NIST CSF 2.0
Govern, Identify, Protect, Detect, Respond, and Recover provide a shared language for cybersecurity outcomes.
▦ PUBLIC-FACING DOCUMENTS
Federal cybersecurity guidance, made navigable.
Ask practical questions across Zero Trust, NIST risk management, cloud security, ICAM, network defense, and enterprise architecture.
Interactive research guide
Ask this notebook
Answers stay within this curated public collection and call out uncertainty.
Browse the collection
Core topics
Zero Trust architecture
Continuously evaluate identity, device, context, policy, and resource risk instead of trusting a network location.
PDP / PEP separation
Keep decision and enforcement responsibilities distinct and protect the control plane from ordinary data-plane traffic.
RMF & controls
Connect risk framing, control selection, implementation, assessment, authorization, and continuous monitoring.
ICAM
Use authoritative identity, strong authentication, attributes, federation, and lifecycle governance to drive access decisions.
Cloud & platform security
Apply workload identity, segmentation, logging, configuration governance, and shared-responsibility controls.
Source directory
178 notebook sources
This public site is a guided companion—not a replacement for the original documents or professional review. Every source in the current notebook inventory is listed below.
Open Notebook ↗NotebookLM requires Google sign-in; a free Google account is sufficient.
| Source | Type | Official document |
|---|---|---|
| 01_CSF_2.0_CSWP29.pdfNIST | Open document ↗ | |
| 01_DoD_Zero_Trust_Strategy.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 01_HAFMD_1-26_CIO.pdfDepartment of the Air Force | Open document ↗ | |
| 01_STIG_Viewer_3x_User_Guide_V1R6.pdfDISA | Open document ↗ | |
| 01_ZIG_Primer.pdfNSA | Open document ↗ | |
| 02_Control_Systems_OT_SRG_V2.pdfDoD CIO / DISA | Open document ↗Likely official match | |
| 02_DAFI_90-7001_Data_Sharing_Stewardship.pdfDepartment of the Air Force | Open document ↗ | |
| 02_DoD_Zero_Trust_Reference_Architecture_v2.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 02_FIPS_199.pdfNIST | Open document ↗ | |
| 02_ZIG_Discovery.pdfNSA | Open document ↗ | |
| 03_DoDI_5200.48_DAFI_16-1403_CUI.pdfDepartment of the Air Force | Open document ↗ | |
| 03_FIPS_200.pdfNIST | Open document ↗ | |
| 03_ZIG_Phase_One.pdfNSA | Open document ↗ | |
| 03_ZT_Capabilities_Activities.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 04_AFI_17-101_RMF_for_IT.pdfDepartment of the Air Force | Open document ↗ | |
| 04_SP_800-37r2_RMF.pdfNIST | Open document ↗ | |
| 04_ZIG_Phase_Two.pdfNSA | Open document ↗ | |
| 04_ZT_Execution_Roadmap_v1.1.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 05_AFI_17-130_Cybersecurity_Program_Management.pdfDepartment of the Air Force | Open document ↗ | |
| 05_Embracing_Zero_Trust.pdfNSA | Open document ↗ | |
| 05_SP_800-39_Enterprise_Risk.pdfNIST | Open document ↗ | |
| 05_ZT_OT_Activities_Outcomes_v2.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 06_DAFMAN_17-1304_ICAM.pdfDepartment of the Air Force | Open document ↗ | |
| 06_DoD_Cybersecurity_Reference_Architecture_v5.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 06_SP_800-30r1_Risk_Assessment.pdfNIST | Open document ↗ | |
| 06_ZT_User_Pillar.pdfNSA | Open document ↗ | |
| 07_DAFMAN_17-1203_IT_Asset_Management.pdfDepartment of the Air Force | Open document ↗ | |
| 07_Fulcrum_IT_Advancement_Strategy.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 07_SP_800-53r5_Controls.pdfNIST | Open document ↗ | |
| 07_ZT_Device_Pillar.pdfNSA | Open document ↗ | |
| 08_AFI_17-140_Architecting.pdfDepartment of the Air Force | Open document ↗ | |
| 08_Cloud_Security_Playbook_Overview.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 08_SP_800-53Ar5_Assessment.pdfNIST | Open document ↗ | |
| 08_ZT_Network_Environment_Pillar.pdfNSA | Open document ↗ | |
| 09_Cloud_Security_Playbook_Vol1.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 09_DAFPD_17-1_Information_Dominance.pdf | Official link unavailable | |
| 09_SP_800-53B_Baselines.pdfNIST | Open document ↗ | |
| 09_ZT_Data_Pillar.pdfNSA | Open document ↗ | |
| 10_Cloud_Security_Playbook_Vol2.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 10_DAFPD_17-2_Cyber_Warfare_Operations.pdfDepartment of the Air Force | Open document ↗ | |
| 10_SP_800-137_Continuous_Monitoring.pdfNIST | Open document ↗ | |
| 10_ZT_Application_Workload_Pillar.pdfNSA | Open document ↗ | |
| 11_AFI_17-203_Cyber_Incident_Handling.pdfDepartment of the Air Force | Open document ↗ | |
| 11_Cloud_Native_Access_Point_RD.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 11_SP_800-160v1r1_Trustworthy_Systems.pdfNIST | Open document ↗ | |
| 11_ZT_Visibility_Analytics_Pillar.pdfNSA | Open document ↗ | |
| 12_AFDP_3-12_Cyberspace_Operations.pdfU.S. Air Force Doctrine | Open document ↗ | |
| 12_OCONUS_Cloud_Strategy.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 12_SP_800-160v2r1_Cyber_Resilience_READABLE_COPY.txtNIST | Text | Open document ↗ |
| 12_ZT_Automation_Orchestration_Pillar.pdfNSA | Open document ↗ | |
| 13_AFMAN_14-403_ISR_Cybersecurity_ZT.pdfDepartment of the Air Force | Open document ↗ | |
| 13_DoD_ICAM_Strategy.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 13_SP_800-161r1upd1_Supply_Chain.pdfNIST | Open document ↗ | |
| 13_Top_Ten_Cloud_Security_Mitigation_Strategies.pdfNSA | Open document ↗ | |
| 14_AFI_33-332_Privacy_Civil_Liberties.pdfDepartment of the Air Force | Open document ↗ | |
| 14_Cloud_Shared_Responsibility_Model.pdfNSA | Open document ↗ | |
| 14_DoD_ICAM_Federation_Framework.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 14_SP_800-218_SSDF.pdfNIST | Open document ↗ | |
| 15_DoD_Software_Modernization_Strategy.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 15_DoDI_5000.75_DAFI_63-144_Business_Systems.pdfDepartment of the Air Force | Open document ↗ | |
| 15_Secure_Cloud_IAM_Practices.pdfNSA | Open document ↗ | |
| 15_SP_800-61r3_Incident_Response.pdfNIST | Open document ↗ | |
| 16_ACCMAN_14-422_Intelligence_Data_Governance.pdfDepartment of the Air Force | Open document ↗ | |
| 16_DoD_Enterprise_DevSecOps_Fundamentals_v2.5.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 16_Secure_Cloud_Key_Management.pdfNSA | Open document ↗ | |
| 16_SP_800-40r4_Patch_Management.pdfNIST | Open document ↗ | |
| 17_AFMAN_33-396_Knowledge_Management.pdfDepartment of the Air Force | Open document ↗ | |
| 17_Cloud_Network_Segmentation_Encryption.pdfNSA | Open document ↗ | |
| 17_DevSecOps_Activities_Tools_Guidebook.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 17_FIPS_197_AES.pdfNIST | Open document ↗ | |
| 18_cATO_Evaluation_Criteria.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 18_DAFI_17-220_Spectrum_Management.pdfDepartment of the Air Force | Open document ↗ | |
| 18_FIPS_140-3_Crypto_Modules.pdfNIST | Open document ↗ | |
| 18_Secure_Data_in_the_Cloud.pdfNSA | Open document ↗ | |
| 19_DAFI_17-221_Spectrum_Interference.pdfDepartment of the Air Force | Open document ↗ | |
| 19_Defending_CICD_Environments.pdfNSA | Open document ↗ | |
| 19_DoD_Data_Strategy.pdfU.S. Department of Defense | Open document ↗ | |
| 19_SP_800-60v1r1_Data_Categorization.pdfNIST | Open document ↗ | |
| 20_DoD_Data_Analytics_AI_Adoption_Strategy.pdfU.S. Department of Defense | Open document ↗ | |
| 20_Secure_Automated_Deployment_IaC.pdfNSA | Open document ↗ | |
| 20_SP_800-60v2r1_Mapping_Appendices.pdfNIST | Open document ↗ | |
| 21_DIB_Cybersecurity_Strategy_2024.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 21_Hybrid_Multi_Cloud_Complexities.pdfNSA | Open document ↗ | |
| 21_SP_1800-39_IPD_Data_Classification.pdfNIST | Open document ↗ | |
| 22_Cloud_Managed_Service_Provider_Risks.pdfNSA | Open document ↗ | |
| 22_ICT_Supply_Chain_Risk_Strategy.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 22_SP_800-122_PII.pdfNIST | Open document ↗ | |
| 23_DoD_Private_5G_Deployment_Strategy.pdfU.S. Department of Defense CIO | Open document ↗ | |
| 23_Manage_Cloud_Logs_Threat_Hunting.pdfNSA | Open document ↗ | |
| 23_SP_800-188_Deidentifying_Data.pdfNIST | Open document ↗ | |
| 24_2023_DoD_Cyber_Strategy_Summary.pdfU.S. Department of Defense | Open document ↗ | |
| 24_Network_Infrastructure_Security_Guide.pdfNSA | Open document ↗ | |
| 24_SP_800-111_Storage_Encryption.pdfNIST | Open document ↗ | |
| 25_Hardening_Network_Devices.pdfNSA | Open document ↗ | |
| 25_SP_800-88r2_Media_Sanitization.pdfNIST | Open document ↗ | |
| 26_Out_of_Band_Network_Management.pdfNSA | Open document ↗ | |
| 26_SP_800-209_Storage_Infrastructure.pdfNIST | Open document ↗ | |
| 27_Segment_Networks_Application_Aware_Defenses.pdfNSA | Open document ↗ | |
| 27_SP_1800-25_Data_Integrity_Ransomware.pdfNIST | Open document ↗ | |
| 28_Configuring_IPsec_VPNs.pdfNSA | Open document ↗ | |
| 28_SP_800-207_Zero_Trust.pdfNIST | Open document ↗ | |
| 29_Selecting_Hardening_Remote_Access_VPNs.pdfNSA | Open document ↗ | |
| 29_SP_800-207A_Cloud_Native_ZTA.pdfNIST | Open document ↗ | |
| 30_Managing_Risk_from_SDN_Controllers.pdfNSA | Open document ↗ | |
| 30_SP_1800-35_Implementing_ZTA.pdfNIST | Open document ↗ | |
| 31_Cisco_Password_Types_Best_Practices.pdfNSA | Open document ↗ | |
| 31_SP_800-63-4_Digital_Identity.pdfNIST | Open document ↗ | |
| 32_Reducing_SNMP_Abuse.pdfNSA | Open document ↗ | |
| 32_SP_800-63A-4_Identity_Proofing.pdfNIST | Open document ↗ | |
| 33_Improve_Router_Hygiene.pdfNSA and partners | Open document ↗ | |
| 33_SP_800-63B-4_Authentication.pdfNIST | Open document ↗ | |
| 34_SP_800-63C-4_Federation.pdfNIST | Open document ↗ | |
| 34_Visibility_Hardening_Communications_Infrastructure.pdfCISA, NSA, FBI, and partners | Open document ↗ | |
| 35_SP_800-162_ABAC.pdfNIST | Open document ↗ | |
| 35_Top_Ten_Cybersecurity_Misconfigurations.pdfNSA and CISA | Open document ↗ | |
| 36_Exploitation_Cisco_SDWAN_Appliances.pdfNSA and partners | Open document ↗ | |
| 36_SP_800-205_Access_Attributes.pdfNIST | Open document ↗ | |
| 37_Countering_Chinese_Network_Compromise.pdfNSA and partners | Open document ↗ | |
| 37_SP_800-210_Cloud_Access_Control.pdfNIST | Open document ↗ | |
| 38_Edge_Device_Executive_Guidance.pdfNSA | Open document ↗ | |
| 38_SP_800-215_Secure_Enterprise_Network.pdfNIST | Open document ↗ | |
| 39_Edge_Device_Practitioner_Guidance.pdfNSA | Open document ↗ | |
| 39_SP_800-216_Vulnerability_Disclosure.pdfNIST | Open document ↗ | |
| 40_Network_Device_Integrity_Methodology.pdfNSA | Open document ↗ | |
| 40_SP_800-41r1_Firewalls.pdfNIST | Open document ↗ | |
| 41_SP_800-77r1_IPsec_VPN.pdfNIST | Open document ↗ | |
| 42_SP_800-113_SSL_VPN.pdfNIST | Open document ↗ | |
| 43_SP_800-119_IPv6.pdfNIST | Open document ↗ | |
| 44_SP_800-153_WLAN.pdfNIST | Open document ↗ | |
| 45_SP_800-187_LTE.pdfNIST | Open document ↗ | |
| 46_SP_800-189_BGP_DDoS.pdfNIST | Open document ↗ | |
| 47_SP_800-125_Virtualization.pdfNIST | Open document ↗ | |
| 48_SP_800-125Ar1_Hypervisors.pdfNIST | Open document ↗ | |
| 49_SP_800-125B_Virtual_Networks.pdfNIST | Open document ↗ | |
| 50_SP_800-190_Container_Security.pdfNIST | Open document ↗ | |
| 51_SP_800-204_Microservices.pdfNIST | Open document ↗ | |
| 52_SP_800-204A_Service_Mesh.pdfNIST | Open document ↗ | |
| 53_SP_800-204B_Service_Mesh_ABAC.pdfNIST | Open document ↗ | |
| 54_SP_800-233_Cloud_Native_Service_Mesh.pdfNIST | Open document ↗ | |
| 55_SP_800-144_Public_Cloud_Security.pdfNIST | Open document ↗ | |
| 56_SP_800-145_Cloud_Definition.pdfNIST | Open document ↗ | |
| 57_SP_800-52r2_TLS.pdfNIST | Open document ↗ | |
| 58_SP_800-81r3_DNS.pdfNIST | Open document ↗ | |
| 59_SP_800-92_Log_Management.pdfNIST | Open document ↗ | |
| 60_SP_800-94_IDPS.pdfNIST | Open document ↗ | |
| ICAM_01_FIPS_201-3_PIV.pdfNIST | Open document ↗ | |
| ICAM_02_SP_800-73pt1-5_PIV_Data_Model.pdfNIST | Open document ↗ | |
| ICAM_03_SP_800-73pt2-5_PIV_Card_Interface.pdfNIST | Open document ↗ | |
| ICAM_04_SP_800-73pt3-5_PIV_Client_API.pdfNIST | Open document ↗ | |
| ICAM_05_SP_800-76-2_PIV_Biometrics.pdfNIST | Open document ↗ | |
| ICAM_06_SP_800-78-5_PIV_Cryptography.pdfNIST | Open document ↗ | |
| ICAM_07_SP_800-79-2_PIV_Issuer_Authorization.pdfNIST | Open document ↗ | |
| ICAM_08_SP_800-116r1_PIV_Facility_Access.pdfNIST | Open document ↗ | |
| ICAM_09_SP_800-156_PIV_Chain_of_Trust.pdfNIST | Open document ↗ | |
| ICAM_10_SP_800-157r1_FPD_Derived_PIV.pdfNIST | Open document ↗ | |
| ICAM_11_SP_800-217_FPD_PIV_Federation.pdfNIST | Open document ↗ | |
| ICAM_12_NIST_IR_8112_Attribute_Metadata.pdfNIST | Open document ↗ | |
| ICAM_13_NIST_IR_8149_Trust_Frameworks.pdfNIST | Open document ↗ | |
| ICAM_14_SP_1800-12_Derived_PIV.pdfNIST | Open document ↗ | |
| ICAM_16_IAM_Best_Practices_Administrators.pdfNSA and Enduring Security Framework | Open document ↗ | |
| ICAM_17_IAM_Developer_Vendor_Challenges.pdfNSA and Enduring Security Framework | Open document ↗ | |
| ICAM_18_Selecting_Secure_MFA.pdfNSA | Open document ↗ | |
| ICAM_20_Detecting_Abuse_Authentication_Mechanisms.pdfNSA | Open document ↗ | |
| ICAM_22_DoDI_8520.02_PKI_PKE.pdfDoD Executive Services Directorate | Open document ↗ | |
| ICAM_23_DoDI_8520.03_Identity_Authentication.pdfDoD Executive Services Directorate | Open document ↗ | |
| ICAM_24_DoDI_8520.04_Access_Management.pdfDoD Executive Services Directorate | Open document ↗ | |
| ICAM_26_Workflow_Implementation_Guide.pdfU.S. Department of Defense CIO | Open document ↗ | |
| ICAM_27_MFA_DoD_Networks.pdfU.S. Department of Defense CIO | Open document ↗ | |
| ICAM_28_Enterprise_ICAM_Secret_Fabric.pdfU.S. Department of Defense CIO | Open document ↗ | |
| ICAM_29_DoD_Mobile_PKI_Credentials.pdfU.S. Department of Defense CIO | Open document ↗ | |
| ICAM_30_DoDI_1000.25_PIP_Program.pdfDoD Executive Services Directorate | Open document ↗ | |
| ICAM_31_DoDI_1341.02_DEERS.pdfDoD Executive Services Directorate | Open document ↗ | |
| ICAM_32_DoDM_1341.02v1_DS_Logon.pdfDoD Executive Services Directorate | Open document ↗ | |
| ICAM_33_DoDM_1000.13v1_ID_Card_Lifecycle.pdfDoD Executive Services Directorate | Open document ↗ | |
| ICAM_35_DoD_X509_Certificate_Policy_v11.pdf | Official link unavailable | |
| U_Cloud_Computing_SRG_V1R4_Release_Memo_JS (1).pdf | Official link unavailable | |
| U_Cloud_Computing_V1R4_Revision_History_20220114.pdf | Official link unavailable | |
| U_Cloud_Computing_V1R4_SRG.pdfU.S. Department of Defense CIO | Open document ↗ |
No sources match that search.