NIST National Cybersecurity Center of Excellence (NCCoE)

Celebrating Cybersecurity Awareness Month: NCCoE Connections Event   On October 15th, the NIST NCCoE hosted a Cybersecurity Connections event and networking lunch to celebrate National Cybersecurity Awareness Month.   Hosted in partnership with Maryland Department of Commerce, Montgomery County Government, and Montgomery County Economic Development Corporation - Maryland, this event featured an expert panel of technology leaders that explored the future of cybersecurity, from the rise of emerging technologies to the complexities of real-world implementation.   Following the panel, NCCoE project teams shared insights and best practices regarding ransomware risk management and effective strategies for cyber attack response and recovery.   The recording of this event will be available in the coming weeks on the NCCoE event page. A special thanks to Jayati Dev, Chris Jensen, Stephanie Kiel, Julie Klein, Bill Fisher, and Toby M. for participating in this event!

Submit Your Feedback Before It’s Too Late! New NCCoE 5G Cybersecurity White Paper 📃 The newest white paper in the NCCoE Applying 5G Cybersecurity and Privacy Capabilities Series uses False Base Station (FBS) as an experimental tool for simulating unexpected or unspecified scenarios. The paper evaluates six FBS scenarios (simulated in the NCCoE’s 5G Security lab) to assess how the tested 5G devices respond to FBS attacks and identify areas for improvement in standards and available device-configurable protections. You can submit comments on this publication through October 31 🎃 – visit the project page and download the paper today! 🔗 https://lnkd.in/e79Rhxk2

📼 Recording Now Available: NCCoE Supply Chain Traceability Webinar Last month, the NCCoE released the final version of NIST IR 8536, Supply Chain Traceability: Manufacturing Meta-Framework and hosted a webinar to further explore the newly available publication. The webinar explored: ▪️The Traceability Challenge: An overview of the barriers to verifying product provenance across fragmented ecosystems, illustrated through a simplified discrete manufacturing supply chain use case example. ▪️Core Principles for SCRM Support: A review of the foundational traceability principles necessary to inform organizational Supply Chain Risk Management (SCRM) programs. ▪️Architectural Mechanics: How these foundational principles are operationalized within the Meta-Framework using structural data patterns (such as encapsulation and standardized interfaces) to establish a continuous, cross-sector provenance chain. ▪️Data Privacy and Verifiable Trust: The utilization of hash-based traceability links to securely exchange product history without requiring suppliers to expose sensitive intellectual property or internal trade secrets. Visit the NCCoE event page to access the recording and slides from the webinar: 🔗https://lnkd.in/ewsJ47GY

NCCoE September 2026 NCEP Meeting On September 22nd, Cisco hosted the quarterly NIST National Cybersecurity Center of Excellence (NCCoE) National Cybersecurity Excellence Partnership (NCEP) meeting at their office in Washington D.C. to discuss potential projects and opportunities to enhance the mission of the NCCoE. The NCEP program is a collaborative partnership between U.S. companies and the NCCoE to advance the state of cybersecurity practices through the demonstration of practical architectures to address real-world implementation challenges, strengthen emerging standards, and support more secure, interoperable commercial products. Partners provide technical input to help address emerging cybersecurity challenges and trends, collaborate to identify new projects, and gain insights from the NCCoE’s work. A big thank you to Cisco, Sam B., Kori Rongey, and Scott Morin for hosting us and all our NCEP partners!

Now Available! The October 2026 NCCoE Newsletter 📰   The NCCoE News is a monthly update on the NIST NCCoE’s work to address the nation’s most pressing cybersecurity challenges. Each month’s edition recaps the latest news, publications, and upcoming events.   Check out the latest newsletter to see what you may have missed last month—and subscribe to get instant access to our newest publications and an inside look at upcoming events.    View it here: https://lnkd.in/erJYJ55A

🪑 Reserve Your Seat! NIST NCCoE Cybersecurity Connections Event & Networking Lunch on October 15 Join the NIST NCCoE on October 15, 2026, for a special networking event to celebrate National Cybersecurity Awareness Month. Hosted in partnership with the Maryland Department of Commerce and Montgomery County Government, this event will feature a panel of industry leaders - including Jayati Dev from Comcast, Chris Jensen from Tenable, Stephanie Kiel from Google, and Julie Klein from Palo Alto Networks - exploring the future of cybersecurity, from the rise of emerging technologies to the complexities of real-world implementation, including legacy systems, talent gaps, and evolving standards. In addition to this panel discussion, NCCoE project teams will share insights and best practices regarding ransomware risk management and effective strategies for cyber attack response and recovery. This event will be followed by a networking lunch 🍴, generously provided by the Montgomery County Economic Development Corporation - Maryland on behalf of Montgomery County. You still have one week left to register for this event! Visit the NCCoE page to learn more: 🔗https://lnkd.in/eehmA9bX

New Blog Post: Secure Remote Access for Water Utilities 💦   Recent cyberattacks on the U.S. water and wastewater systems (WWS) sector are highlighting the escalating threat to our nation’s critical infrastructure and the practical challenges of securing it.    NIST has released a new Cybersecurity Insights blog post to describe the challenge and share details on the NIST National Cybersecurity Center of Excellence (NCCoE)’s work with industry collaborators to demonstrate secure remote access for the WWS sector’s OT environments.     View the blog here: https://lnkd.in/e_XRbpF6

📃New NIST Cybersecurity White Paper! False Base Station The NCCoE has released the initial public draft Cybersecurity White Paper (CSWP) 36G, False Base Station, which details how the availability of inexpensive, off-the-shelf hardware and software tools allows attackers to mimic legitimate carrier equipment to intercept and disrupt cellular communications. The paper evaluates six FBS scenarios (simulated in the NCCoE’s 5G Security lab) to assess how the tested 5G devices respond to FBS attacks and identify areas for improvement in standards and available device-configurable protections. This white paper is part of the NCCoE’s work to accelerate the adoption of 5G security features by demonstrating their implementation on our operational 5G security testbed and providing actionable implementation guidelines to help network operators enhance the cybersecurity and privacy of 5G systems and supporting infrastructures. By demonstrating security features on our operational 5G Testbed, we aim to deliver real-world implementation insights to advance 5G security and inform the next generation of wireless security. You’re encouraged to review the draft paper today and submit your feedback! The comment period for this publication is open through October 31, 2026 🎃 🔗https://lnkd.in/e79Rhxk2

Summary of Comments and New Online Resource Hub Now Available: NIST Software and Agentic AI Identity Earlier this year, the NCCoE announced a new project to address challenges with software and AI agent identity and authorization and released a concept paper to solicit feedback on how to design and deliver a project that would drive meaningful outcomes for securing the emerging agentic ecosystem. The newly available summary of comments document outlines the key observations and feedback identified through the public comments submitted, including key capabilities, challenges, and potential use cases for the project to demonstrate. The summary of comments is live now on the new Software and Agentic AI Identity and Authorization Online Resource Hub. This resource hub will supplement our blog series and special publications, allowing the project to more quickly publish and revise resources. Rather than a fixed comment period, we are accepting rolling feedback on this document to allow for ongoing collaboration. Please share your insights at your convenience! Resource Hub Link: https://lnkd.in/etcJjttq

DevSecOps: New Resources + Webinar The NIST National Cybersecurity Center of Excellence (NCCoE) has published additional resources from the Secure Software Development, Security, and Operations (DevSecOps) Practices project to the live document.   Through example implementations, the project explores how to build more secure software and reduce vulnerabilities, including emerging considerations such as artificial intelligence and zero trust.   Collaborators involved in the second example implementation include: GitLab, Microsoft, CyberArk, DigiCert, NextLabs, Resilience Cyber Security and Sagittal.ai.   You’re encouraged to review the updated live document by November 9, 2026. Check out the news announcement to learn more about the newly available resources: https://lnkd.in/eFTHBm3Y