U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cybersecurity Insights

a NIST blog

Search Cybersecurity Insights

Put exact phrase in quotes (e.g., "information technology")
Displaying 176 - 200 of 337

Catch NIST Cybersecurity for IoT & Privacy Engineering Programs at CES

December 20, 2017
Katerina Megas
… NIST’s Cybersecurity for the Internet of Things (IoT) and Privacy Engineering Programs are heading to the Consumer Electronics … Program – is preparing guidance to help federal agencies manage IoT security and privacy risks. This guidance is aimed at considering a practical approach to IoT security and privacy risk management. Overall, NIST’s Cybersecurity for …

NSTIC 2014 Pilot Opportunity Underway!

January 17, 2014
… to support the President’s strategy to improve the privacy, security, and convenience of online transactions through innovation in the … details, click here . Pilots have been an integral part of the NSTIC implementation plan, with NIST looking to fund pilot solutions that can …
Still from Cybersecurity Framework animation

Setting off on the Journey to the NIST Cybersecurity Framework (CSF) 2.0

May 27, 2022
Cherilyn Pascoe
… Over the past few months, NIST has been seeking feedback on the use and improvements to its cybersecurity resources through the Request for … additions to the Framework Core to address governance, supply chain security, secure software, and emerging technologies. The RFI … frameworks and guidance. Additionally, NIST intends to develop implementation guidance for the Framework to provide organizations more …

Fourth and goal: closing in on the Identity Ecosystem Framework

June 26, 2015
… to building the IDEF—which the IDESG has been chartered to establish and govern. As identified in the NSTIC, successful establishment of the … for Identity Ecosystem participants in four key areas: privacy, security and resiliency, interoperability, and user experience. These … to all audiences, but, in particular, is intended to help guide those organizations that intend to perform self-assessments …

Cybersecurity for IoT: The Road We’ve Traveled, The Road Ahead

May 3, 2022
Michael Fagan
… Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks ( NISTIR 8228 ) in June 2019, nearly 3 years ago. … Practices for Systems and Organizations Revision 1 ( SP 800-161r1 ), Guide to Industrial Control Systems (ICS) Security Revision 3 ( SP 800-82r3 ), the Secure Software Development …

Data Analytics for Small Businesses: How to Manage Privacy Risks

January 13, 2023
Meghan Anderson
… with customers, enhance customer experience, save money, and ultimately improve your brand. However, data analytics can have big … as credit cards. As the Venn diagram to the right demonstrates, data security is certainly one aspect of privacy risk, but privacy risks can … Think of the Getting Started with the NIST Privacy Framework: A Guide for Small and Medium Businesses Quick Start Guide as a “speed …

Got trust? Seeking public comment on new NIST publication for developing trust frameworks to support identity federation

September 30, 2016
David Temoshok
… Some communities and organizations that share common user bases and transaction types are addressing challenges to users’ privacy and security by allowing users to access multiple services through common … to verify that their consumers are who they say they are. The default solution up until now has been to require consumers to register and …

Let’s get Digital! Updated Digital Identity Guidelines are Here!

July 21, 2025
Ryan Galluzzo, Connie LaSalle, Andrew Regenscheid
… , Revision 4  is finally here...it’s been an exciting journey and NIST is honored to be a part of it.  What can we expect? Serving as … proofing, authentication, and federation—including requirements for security and privacy, as well as considerations for improved customer … certainly does not end with Revision 4. As with previous revisions, implementation resources are already in development, and we are …

Kicking-Off with a December 4th Workshop, NIST is Revisiting and Revising Foundational Cybersecurity Activities for IoT Device Manufacturers, NIST IR 8259!

November 20, 2024
Katerina Megas, Michael Fagan
… efforts needed by customers, which in turn can reduce the prevalence and severity of IoT device compromises and the attacks performed using … the baselines, including a new technical capability (i.e., device security). Profile of the IoT Core Baseline for Consumer IoT Products … Address the different cybersecurity considerations between IT, IoT, OT, and IIoT  Identify insights, considerations, approaches, etc. for …
differential privacy blog series banner

How to deploy machine learning with differential privacy

December 17, 2021
Nicolas Papernot, Abhradeep Guha Thakurta
… the final guest authors in our blog series, Nicolas Papernot and Abhradeep Thakurta, research scientists at Google Brain, whose … of differential privacy to machine learning. - Joseph Near and David Darais Previous posts in this series have explored … model and replace a non-private optimizer with DP-SGD. An example implementation of PATE is also available in TensorFlow Privacy. So what …

Phishing Resistance – Protecting the Keys to Your Kingdom

January 31, 2023
Andrew Regenscheid, Ryan Galluzzo
… have probably heard the term “phishing.” Never in a positive context…and possibly because you have been a victim yourself. Phishing refers to … Government Toward Zero Trust Cybersecurity Principles” prioritizes implementation of phishing resistant authenticators ( citation 3) .    … (for example your phone or laptop). Availability, practicality, and security of these “platform authenticators” increasingly puts strong, …

Cybersecurity Awareness Month: If You Connect IT, Protect IT.

October 5, 2020
Danielle Santos
… for Cybersecurity Education, or NICE . As the line between our online and offline lives continues to be indistinguishable, the network of … this blog post, Ms. Santos explains how everyone can take the right security steps to reduce their cybersecurity risks and opportunities for … After graduating, I started my career with the Department of Homeland Security in their Cybersecurity Stakeholder Engagement and Outreach …
CSAM 2021 Blog Image

Cybersecurity Awareness Month: Cybersecurity First

September 16, 2021
Marian Merritt
… Awareness Month  is from NIST’s Marian Merritt, Deputy Director and Lead for Industry Engagement for the National Initiative for … in the NIST Cybersecurity Framework and we have a quick start guide to break down those activities in a way we think any small … as an intern to help get a program in place quickly. October is Cyber Security Awareness Month and a great time to get started by sharing …
differential privacy blog series banner

Differential Privacy: Future Work & Open Challenges

January 10, 2022
Joseph Near, David Darais
… of the open challenges in the practical use of differential privacy, and conclude with a summary of contexts where differential privacy is already ready for deployment and what comes next. Setting the Privacy Parameter The impact of the … parameter is simple: smaller values of ε yield better privacy, and larger values yield worse privacy. But there’s one very important …

Atlanta IDESG Plenary Recap: Pilots, Progress, and the Value of Trustmarks

January 31, 2014
… in Chicago.  The phrase of the week for over 200 total in-person and virtual attendees this month at the Identity Ecosystem Steering … sights on a challenge laid down by and a senior White House cyber security official in the opening keynote: develop a trustmark scheme by … from Andy Ozment, Senior Director for Cybersecurity on National Security Staff at the White House, where Andy reinforced the importance …
Banner with a cityscape and pictures of cybersecurity-related imagery

Kicking off NIST's Cybersecurity Awareness Month Celebration & Our Cybersecurity Awareness Month 2023 Blog Series

October 2, 2023
David Temoshok
… an exciting time for us as we celebrate Cybersecurity Awareness Month and some of NIST’s greatest accomplishments, resources, guidance, and … online services require multi-factor authentication as a critical security control and privacy protection. We work closely with federal … accounts online. The key thing to do today to enhance your online security is to enable multi-factor authentication.   What is NIST …

Welcome to the World, NIST Privacy Framework 1.0!

January 27, 2020
Naomi Lefkovitz, Kaitlin Boeckl
… Practice Principles (FIPPs) were still viable in a world of Big Data and emerging technologies like Internet of Things and artificial … legal requirements, and PETs; we’ve had to follow the path that security experts set out upon many years before to figure out how to … and demonstrate the connection between principles and methods of implementation rather than simply create one more restatement of the …
Cybersecurity Awareness Blog 2022 Image

Cybersecurity Awareness Month 2022: Recognizing & Reporting Phishing

September 28, 2022
Marian Merritt
… (NICE)! Marian will be discussing the importance of recognizing and reporting phishing incidents in detail. A phishing attack is an … Learn more with the NIST Cybersecurity Framework: A Quick Start Guide . Protect - Passwords and Multi-Factor Authentication – Use every … Use physical tokens and other methods to keep upping the levels of security to make sure only the right people get into the systems and the …

NIST Expands Collaboration at RSA Conference 2022

June 25, 2022
Kristina Rigopoulos
… gathered to view presentations, visit booths on the expo floor, and network with other industry professionals. The high-level cybersecurity event attracts top organizations and leading experts, playing an integral role in connecting and … AI Testbed New Guidelines for Enhancing Software Supply Chain Security Under EO 14028 Caterpillars to Butterflies: Transforming the …

Discovering Careers in Cybersecurity

November 19, 2019
Davina Pruitt-Mentle
… Career Awareness Week (NCCAW), November 11-16, 2019. Technology and cybersecurity play a vital role in many facets of our lives. Our … 313,735 cybersecurity job openings across the nation. Information security jobs are expected to increase by 28 percent through 2026, … a national cybersecurity workforce enhances America’s national security and promotes economic prosperity.  What Is Career Awareness? …
Bronwyn Patrick

Bronwyn Patrick

July 30, 2025
… MITRE Senior Cybersecurity Engineer and AI/ML security researcher. She is passionate about protecting complex systems and advancing secure innovation and has worked at the intersection of …
Eduardo Takamura

Eduardo Takamura

September 18, 2024
… Ed Takamura is a security researcher and a member of the NIST Risk Management Framework (RMF) Team at NIST. … service as ISSO for a NASA mission to Mars, the opportunity to serve security professionals and their supporting contractors across the …

Updates on NIST’s Interagency International Cybersecurity Standardization Working Group

February 28, 2024
Lisa Carnahan
… Since then, IICSWG has grown as a forum to discuss cybersecurity and privacy standardization topics, examine the overall cybersecurity … Standardization to Achieve U.S. Objectives for Cybersecurity ), and provide a deep dive into IoT cybersecurity standards ( NISTIR 8200 - … into international standards. The National Cybersecurity Strategy Implementation Plan called upon NIST to reconvene with IICSWG to assist …
Was this page helpful?