Search Cybersecurity Insights

Displaying 176 - 200 of 347

Angela Smith

April 3, 2023

… Cybersecurity Supply Chain Risk Management program in the Computer Security Division of the National Institute of Standards and Technology. She also represents NIST on the Federal Acquisition … Senior with GSA where she provided leadership in the development and implementation of GSA’s SCRM program and supported various interagency …

Michaela Iorga

May 12, 2021

… Dr. Michaela Iorga serves as senior security technical lead at the National Institute of Standards and Technology (NIST/ITL). She also co-leads the Open Security Controls Assessment Language (OSCAL) project and chairs the …

James McCarthy

February 3, 2021

… Jim McCarthy is a senior security engineer at the National Institute of Standards and Technology’s National Cybersecurity Center of Excellence (NCCoE). He … data analytics, secure architecture for power delivery systems, IT/OT asset management, and situational awareness for the electric sector. …

Michael Kaiser

October 3, 2017

… Michael Kaiser is the Executive Director of the National Cyber Security Alliance (NCSA). Mr. Kaiser joined the NCSA in 2008. As NCSA’s … Mr. Kaiser engages diverse constituencies—business, government and other nonprofit organizations—in NCSA’s broad public education and … NCSA in several major awareness initiatives, including National Cyber Security Awareness Month (October), Data Privacy Day (Jan. 28) and STOP. …

Get Involved in the National Strategy for Trusted Identities in Cyberspace (NSTIC)

June 29, 2012

… Strategy for Trusted Identities in Cyberspace, calling for the public and private sectors to collaborate on the creation of an “Identity … where individuals can choose from multiple identity providers and digital credentials for more convenient, secure, and … privacy-enhancing transactions anywhere online. This summer, as NSTIC implementation shifts into high gear with the formation of a …

Catch NIST Cybersecurity for IoT & Privacy Engineering Programs at CES

December 20, 2017

Katerina Megas

… NIST’s Cybersecurity for the Internet of Things (IoT) and Privacy Engineering Programs are heading to the Consumer Electronics … Program – is preparing guidance to help federal agencies manage IoT security and privacy risks. This guidance is aimed at considering a practical approach to IoT security and privacy risk management. Overall, NIST’s Cybersecurity for …

NSTIC 2014 Pilot Opportunity Underway!

January 17, 2014

… to support the President’s strategy to improve the privacy, security, and convenience of online transactions through innovation in the … details, click here . Pilots have been an integral part of the NSTIC implementation plan, with NIST looking to fund pilot solutions that can …

Still from Cybersecurity Framework animation

Setting off on the Journey to the NIST Cybersecurity Framework (CSF) 2.0

May 27, 2022

Cherilyn Pascoe

… Over the past few months, NIST has been seeking feedback on the use and improvements to its cybersecurity resources through the Request for … additions to the Framework Core to address governance, supply chain security, secure software, and emerging technologies. The RFI … frameworks and guidance. Additionally, NIST intends to develop implementation guidance for the Framework to provide organizations more …

Fourth and goal: closing in on the Identity Ecosystem Framework

June 26, 2015

… to building the IDEF—which the IDESG has been chartered to establish and govern. As identified in the NSTIC, successful establishment of the … for Identity Ecosystem participants in four key areas: privacy, security and resiliency, interoperability, and user experience. These … to all audiences, but, in particular, is intended to help guide those organizations that intend to perform self-assessments …

Cybersecurity for IoT: The Road We’ve Traveled, The Road Ahead

May 3, 2022

Michael Fagan

… Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks ( NISTIR 8228 ) in June 2019, nearly 3 years ago. … Practices for Systems and Organizations Revision 1 ( SP 800-161r1 ), Guide to Industrial Control Systems (ICS) Security Revision 3 ( SP 800-82r3 ), the Secure Software Development …

Data Analytics for Small Businesses: How to Manage Privacy Risks

January 13, 2023

Meghan Anderson

… with customers, enhance customer experience, save money, and ultimately improve your brand. However, data analytics can have big … as credit cards. As the Venn diagram to the right demonstrates, data security is certainly one aspect of privacy risk, but privacy risks can … Think of the Getting Started with the NIST Privacy Framework: A Guide for Small and Medium Businesses Quick Start Guide as a “speed …

Celebrating 50 years of Cybersecurity at NIST

Cybersecurity Education and Workforce Development: Employer-Driven and Learner-Centered

March 14, 2022

Rodney Petersen

… history of NICE, discusses recent advances in cybersecurity education and workforce development, and shares a few memories from around the … partners on a wide variety of projects, including the National Security Agency’s GenCyber program; the Cybersecurity and Infrastructure Security Agency’s Cybersecurity Education Training and Assistance …

Got trust? Seeking public comment on new NIST publication for developing trust frameworks to support identity federation

September 30, 2016

David Temoshok

… Some communities and organizations that share common user bases and transaction types are addressing challenges to users’ privacy and security by allowing users to access multiple services through common … to verify that their consumers are who they say they are. The default solution up until now has been to require consumers to register and …

Let’s get Digital! Updated Digital Identity Guidelines are Here!

July 21, 2025

Ryan Galluzzo, Connie LaSalle, Andrew Regenscheid

… , Revision 4 is finally here...it’s been an exciting journey and NIST is honored to be a part of it. What can we expect? Serving as … proofing, authentication, and federation—including requirements for security and privacy, as well as considerations for improved customer … certainly does not end with Revision 4. As with previous revisions, implementation resources are already in development, and we are …

Kicking-Off with a December 4th Workshop, NIST is Revisiting and Revising Foundational Cybersecurity Activities for IoT Device Manufacturers, NIST IR 8259!

November 20, 2024

Katerina Megas, Michael Fagan

… efforts needed by customers, which in turn can reduce the prevalence and severity of IoT device compromises and the attacks performed using … the baselines, including a new technical capability (i.e., device security). Profile of the IoT Core Baseline for Consumer IoT Products … Address the different cybersecurity considerations between IT, IoT, OT, and IIoT Identify insights, considerations, approaches, etc. for …

Shaping the NVD for the Future: We Need Your Feedback on AI-Enabled Vulnerability Management

August 12, 2026

Harold Booth, Jon Boyens

… repository for standards-based vulnerability management data and as a foundational resource for cybersecurity risk analysis, … vulnerability management, compliance automation, and software security. New Opportunities for the NVD via Automation Our cybersecurity … transparency, and utility — modernizing it for the future. To guide this transformation, NIST released a Request for Information (RFI) …

How to deploy machine learning with differential privacy

December 17, 2021

Nicolas Papernot, Abhradeep Guha Thakurta

… the final guest authors in our blog series, Nicolas Papernot and Abhradeep Thakurta, research scientists at Google Brain, whose … of differential privacy to machine learning. - Joseph Near and David Darais Previous posts in this series have explored … model and replace a non-private optimizer with DP-SGD. An example implementation of PATE is also available in TensorFlow Privacy. So what …

Phishing Resistance – Protecting the Keys to Your Kingdom

January 31, 2023

Andrew Regenscheid, Ryan Galluzzo

… have probably heard the term “phishing.” Never in a positive context…and possibly because you have been a victim yourself. Phishing refers to … Government Toward Zero Trust Cybersecurity Principles” prioritizes implementation of phishing resistant authenticators ( citation 3) . … (for example your phone or laptop). Availability, practicality, and security of these “platform authenticators” increasingly puts strong, …

Introducing the New Small Business Cybersecurity Support Program Finder

October 5, 2026

Daniel Eliot

… often confronted with limited resources, knowing how to get started and where to find support with planning, implementing, or evaluating a … share business insights, expertise, challenges, and perspectives to guide our work and assist NIST in addressing the cybersecurity needs of … 2026, from 2:00-3:00pm ET to provide an overview of the new Assessing Security Requirements for Controlled Unclassified Information (CUI): …

Cybersecurity Awareness Month: If You Connect IT, Protect IT.

October 5, 2020

Danielle Santos

… for Cybersecurity Education, or NICE . As the line between our online and offline lives continues to be indistinguishable, the network of … this blog post, Ms. Santos explains how everyone can take the right security steps to reduce their cybersecurity risks and opportunities for … After graduating, I started my career with the Department of Homeland Security in their Cybersecurity Stakeholder Engagement and Outreach …

Cybersecurity Awareness Month: Cybersecurity First

September 16, 2021

Marian Merritt

… Awareness Month is from NIST’s Marian Merritt, Deputy Director and Lead for Industry Engagement for the National Initiative for … in the NIST Cybersecurity Framework and we have a quick start guide to break down those activities in a way we think any small … as an intern to help get a program in place quickly. October is Cyber Security Awareness Month and a great time to get started by sharing …

Differential Privacy: Future Work & Open Challenges

January 10, 2022

Joseph Near, David Darais

… of the open challenges in the practical use of differential privacy, and conclude with a summary of contexts where differential privacy is already ready for deployment and what comes next. Setting the Privacy Parameter The impact of the … parameter is simple: smaller values of ε yield better privacy, and larger values yield worse privacy. But there’s one very important …

Atlanta IDESG Plenary Recap: Pilots, Progress, and the Value of Trustmarks

January 31, 2014

… in Chicago. The phrase of the week for over 200 total in-person and virtual attendees this month at the Identity Ecosystem Steering … sights on a challenge laid down by and a senior White House cyber security official in the opening keynote: develop a trustmark scheme by … from Andy Ozment, Senior Director for Cybersecurity on National Security Staff at the White House, where Andy reinforced the importance …

Banner with a cityscape and pictures of cybersecurity-related imagery

Kicking off NIST's Cybersecurity Awareness Month Celebration & Our Cybersecurity Awareness Month 2023 Blog Series

October 2, 2023

David Temoshok

… an exciting time for us as we celebrate Cybersecurity Awareness Month and some of NIST’s greatest accomplishments, resources, guidance, and … online services require multi-factor authentication as a critical security control and privacy protection. We work closely with federal … accounts online. The key thing to do today to enhance your online security is to enable multi-factor authentication. What is NIST …

Welcome to the World, NIST Privacy Framework 1.0!

January 27, 2020

Naomi Lefkovitz, Kaitlin Boeckl

… Practice Principles (FIPPs) were still viable in a world of Big Data and emerging technologies like Internet of Things and artificial … legal requirements, and PETs; we’ve had to follow the path that security experts set out upon many years before to figure out how to … and demonstrate the connection between principles and methods of implementation rather than simply create one more restatement of the …