Trusted Cyber Annex

Details on the risk management API

Last week we announced the alpha release of the TCAnnex API.

Oct 6 • 

Matthew Smith

1

Big news: an API for NIST risk management documents

Delivering high-integrity data in a machine-readable format directly to you

Oct 2 • 

Matthew Smith

1

September 2025

Q&A on cyber writing for NIST

I recently did a Q&A session with members of Cybersecurity Club on my experiences writing for NIST, and I had the best time!

Sep 22 • 

Karen (Kent) Scarfone

3

Full set of cheat sheets for NIST's Digital Identity Guidelines

Annotations and term definitions embedded in the PDFs

Sep 4 • 

Karen (Kent) Scarfone

 and 

Matthew Smith

3

August 2025

Introducing ourselves

Actual people, not chatbots!

Aug 26 • 

Karen (Kent) Scarfone

 and 

Matthew Smith

6

Cheat sheets for NIST's Digital Identity Guidelines

Annotations and term definitions embedded in the PDFs

Aug 19 • 

Karen (Kent) Scarfone

 and 

Matthew Smith

4

Annotated NIST pub on authentication

Speed up your reading of 800-63B-4

Aug 11 • 

Karen (Kent) Scarfone

 and 

Matthew Smith

3

Annotated version of NIST's Digital Identity Guidelines

Absorb the new SP 800-63-4 faster

Aug 4 • 

Karen (Kent) Scarfone

3

July 2025

Annotated NIST publication on media sanitization

Expediting your review of draft SP 800-88 Revision 2

Jul 31 • 

Karen (Kent) Scarfone

3

Part 1 - Securing AI use in your organization

Cyber risk management when AI is present

Jul 29 • 

Matthew Smith

5

4

New NIST publication on crypto agility, annotated

Providing an annotated version to expedite review

Jul 24 • 

Karen (Kent) Scarfone

3

Empathy in the age of AI

I recently published an article on Trusted Cyber Annex about AI chatbots not stating technical facts accurately.

Jul 23 • 

Karen (Kent) Scarfone

4

1