Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

On March 25, 2025, NIST released the initial public draft of NIST SP 800-228, "Guidelines for API Protection for Cloud-Native Systems." The document provides a comprehensive framework for securing APIs in cloud-enabled environments. However, for organizations looking to align with these objectives, the tooling requirements may seem initially overwhelming. Fortunately, Wallarm helps streamline the process by integrating many of these recommendations into a single, cloud-native solution.

NIST hardening standards and best practices refer to a collection of guidelines and recommended methods created by NIST (National Institute of Standards and Technology). These standards are crafted with the intention of strengthening the security and robustness of information systems. They serve as a structured approach for organizations to fortify their systems against possible security vulnerabilities and the risks associated with them.

Government cybersecurity and information security frameworks are a constant work in progress. Many different frameworks draw their requirements from the National Institute of Standards and Technology, and one of the most important documents for cybersecurity is NIST Special Publication 800-171: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations.

The NIST Cybersecurity Framework (CSF) 2.0 is a voluntary framework developed by the National Institute of Standards and Technology (NIST) to help organizations manage and reduce cybersecurity risks. Initially released in 2014, CSF was primarily intended for critical infrastructure sectors. However, CSF 2.0 (2024) expands its scope to include organizations of all sizes and sectors, including small businesses, nonprofits, and large corporations.

Organizations handling Controlled Unclassified Information (CUI) need to comply with NIST SP 800-171 Revision 3, a set of cybersecurity requirements developed by the National Institute of Standards and Technology (NIST). These guidelines apply to non-federal organizations, including private companies, defense contractors, and businesses in regulated industries, that process, store, or transmit CUI.

NIST Special Publication 800-53 revision 5 provides a comprehensive set of security and privacy controls to help organizations manage risk effectively. These controls are widely adopted by federal agencies and private organizations to enhance cybersecurity resilience. Compliance with NIST SP 800-53 r5 helps organizations strengthen their security posture, mitigate cyber threats, and ensure regulatory compliance.

As cybersecurity threats evolve and regulatory requirements tighten, organizations worldwide are turning to NIST (National Institute of Standards and Technology) frameworks to strengthen their security and risk management strategies.

Quantum computing poses rapidly escalating challenges to many of the public-key cryptographic algorithms currently in use: RSA, ECC, and DSA. Many of the classical public key cryptographic algorithms secure everything that deals with financial transactions, software updates, identity verification, and data encryption.

The National Institute of Standards and Technology (NIST) is a U.S. government agency that develops and promotes standards, guidelines, and best practices to enhance information security and privacy. Recognized globally, NIST frameworks set the benchmark for building secure systems and managing cybersecurity risks.

As someone who has spent decades working at the intersection of cybersecurity, innovation, and operational resilience, I’ve seen firsthand how critical it is to build trust in a rapidly evolving digital landscape. At Fireblocks, that trust is not just a goal—it’s a standard we continuously push ourselves to meet and exceed.