Links around resilience and information security. Latest additions are marked with: ✔

• MITRE: Secure Communications: Protecting Response and Recovery from Compromise ✔
• NIST Special Publication 800-53 Revision 5, SC-37: OUT-OF-BAND CHANNELS ✔

• DoD (US): Exporting Repression: 'Made In' Labels Not as Important as Technology Itself
• DoD (US): Frequently Asked Questions regarding Open Source Software (OSS) and the Department of Defense (DoD)
• DHS (US): Solicitation Call # 70RSAT22R00000027 SOFTWARE SUPPLY CHAIN VISIBILITY TOOLS
• DHS (US): Secretary Mayorkas Outlines His Vision for Cybersecurity Resilience
• Atlantic Council: Avoiding the success trap: Toward policy for open-source software as infrastructure
• BMWK (DE): Sovereign Tech Fund
• [US] ANNUAL THREAT ASSESSMENT OF THE U.S. INTELLIGENCE COMMUNITY
• [NAVY] (US) Department of the Navy Cyber Strategy ✔

• NIST (US): Engineering Trustworthy Secure Systems, SP 800-160 Vol. 1 Rev. 1
• NIST (US): Guide to Operational Technology (OT) Security, SP 800-82 Rev. 3 (Draft)
• CISA (US): Trusted Internet Connections 3.0, Cloud Use Case (DRAFT)
• CISA (US): Cloud Security, Technical Reference Architecture
• NIST (US): Supply Chain Assurance
• EU: EU Cyber Resilience Act
• EU: NIS2 Directive
• CISA (US): Traffic Light Protocol (TLP) Definitions and Usage
• EU: Open-source software vs. the proposed Cyber Resilience Act
• CISA (US): Infrastructure Resilience Planning Framework (IRPF)
• Director of OMB : M-22-18 MEMORANDUM FOR THE HEADS OF EXECUTIVE DEPARTMENTS AND AGENCIES
• GAO: CRITICAL INFRASTRUCTURE: Actions Needed to Better Secure Internet-Connected Devices
• US, WHITEHOUSE: NATIONAL CYBERSECURITY STRATEGY, MARCH 2023
• CISA (US): Secure-by-Design and -Default Principles and Approaches 
• CISA (US): #StopRansomware Guide
• CISA (US): Binding Operational Directive 23-02
• NSA,CISA (US): Best Practices to Secure Cloud Continuous Integration/Continuous Delivery Environments
• CISA (US): Cybersecurity Strategic Plan 2024-2026
• OSTP (US): CRITICAL AND EMERGING TECHNOLOGIES LIST UPDATE
• ONCD (US): BACK TO THE BUILDING BLOCKS: A PATH TOWARD SECURE AND MEASURABLE SOFTWARE
• CISA (US): Secure Software Development Attestation Form ✔
• NSA (US): Advancing Zero Trust Maturity Throughout the Network and Environment Pillar ✔
• DoD (US): Commercial space innovation strategy 2024 ✔
• NCC (US): Electromagnetic Pulse (EMP) Protection and Resilience Guidelines for Critical Infrastructure and Equipment ✔

• IEC: IEC TR 60601-4-5:2021
• NIST: mplementing the Health Insurance, Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide
• Health Care and Public Health Sector Cybersecurity Framework Implementation Guide Version 2 March 2023 - by U.S. Department of Health and Human Services (HHS)
• FDA (US): Cybersecurity in Medical Devices: Refuse to Accept Policy for Cyber Devices and Related Systems Under Section 524B of the FD&C Act

• ACSC (AU): Information Security Manual
• ENISA (EU): Research and Innovation Brief - Annual Report on Cybersecurity Research and Innovation Needs and Priorities
• CISA (US): RANSOMWARE GUIDE, SEPTEMBER 2020 (PDF)
• MITRE (US): Cyber Resiliency Approaches and Controls to Mitigate Adversary Tactics, Techniques, and Procedures (TTPs)—Mapping Cyber Resiliency to the ATT&CK® Framework, Revision 2
• NCSC (UK): Supply chain cyber security, Accessing and gaining confidence in your suppliers [PDF]
• CISA (US): Cyber Guidance for Small Businesses
• CSF Tools
• NSA (US):IPv6 Security Guidance
• Insider Threat Mitigation for U.S. Critical Infrastructure Entities: Guidelines from an Intelligence Perspective ✔
• NSA (US): Advancing Zero Trust Maturity Throughout the User Pillar ✔

• EU: Publication of TIBER-EU Purple Teaming Best Practices
• CISA (US): Red team Shares Key Findings to Improve Monitoring and Hardening of Networks ✔

• NSA,CISA, and FBI Expose PRC State-Sponsored Exploitation of Network Providers, Devices
• NSA,CISA: Control System Defense: Know the Opponent
• CISA (US): Free Cybersecurity Services and Tools
• CISA (US): Safecom
• NCSC UK: Mapping your supply chain ✔
• NSA (US): Best Practices For Securing Your Home Network
• CISA(US): Harden Baseboard Management Controllers
• Joint CSA (US): PRC-Linked Cyber Actors Hide in Router Firmware ✔
• NSA (US): Procurement and Acceptance Testing Guide for Servers, Laptops, and Desktop Computers ✔

• NIST (US): PQC Standardization Process: Announcing Four Candidates to be Standardized, Plus Fourth Round Candidates
• BIS: Encryption items NOT Subject to the EAR
• Linux Foundation: Understanding US export controls with open source projects
• CISA (US): Preparing Critical Infrastructure for Post-Quantum Cryptography
• NSA (US): NSA Releases Future Quantum-Resistant (QR) Algorithm Requirements for National Security Systems
• Cryptography and the Intelligence Community The Future of Encryption (2022)
• ENISA (EU): POST-QUANTUM CRYPTOGRAPHY, Integration study
• DIRK RIJMENANTS: Is One-time Pad History?
• Open source OTP voice encryption in microcontroller. Securing electrical voice communication. Ari Nevalainen,Master’s thesis
• Tinfoil Chat - Onion-routed, endpoint secure messaging system
• Jericho Comms - Information-theoretically secure communications
• IEICE ICETC2022 Keynote Webinar：New Frontiers in Space Laser Communications for Beyond 5G/6G
• Communication systems between US and RU
• NIST (US) Selects ‘Lightweight Cryptography’ Algorithms to Protect Small Devices
• On the Possibility of a Backdoor in the Micali-Schnorr Generator
• Concealing for Freedom by Mattering Press
• Cryptanalysis of the GPRS Encryption Algorithms GEA-1 and GEA-2
• Cryptography: An Introduction (3rd Edition) by Nigel Smart
• NSA (US): QUANTUM-READINESS: MIGRATION TO POST-QUANTUM CRYPTOGRAPHY
• NIST (US): FIPS 203 (Initial Public Draft)
• NIST (US): FIPS 204 (Initial Public Draft)
• NIST (US): FIPS 205 (Initial Public Draft)
• TETRA:BURST Vulnerabilities in TETRA radio networks
• NSA (US): The Commercial National Security Algorithm Suite 2.0 and Quantum Computing FAQ ✔
• National Security Memorandum on Promoting United States Leadership in Quantum Computing While Mitigating Risks to Vulnerable Cryptographic Systems

• BSI (DE): A Proposal for Functionality Classes for Random Number Generators ✔
• Federal Office for Information Security (DE): Documentation and Analysis of the Linux Random Number Generator
• ALGORITHMS AND RANDOMNESS by A. N. KOLMOGOROV AND V. A. USPENSKII ✔

• https://www.anshumanbhartiya.com/posts/secure-sdlc
• NSA, CISA (US) SECURING THE SOFTWARE SUPPLY CHAIN, Recommended practices guide for developers
• Defense Innovation Board: Software Is Never Done:Refactoring the Acquisition Code for Competitive Advantage ✔
• The EU's new Cyber Resilience Act is about to tell us how to code ✔

• Linux Kernel Security Process by Greg Kroah-Hartman (The Linux Foundation) ✔

• Maria G. Zampati: Cybersecurity and Energy,The Case Study of Stuxnet
• Saïd Business School at the University of Oxford and ISTARI (UK): CEO Report on Cyber Resilience
• Interoperability in End-to-End Encrypted Messaging
• LTESniffer: An Open-source LTE Downlink/Uplink Eavesdropper
• faulTPM: Exposing AMD fTPMs' Deepest Secrets
• Clandestine communications in cyber-denied environments
• Perfectly Secure Steganography Using Minimum Entropy Coupling
• Privacy Enhancing Technologies: An Introduction for Technologists
• “We Feel Like We’re Winging It:”A Study on Navigating Open-Source Dependency Abandonment
• Introduction to Hardware Restrictions: Can You Trust Your Phone?
• A Practical Implementation of Quantum-Derived Keys for Secure Vehicle-to-Infrastructure Communications ✔

• https://shkspr.mobi/blog/2022/06/ive-locked-myself-out-of-my-digital-life/
• CISA,DHS (US): Making a Business Case for Security ✔

• NCSC (US): PROTECTING YOUR ORGANIZATION’S SECRETS

• The impact of Pegasus on fundamental rights and democratic processes
• Pegasus and similar spyware and secret state surveillance
• Pegasus from dark web ?