U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Cybersecurity Insights

a NIST blog

Search Cybersecurity Insights

Put exact phrase in quotes (e.g., "information technology")
Displaying 201 - 225 of 347
Cybersecurity Awareness Blog 2022 Image

Cybersecurity Awareness Month 2022: Recognizing & Reporting Phishing

September 28, 2022
Marian Merritt
… (NICE)! Marian will be discussing the importance of recognizing and reporting phishing incidents in detail. A phishing attack is an … Learn more with the NIST Cybersecurity Framework: A Quick Start Guide . Protect - Passwords and Multi-Factor Authentication – Use every … Use physical tokens and other methods to keep upping the levels of security to make sure only the right people get into the systems and the …

NIST Expands Collaboration at RSA Conference 2022

June 25, 2022
Kristina Rigopoulos
… gathered to view presentations, visit booths on the expo floor, and network with other industry professionals. The high-level cybersecurity event attracts top organizations and leading experts, playing an integral role in connecting and … AI Testbed New Guidelines for Enhancing Software Supply Chain Security Under EO 14028 Caterpillars to Butterflies: Transforming the …

Discovering Careers in Cybersecurity

November 19, 2019
Davina Pruitt-Mentle
… Career Awareness Week (NCCAW), November 11-16, 2019. Technology and cybersecurity play a vital role in many facets of our lives. Our … 313,735 cybersecurity job openings across the nation. Information security jobs are expected to increase by 28 percent through 2026, … a national cybersecurity workforce enhances America’s national security and promotes economic prosperity.  What Is Career Awareness? …
Bronwyn Patrick

Bronwyn Patrick

July 30, 2025
… MITRE Senior Cybersecurity Engineer and AI/ML security researcher. She is passionate about protecting complex systems and advancing secure innovation and has worked at the intersection of …
Eduardo Takamura

Eduardo Takamura

September 18, 2024
… Ed Takamura is a security researcher and a member of the NIST Risk Management Framework (RMF) Team at NIST. … service as ISSO for a NASA mission to Mars, the opportunity to serve security professionals and their supporting contractors across the …

Updates on NIST’s Interagency International Cybersecurity Standardization Working Group

February 28, 2024
Lisa Carnahan
… Since then, IICSWG has grown as a forum to discuss cybersecurity and privacy standardization topics, examine the overall cybersecurity … Standardization to Achieve U.S. Objectives for Cybersecurity ), and provide a deep dive into IoT cybersecurity standards ( NISTIR 8200 - … into international standards. The National Cybersecurity Strategy Implementation Plan called upon NIST to reconvene with IICSWG to assist …
Paul Watrobski

Paul Watrobski

October 17, 2023
… Paul Watrobski is an IT Security Specialist in the Applied Cybersecurity Division (ACD) of the … (PI) for the  Trusted IoT Device Network-Layer Onboarding and Lifecycle Management  project and the upcoming  Software Supply Chain and DevOps Security Practices  project. He previously  participated in the Securing …
Murugiah Souppaya

Murugiah Souppaya

June 15, 2023
… Murugiah Souppaya is a computer scientist in the Computer Security Division of the Information Technology Laboratory at the National Institute of Standards and Technology.  He advocates the adoption of modern secure technology … by collaborating with industry partners to research, engineer, and build practical cybersecurity solutions, and develop associated …
Bill Newhouse headshot

Bill Newhouse

September 30, 2022
… Technology Laboratory at the National Institute of Standards and Technology (NIST). His work pushes for the adoption of functional … communities of interest with members from industry, academia, and government to gain insight and passion about the areas of cybersecurity risk that need to be …
Stephen Quinn

Stephen Quinn

June 28, 2022
… Mr. Stephen Quinn joined the National Institute of Standards and Technology (NIST) in 2004 and serves as a senior computer scientist … Reference (OLIR) programs at NIST.  He is a co-originator of the NIST Security Content Automation Protocol (SCAP) . Stephen was named to the … Department of Commence Gold Medal Award for his work in automating security protocols for applications. He also received the Federal CIO …
Keith Stouffer Image

Keith Stouffer

June 8, 2021
… Keith Stouffer is a supervisory mechanical engineer and has been at the National Institute of Standards and Technology since 1989, focusing on industrial control system (ICS) and OT cybersecurity since 2000. He leads the Cybersecurity for Operational … NIST Special Publication 800-82, Guide to Operational Technology (OT) Security, which provides guidance on how to secure OT while addressing …
David Temoshok

David Temoshok

September 28, 2017
… Advisor Applied Cybersecurity for the National Institute of Standards and Technology. In this capacity, Mr. Temoshok is responsible for the development and implementation of United States national and international standards …
Suzanne Lightman

Suzanne Lightman

September 28, 2017
… Suzanne Lightman has over a decade of experience in information security policy in positions all over the government, as well as in the private sector.  She has held positions in both the legislative and executive branches which gives her a unique perspective on the development and implementation of government policy. Currently, Ms. Lightman is a Senior …

NSTIC Federal Funding Opportunity: Evaluate the NSTIC State Government Pilots

May 20, 2013
… of the Identity Ecosystem, specifically by helping us identify and make available to our broad community of stakeholders key lessons … applications from eligible applicants to evaluate the benefits and impacts of identity solutions for accessing government services that embrace and advance the NSTIC vision: that individuals and organizations utilize …

The NSTIC 2013 Pilot Opportunity Has Launched!

January 30, 2013
… to support the President’s strategy to improve the privacy, security, and convenience of online transactions through innovation in the … details, click here . Pilots have been an integral part of the NSTIC implementation plan, with NIST looking to fund pilot solutions that can …

Coming Soon: New NSTIC Pilots Opportunity for the New Year

January 8, 2013
… barriers to the identity ecosystem. As we wrap up this holiday season and enter the new year, we wanted to talk not of the pilots past and present, but about the pilots yet to come. The NSTIC National … The size of this round of pilot awards is not yet certain; full implementation of the program and issuance of awards will be subject to …

The IDESG hits a big milestone on the road to creating the Identity Ecosystem Framework

March 19, 2015
Jeremy Grant
… the upcoming IDEF – due out this summer – will enable individuals and organizations to start using a new generation of more secure, … overarching set of interoperability standards, risk models, privacy and liability policies, requirements, and accountability mechanisms that … Over the last year, four IDESG committees (privacy, user experience, security, and standards)—each of which is dedicated to building parts of …

Protecting Model Updates in Privacy-Preserving Federated Learning: Part Two

May 2, 2024
David Darais, Joseph Near, Mark Durkee, Dave Buckley
… models on different columns of the data (but overlapping rows ) and then compose them afterwards. Instead, we need methods to be able to … compute financial aid statistics without revealing students’ social security numbers.   Some PSI approaches reveal only the number of … team from the US side of the  UK-US PETs Prize Challenges . Their solution is shown in Figure 2.   In the first step, feature mining is …

Celebrating Two Years of CSF 2.0!

February 23, 2026
Stephen Quinn
… on cybersecurity supply chain risk management, updated categories and subcategories to address current threat and technology shifts, and expansion into a suite of resources designed to make the CSF 2.0 …

Kicking off Cybersecurity Career Week with NIST!

October 14, 2026
Susana Barraza
… at NIST from October 19-24, 2026, aims to raise public awareness and help people find their path to #ChooseCyber. During this week, academia, industry, non-profit organizations, and government agencies host events, share resources, provide trainings, … showcase how building a cybersecurity workforce enhances the Nation’s security and promotes economic prosperity. How to get started Be ready …

Digital Identities: Getting to Know the Verifiable Digital Credential Ecosystem

December 16, 2025
Bill Fisher, Ryan Galluzzo, Heather Flanagan
… VDC ecosystem as technology that can change how we present identity and attributes (both in person and online). While credential variety is … And because digital credentials often intersect with regulation, security, privacy, and user experience, organizations may need to … for identity verification and online account creation, while ensuring security and privacy. As part of this project, the NCCoE worked with a …
Image representing the EXECUTIVE ORDER 14028, IMPROVING THE NATION'S CYBERSECURITY

Hot Topics in Consumer Cybersecurity Labeling – Our December 2021 Workshop

January 10, 2022
Katerina Megas
… among other things, tasked NIST to develop cybersecurity criteria and labeling approaches for consumer software and Internet of Things … the goals of labeling, types of labels, and NIST’s preferred solution – for both consumer IoT products and consumer software – of a … approach of including risk as an important element in guiding the implementation of labeling schemes. Questions in this area related to …
differential privacy blog series banner

Automatic Proofs of Differential Privacy

July 8, 2021
Chike Abuah
… expands the state of the art in the subject of this blog post: static and dynamic analysis approaches to automatic proofs of differential … we have discussed some differentially private algorithms and implementation bugs which can cause these algorithms to fail to protect … taint analysis, which has historically been used to enforce other security properties such as information control flow (confidentiality, …
Was this page helpful?