U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cybersecurity Insights

a NIST blog

Search Cybersecurity Insights

Put exact phrase in quotes (e.g., "information technology")
Displaying 151 - 175 of 337

Staff Stories Spotlight Series: Cybersecurity Awareness Month 2024

September 6, 2024
Susana Barraza
… staff members who have interesting backgrounds, stories to tell, and projects in the world of cybersecurity.    This year’s Cybersecurity … cybersecurity, I see firsthand the importance of extending awareness and education to all communities, particularly those with limited … the most vulnerable to cyber attacks like phishing, identity theft, and online scams. By building a diverse and well-trained cybersecurity …

Putting the Fed in Federation: The U.S. Government as Early Adopter of the Identity Ecosystem

February 1, 2013
… to govern the Identity Ecosystem. Check . Run pilots to test the implementation of the NSTIC Guiding Principles against working business … time - predating the existence of the NPO. No matter the elegance and simplicity of federated identity as a concept, we all know that it … of a pilot - put out an RFP for a supplier to provide the FCCX solution. Already, the marketplace is responding as we see renewed …
Highly detailed planet Earth at night, lit by the rising sun, illuminated by light of cities. Earth is surrounded by a luminous network, representing the major air routes based on real data

Virtual Events Amplify NIST’s Cybersecurity and Privacy International Engagements

September 13, 2021
Amy Mahn
… May, along with our co-hosts from the Center for Cybersecurity Policy and Law.  The event on May 25 drew registrants from over 70 countries … discussion with speakers from Microsoft, NTT, the National Cyber Security Centre Ireland, and NIST focusing on the release of Technical … included a fireside chat with participants from the National Cyber Security Centre UK, the Global Forum on Cyber Expertise Foundation, and …

NIST’s International Cybersecurity and Privacy Engagement Update – Trade Missions, Workshops, and Translations

November 20, 2023
Amy Mahn
… at the end of October — but the importance of enhancing cybersecurity and engaging with our international partners to enhance cybersecurity is … workshops, virtually and in person, with Vietnam and Pacific Cyber Security Operational Network (PaCSON) participants during the month of … NIST participated in the Latin America (LATAM) Chief Information Security Officer (CISO) Summit in Madrid, Spain, October 2 and 3 and …

NIST and RSAC 2020: Back in our Element

February 21, 2020
Kristina Rigopoulos
… Booth #2438 in the South Expo as we share demos, chat with attendees, and discuss hot topics in the cybersecurity world during our expert-led … will discuss the NIST Privacy Framework through two early adopter implementation use cases, talk about the challenges and successes, and … example implementations of a Manufacturer Usage Description (MUD) solution for cybersecurity attacks on Internet of Things (IoT) devices   …
Global Communication Digital Device Information Concept

Help Celebrate Data Privacy Week & NIST Privacy Framework’s 2nd Birthday!

January 25, 2022
Naomi Lefkovitz
… , an international awareness initiative led by the National Cyber Security Alliance to help spread awareness about online privacy. NIST is … Advisor in NIST’s Information Technology Lab. Here is what we asked—and what she had to say: Can you please explain what the NIST Privacy … number of resources that we’ve been able to make available to support implementation of the framework. Our Learning Center houses a quick …

Return of the Great Zoltan! Our 800-63 FAQs answer life’s most perplexing questions (about digital identity, anyway).

July 27, 2017
Paul Grassi
… released  Special Publication 800-63 : Digital Identity Guidelines , and we have been thrilled by all the positive feedback – we are glad you … we promised we’d put stakeholders in more control of the writing and position ourselves to be more hands-on in getting solutions implemented. For the latter, we’ve begun our work on the implementation guides, and today we’re releasing a simple little …

Passwords, Dr. Evil and a Solution in Tampa

August 13, 2014
… matter.  1.2 billion compromised passwords is a remarkably stunning and shocking number. It’s also one that has inspired a wave of articles … In the short term, there aren’t any silver bullets: nobody likes the security or usability of passwords, but we’ve had them for a long time … carry a different doohickey around for each of your passwords. The solution to that is obvious: just have one that works for lots of …
differential privacy blog series banner

Privacy-Enhancing Cryptography to Complement Differential Privacy

November 1, 2021
Luís T.A.N. Brandão, René Peralta
… aspects of differential privacy: what it is, what it is useful for, and how it is applied to data analysis problems. All of those ideas can … , as explained in a previous post . Central DP compromises on security, by requiring a potentially hackable curator to serve as … cryptography tools, including PIR, PSI, and SMPC. A typical implementation benefit is that it enables solutions with minimal …

Stronger Cybersecurity, Stronger Business: NIST Celebrates 2026 National Small Business Week

April 30, 2026
Daniel Eliot
… to acknowledge the critical contributions of America’s entrepreneurs and small business owners. Part of the U.S. Department of Commerce, … share business insights, expertise, challenges, and perspectives to guide NIST’s work and assist NIST in addressing the cybersecurity needs … published in 2009 as NIST IR 7621, Small Business Information Security : The Fundamentals . Helping SMBs Do Business Internationally …
Image of small business/shops

Small Businesses Are a Big Priority for NIST

May 7, 2020
Marian Merritt
… my spare time, I have been casually researching my family genealogy, and like many of us, I’ve discovered I come from a long line of small … am so intrigued by the incredible range of work we do here at NIST to guide the nation’s business activities with useful standards and … Federal Bureau of Investigation and Department of Homeland Security (to name a few) to ensure our articles, research, and best …

NSTIC Pilot Common Considerations 3: Risk Assessment Methodologies and Authentication Strength

April 25, 2013
… up NSTIC pilots focused on advancing the NSTIC vision, objectives and guiding principles, demonstrating innovative frameworks that can … identity assurance than the “standard” four levels provides more implementation flexibility, but it also inhibits interoperability in … In which IDESG Committees should risk assessment be discussed?   Security, Standards, Sector-Specific Committees? 3)      How granular …

REGISTER NOW: Privacy Controls Workshop on next steps for NIST SP 800-53, Appendix J!

August 17, 2016
… We’re pleased to announce that on September 8, 2016, NIST and the Department of Transportation will hold a technical workshop on … Appendix J…and registration is now open ! Workshop participation from security and privacy engineers, privacy subject matter experts, and … security controls, and the need for additional NIST guidance on the implementation of controls in privacy risk management processes to …
birthday boy

Happy First Birthday, NIST Privacy Framework!

January 12, 2021
Naomi Lefkovitz
… G rab a cupcake or several—no judgment—and join us in celebrating the first birthday of the NIST Privacy … ! Here at NIST, we feel like proud parents supporting the framework’s implementation over the past year, listening to all the amazing things … the recent release of NIST Special Publication 800-53, Revision 5, Security and Privacy Controls for Information Systems and Organizations …
Picture of a person's face

Jody Jacobs

September 27, 2023
… Jody Jacobs is a Computer Scientist in the Visualization and Usability Group  at the National Institute of Standards and … research interests include user susceptibility to phishing attacks, security adoption, and security awareness. Previously she spent over 20 years working in the …
Headshot Image

Dr. Amit Elazari

April 3, 2023
… Policy at Intel, Lecturer at the UC Berkeley Master in Cybersecurity and Reichman University, Israel, and an External Advisor for the Center … of Intel .  At Intel, she is responsible for executing Intel’s global security policy. Elazari participates in international standardization, … currently serving as co-editor of ISO/IEC 27402, baseline security and privacy requirements for IoT devices. She also chairs the …
Headshot image

Angela Smith

April 3, 2023
… Cybersecurity Supply Chain Risk Management program in the Computer Security Division of the National Institute of Standards and Technology.  She also represents NIST on the Federal Acquisition … Senior with GSA where she provided leadership in the development and implementation of GSA’s SCRM program and supported various interagency …
Michaela Iorga

Michaela Iorga

May 12, 2021
… Dr. Michaela Iorga serves as senior security technical lead at the National Institute of Standards and Technology (NIST/ITL). She also co-leads the Open Security Controls Assessment Language (OSCAL) project and chairs the …
James McCarthy Image

James McCarthy

February 3, 2021
… Jim McCarthy is a senior security engineer at the National Institute of Standards and Technology’s National Cybersecurity Center of Excellence (NCCoE). He … data analytics, secure architecture for power delivery systems, IT/OT asset management, and situational awareness for the electric sector. …

Michael Kaiser

October 3, 2017
… Michael Kaiser is the Executive Director of the National Cyber Security Alliance (NCSA). Mr. Kaiser joined the NCSA  in 2008. As NCSA’s … Mr. Kaiser engages diverse constituencies—business, government and other nonprofit organizations—in NCSA’s broad public education and … NCSA in several major awareness initiatives, including National Cyber Security Awareness Month (October), Data Privacy Day (Jan. 28) and STOP. …

Get Involved in the National Strategy for Trusted Identities in Cyberspace (NSTIC)

June 29, 2012
… Strategy for Trusted Identities in Cyberspace, calling for the public and private sectors to collaborate on the creation of an “Identity … where individuals can choose from multiple identity providers and digital credentials for more convenient, secure, and … privacy-enhancing transactions anywhere online. This summer, as NSTIC implementation shifts into high gear with the formation of a …
Was this page helpful?