U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Taking Measure Blog Posts

Risk management

Put exact phrase in quotes (e.g., "artificial intelligence")

Subscribe

Get Taking Measure blogs
delivered to your inbox.

GovDelivery
Displaying 1 - 15 of 15
graphic showing various ways that people are accessing the internet and networked resources via computers, mobile phones and clouds

Zero Trust Cybersecurity: ‘Never Trust, Always Verify’

October 23, 2020
Alper Kerman
Huh? What? At least that was my response the first time I heard the words “zero trust” when I started working at the National Institute of Standards and Technology (NIST) National Cybersecurity Center of Excellence (NCCoE) in the fall of 2018. Mind you, I was also making a fresh start with an
top left: circuit board; top right: materials from HHCIII; bottom left: leaf; bottom right: 3-D atomic clock

Twelve Ways NIST Is Working for You: 2017 Edition

December 29, 2017
Ben P. Stein
As managing editor in the NIST Public Affairs Office, I learn every day how our researchers tackle important societal issues in their work. As 2017 comes to a close, I’d like to share how our news during the last year has connected to many of this year’s current events. Protecting Our First
graphic illustrating different aspects of critical infrastructure, including power transmission, nuclear plants, and factories

A Framework for Protecting Our Critical Infrastructure

October 30, 2017
Matt Barrett
There’s no disputing the importance of a reliable and well-functioning critical infrastructure when it comes to our daily lives—in fact, our national and economic security depend on it. Because our critical infrastructure systems are becoming increasingly complex and connected, we need to understand
pumpkin spice latte

Small-Business Cybersecurity is Twice as Nice as Pumpkin Spice

October 10, 2017
Pat Toth
I think we’ve taken this pumpkin spice thing too far. Don’t get me wrong, I love fall. That first crisp evening when you need to put on a sweater, the crunch of leaves under your feet, homecoming football games, but pumpkin spice? It’s obvious that the pumpkin spice council’s marketing team has done
Timothy Zimmerman checking connections in the Cybersecurity for Smart Manufacturing Systems testbed

Ensuring the Cybersecurity of Manufacturing Systems

October 2, 2017
Timothy Zimmerman
Cybersecurity, at this point in the technological age, has become a household word. Every week, almost like clockwork, it seems there is a story on the news about a newly discovered hack or data breach often made possible by poor cybersecurity practices. Many of these incidents are focused around
abstract web world illustration

Why Security and Privacy Matter in a Digital World

September 28, 2017
Ron Ross
One cannot pick up a newspaper, watch TV, listen to the radio, or scan the news on the internet without some direct or veiled reference to the lack of information security or intrusions into personal privacy. Many intrusions into government and private-sector systems have exposed sensitive mission
Man at WannaCry computer

Things That Make Me Wannacry

June 21, 2017
Pat Toth
I’m a bit emotional these days. My youngest—my baby—just graduated from high school. It’s the end of an era for our family: The years of homework, packing lunches, attending sporting events, and endless nagging to study for exams are finally over. It’s a bittersweet time as a mom. If I think about
Man in suit with briefcast looking over edge of crevice

Ignoring Cybersecurity is Risky Business

November 17, 2016
Pat Toth
They say opposites attract. While my husband and I have many important things in common, we are complete opposites in one area. He’s a “risk taker,” and me … well, not so much. Rather than being labeled as “risk averse,” I prefer the term “caution giver.” I’m a federal employee. I come from a long
Graphic showing login screen with shadow of person in hoodie behind it

Protecting Businesses and Consumers from Email Scams

October 21, 2016
William "Curt" Barker
Like it or not, email is a central component of modern day life. The average person spends 6.3 hours a day checking their messages, and email continues to be the most popular means of communication, ahead of instant messaging, texting and social media. Scam artists have taken note and are exploiting