Tag: NIST
All the articles with the tag "NIST".
Selecting more than one tag in the sidebar shows only posts that have every selected tag.
- #OSCAL#Policy as Code#Compliance
Converting the Web3 Key Management Policy to OSCAL
How a Markdown key management policy becomes a machine-readable OSCAL Catalog: the mapping rules, the JSON shape, schema validation, and what's left unmapped.
4 min read - #NIST#NIST SP 800-57#NIST SP 800-131A
NIST SP 800-57 and SP 800-131A in the Web3 Key Management Policy
How the Web3 Cryptographic Key Management Policy uses NIST SP 800-57 Part 1 and SP 800-131A, and why clause-level mapping is still open work.
3 min read - #Pipeline Controls#NIST#NIST SP 800-218
Relationship Between NIST SP 800-218 and SP 800-204D
Review the relationship between NISTP SP 800-218 and SP 800-204D. Walk through how the SSDF specifically focuses on cloud-native application CI/CD pipelines
11 min read - #SSDF#NIST#NIST SP 800-218
NIST SP 800-218(SSDF)
Secure Software Development Framework enhanced by Software Supply Chain Attack.
22 min read - #Microservices#NIST#NIST SP 800-204
NIST SP 800-204 Series
The NIST Special Publication Series for Securing Microservices.
5 min read - #NIST#OSCAL#CNCF
NIST OSCAL and associated projects
An introduction to NIST OSCAL and its associated CNCF projects for compliance as code.
5 min read