotlight: NIST Usable Cybersecurity

April 1, 2020

Kristen Greene

… staff in the NIST Information Technology Laboratory’s Visualization and Usability Group (VUG) are conducting studies and publishing findings … actionable guidance so that policymakers, system engineers, and security professionals can make better decisions to keep their … background? Basically, how did you end up at NIST working on usable security projects? I have a master’s degree and Ph.D. in Cognitive …

Internet of things, devices and connectivity concepts on a network, cloud at center

More than just a milestone in the Botnet Roadmap towards more securable IoT devices

May 29, 2020

Katerina Megas

… offer tremendous capabilities to users. Looking around I see more and more ways, especially in a post COVID-19 world, that these devices … than ever. And while cybersecurity is a shared responsibility and the solution will likely require an ecosystem approach, how can IoT devices enable customers’ security goals? Working with industry and other stakeholders, we’ve made …

Help us build a secure future for connected devices: share your feedback on draft NISTIR on core baseline of cybersecurity features

August 8, 2019

Katerina Megas

… (IoT) program as we’ve continued our efforts to engage stakeholders and enlist feedback on several key initiatives. In June, the NIST Cybersecurity for IoT and Privacy Engineering programs published NIST Internal Report ( … to effectively manage their cybersecurity risk and strengthen the security of their devices. We want your feedback! Your feedback, as …

BREAKING NEWS: New Privacy Pilot Federal Funding Opportunity

March 27, 2015

… applicants to pilot privacy-enhancing technologies that embrace and advance the NSTIC vision and contribute to the maturity of the … their online interactions. Despite many recent improvements to the security and usability of online identities, the marketplace continues … design choices could be more effective. Barriers also exist to the implementation of privacy-enhancing technologies (PETs), including …