Cybersecurity

black background. light blue shield in the middle. circle of hashmarks and triangles around the shield.

NIST develops cybersecurity standards, guidelines, best practices, and other resources to meet the needs of U.S. industry, federal agencies and the broader public. Our activities range from producing specific information that organizations can put into practice immediately to longer-term research that anticipates advances in technologies and future challenges.

Some NIST cybersecurity assignments are defined by federal statutes, executive orders and policies. For example, the Office of Management and Budget (OMB) mandates that all federal agencies implement NIST’s cybersecurity standards and guidance for non-national security systems. Our cybersecurity activities also are driven by the needs of U.S. industry and the broader public. We engage vigorously with stakeholders to set priorities and ensure that our resources address the key issues that they face.

NIST also advances understanding and improves the management of privacy risks, some of which relate directly to cybersecurity.

Priority areas to which NIST contributes – and plans to focus more on – include cryptography, education and workforce, emerging technologies, risk management, identity and access management, measurements, privacy, trustworthy networks and trustworthy platforms.

Additional details can be found in these brief and more detailed fact sheets.

The Research

Projects & Programs

Exposure Notification – protecting workplaces and vulnerable communities during a pandemic

Challenges for Digital Proximity Detection in Pandemics: Privacy, Accuracy, and Impact Workshop This workshop is a forum to discuss successes and challenges associated with implementation of proximity detection technologies and identify areas in which additional effort is required. Registration is

Trustworthy Networks of Things

Our work focuses on network-centric approaches to improve the security and robustness of large scale deployments of IoT devices. The research and development of software-defined networking technologies in support of IoT security. The design and IETF standardization of Manufacturer Usage Description

Cryptographic Module Validation Program (CMVP)

For more information regarding the Cryptographic Module Validation Program (CMVP), please visit the Computer Security Resource Center (CSRC).

Cyber-Physical Systems/Internet of Things for Smart Cities

Objective - To provide the measurement science and standards-based foundations for interoperable, replicable, scalable, and trustworthy cyber-physical systems that can be readily and cost-effectively deployed by cities and communities of all types and sizes to improve their efficiency