BaselineWatch
8704 unread
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in
Register Tracker canaries (EasyPrivacy) 202610271409: first version Tue 27 Oct·Ad canaries (EasyList) 202610271405: 2 changed Tue 27 Oct·NIST SP 800-171 Rev 3 (CUI; CMMC Level 2) OSCAL 1.1.0: first version Thu 22 Oct·the register

News · NIST CSRC drafts open for comment

All News Vendor advisories Known exploited Notable CVEs Releases Unread only
  • NIST CSRC drafts open for comment

    SP 800-221 Rev. 1, Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk PortfolioInitial Public Draft

    Submit Your Feedback The public comment period is open through December 7, 2026, at 11:59 PM EST. We encourage you to use this comment template when preparing and submitting your response. About the Publication Enterprise information and communications technology risk management (ICTRM) spans and integrates a broad set of disciplines including cybersecurity, privacy, supply chain, operational technology, Internet of Things, and super intelligence. This publication promotes an integrated approach to ICT risk—aggregating and normalizing risk information across domains. Doing so allows organizat…

  • NIST CSRC drafts open for comment

    SP 800-100 Rev. 1, Information Security Handbook: A Guide for Executive LeadershipInitial Public Draft

    The initial public draft (ipd) of NIST Special Publication (SP) 800-100r1 (Revision 1), Information Security Handbook: A Guide for Executive Leadership, is now available for comment. Since the original version of SP 800-100 was released in 2006, the cybersecurity landscape, regulatory environment, and NIST’s body of guidelines have changed substantially. This revision restructures the handbook to align with the general organization of the NIST Cybersecurity Framework (CSF) 2.0 and provides high-level summaries of key cybersecurity topics, including governance, risk management, information exc…

  • NIST CSRC drafts open for comment

    SP 800-185 Rev. 1, SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHashInitial Public Draft

    Revision 1 introduces streaming interfaces for extendable-output function (XOF) computations, which allow applications to process input and request output incrementally without knowing the total input or output length in advance. From the Note to Reviewers (p. v): The Keccak-derived functions in this recommendation have been updated to describe a streaming mode of access that provides full XOF functionality. This involves calls to three functions: INIT, ABSORB, and SQUEEZE. Illustrative pseudocode is provided for the streaming interface, but the correct behavior of all streaming modes is defi…

  • NIST CSRC drafts open for comment

    CSWP 36G, False Base Station: Applying 5G Cybersecurity and Privacy CapabilitiesInitial Public Draft

    This initial public draft details how the availability of inexpensive, off-the-shelf hardware and software tools allows attackers to mimic legitimate carrier equipment to intercept and disrupt cellular communications. The paper evaluates how 5G devices respond to six simulated false base station scenarios and examines protections available to mitigate risks. Background This white paper is part of the NCCoE’s work to accelerate the adoption of 5G security features by demonstrating their implementation on NCCoE’s operational 5G security testbed and providing actionable implementation guidelines…

  • NIST CSRC drafts open for comment

    SP 800-82 Rev. 4, Guide to Operational Technology (OT) SecurityInitial Public Draft

    This report provides guidelines for improving the security of Operational Technology (OT) systems while addressing their unique performance, reliability, and safety requirements. OT encompasses a broad range of programmable systems or devices that interact with the physical environment (or manage devices that interact with the physical environment). These systems/devices detect or cause a direct change through the monitoring and/or control of devices, processes, and events. Examples include industrial control systems (ICS), building automation systems, transportation systems, physical access…

  • NIST CSRC drafts open for comment

    IR 8623, Cybersecurity Framework 2.0 Community Profile for Federal Agency Open Radio Access Network (O-RAN) DeploymentInitial Public Draft

    Federal agencies that deploy an Open Radio Access Network (O-RAN) as part of their infrastructure must include that deployment in their risk management programs. This draft Cybersecurity Framework (CSF) 2.0 profile describes how components that conform to the security specifications produced by the O-RAN ALLIANCE support various CSF 2.0 outcomes. It also includes references to O-RAN ALLIANCE-produced documents and other relevant guidelines that may help federal agency cybersecurity managers.

  • NIST CSRC drafts open for comment

    SP 800-38E Rev. 1, Recommendation for Block Cipher Modes of Operation: XTS-AES Mode for Confidentiality on Storage DevicesInitial Public Draft

    Revision 1 updates the referenced specification to IEEE Std. 1619-2025 and clarifies NIST’s requirements for the approved use of XTS-AES, including its scope of use, data-unit and key-scope limits, key requirements, and the ordering convention for ciphertext stealing. Rather than reproducing the XTS-AES specification, this recommendation incorporates IEEE Std. 1619-2025 by reference. To facilitate review of the draft SP, IEEE Std. 1619-2025 is publicly available during the public comment period. The public comment period is open through October 16, 2026. NOTE: A call for patent claims is incl…

  • NIST CSRC drafts open for comment

    SP 800-213A Rev. 1, PRE-DRAFT Call for Comments: IoT Device Cybersecurity Requirement CatalogInitial Preliminary Draft

    Following the publication of draft revision IoT Product Cybersecurity Guidelines for the Federal Government: Establishing IoT Product Cybersecurity Requirements, NIST SP 800-213 Rev. 1, NIST has initiated the process of revising the companion document IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog, NIST SP 800-213A, to incorporate lessons learned, align with relevant NIST guidance (e.g., Cybersecurity Framework (CSF) 2.0, NIST SP 800-53 Rev. 5.2.0)—as well as IoT cybersecurity standards and practices, and address changes in the IoT t…

  • NIST CSRC drafts open for comment

    SP 1353, NIST Cybersecurity Framework 2.0: Quick-Start Guide for Using Artificial Intelligence (AI) for CSF Analysis and ReportingInitial Public Draft

    Per the Sept. 29, 2026, Executive Order on Inaugurating the Era of Super Intelligence, NIST is working to update its communications to incorporate the term “super intelligence” as directed. This new quick-start guide illustrates practical and actionable ways AI could be used for analyzing, planning, implementing, and monitoring an organization’s progress toward achieving CSF 2.0 outcomes. The document’s purpose is to: Provide structured AI prompts as tools for practitioners to begin creating CSF-related artifacts in support of achieving CSF outcomes Identify current state of practice for AI p…

  • NIST CSRC drafts open for comment

    SP 800-78-6, Cryptographic Algorithms and Key Sizes for Personal Identity VerificationInitial Working Draft

    NIST has released initial working drafts of proposed updates to the Personal Identity Verification (PIV) standards to support the use of post-quantum cryptography (PQC). The drafts identify the changes expected to be needed to use the ML-DSA digital signature algorithm and the ML-KEM key-encapsulation mechanism with PIV. The current draft set comprises: SP 800-73 Part 1: PIV Card Application Namespace, Data Model, and Representation SP 800-73 Part 2: PIV Card Application Card Command Interface SP 800-78: Cryptographic Algorithms and Key Sizes for PIV A supporting PQC Overview accompanies the…

  • NIST CSRC drafts open for comment

    SP 800-73-6, Interfaces for Personal Identity Verification: Part 2 – PIV Card Application Card Command InterfaceInitial Working Draft

    NIST has released initial working drafts of proposed updates to the Personal Identity Verification (PIV) standards to support the use of post-quantum cryptography (PQC). The drafts identify the changes expected to be needed to use the ML-DSA digital signature algorithm and the ML-KEM key-encapsulation mechanism with PIV. The current draft set comprises: SP 800-73 Part 1: PIV Card Application Namespace, Data Model, and Representation SP 800-73 Part 2: PIV Card Application Card Command Interface SP 800-78: Cryptographic Algorithms and Key Sizes for PIV A supporting PQC Overview accompanies the…

  • NIST CSRC drafts open for comment

    SP 800-73-6, Interfaces for Personal Identity Verification: Part 1 – PIV Card Application Namespace, Data Model and RepresentationInitial Working Draft

    NIST has released initial working drafts of proposed updates to the Personal Identity Verification (PIV) standards to support the use of post-quantum cryptography (PQC). The drafts identify the changes expected to be needed to use the ML-DSA digital signature algorithm and the ML-KEM key-encapsulation mechanism with PIV. The current draft set comprises: SP 800-73 Part 1: PIV Card Application Namespace, Data Model, and Representation SP 800-73 Part 2: PIV Card Application Card Command Interface SP 800-78: Cryptographic Algorithms and Key Sizes for PIV A supporting PQC Overview accompanies the…