Technology playbooks
Technology playbooks are the most hands-on part of the guide: how to meet and evidence specific controls on a specific platform, which settings to use, and what assessors will ask to see. Each playbook links back to the control pages it covers.
| Area | Example platforms | Status |
|---|---|---|
| Cloud infrastructure | AWS, Microsoft Azure, Google Cloud | Planned |
| Identity | Microsoft Entra ID, Okta, PIV and smart cards | Planned |
| Productivity and collaboration | Microsoft 365, Google Workspace | Planned |
| Endpoints | Windows, macOS, Linux (STIG and CIS baselines) | Planned |
| Containers and platforms | Kubernetes, container registries, CI/CD pipelines | Planned |
| Logging and monitoring | SIEM platforms, log retention, alerting | Planned |
To write a new playbook, copy the technology template from Page templates into this folder.
Independent guidance, not an official NIST publication. Control text is from NIST SP 800-53 Rev. 5 and SP 800-53A (public domain). Original content is licensed CC BY 4.0; program templates and the downloadable kit are dedicated to the public domain under CC0 1.0.