U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.


Secure websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to our website. Please do not share sensitive information with us.

This is an archive
(replace .gov by .rip)

White Paper (Draft)

[Project Description] Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches

Date Published: June 2019
Comments Due: July 29, 2019 (public comment period is CLOSED)
Email Questions to: ds-nccoe@nist.gov

Planning Note (6/24/2019): See the related Draft Project Description, Data Confidentiality: Detect, Respond to, and Recover from Data Breaches, which is also open for comment through July 29, 2019.


Jennifer Cawthra (NIST), Michael Ekstrom (MITRE), Lauren Lusty (MITRE), Julian Sexton (MITRE), John Sweetnam (MITRE), Anne Townsend (MITRE)


The National Cybersecurity Center of Excellence (NCCoE) at NIST is announcing the release of the first of two new Data Confidentiality (DC) draft project descriptions. 
This component of the DC suite of publications is entitled Identifying and Protecting Assets and Data Against Data Breaches. It seeks to identify what assets (devices, data, and applications) may be affected by an incident as well as the vulnerabilities they may possess that allow incidents to occur. The solution will provide measures such as data protection, access controls, network protections, and other potential defenses. The solution will use security controls that adhere to the NIST Cybersecurity Framework and industry standards and best practices. 
This project will result in a freely available NIST Cybersecurity Practice Guide in the Special Publication 1800 series, and we are requesting your feedback to help refine the challenge and scope of the project.



data breach; data confidentiality; data loss; data protection; malware; ransomware; spear phishing
Control Families

None selected


Project Description

Supplemental Material:
Submit Comments (other)
Project homepage (other)

Related NIST Publications:
White Paper (Draft)

Document History:
06/24/19: White Paper (Draft)
12/05/19: White Paper (Final)