Compliance
NIST IR 8547 and the 2035 date: what it means for your roadmap
NIST IR 8547 outlines the move away from quantum-vulnerable algorithms, with 2035 as the removal year. What it is, its status and how to plan around it.
Oct 18, 20263 min read
Resources
Supply Chain Security, in plain English.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
Filter
Articles
RSS feedCompliance
NIST's 2030 and 2035 quantum deadlines explained: what they cover
NIST's draft IR 8547 deprecates some algorithms after 2030 and disallows quantum-vulnerable ones after 2035. What the dates mean and who they bind.
Oct 18, 20263 min read
Compliance
NIST IR 8425: the consumer IoT baseline explained
NIST IR 8425 is a profile of cybersecurity outcomes for consumer IoT products, published in September 2022. What it covers and how makers can use it.
Oct 18, 20263 min read
Compliance
NIST IR 8374 Rev. 1: the ransomware profile explained
NIST IR 8374 Revision 1 maps ransomware risk management to the Cybersecurity Framework 2.0. What it is, who it suits and how to use it as a playbook base.
Oct 18, 20263 min read
Compliance
NIST IR 8259 Rev. 1: baseline security activities for device makers
NIST withdrew IR 8259 in April 2026 and replaced it with Revision 1 for IoT product makers. What changed in status and how robot makers can use it.
Oct 18, 20263 min read
Compliance
NIST authenticator assurance levels AAL1, AAL2 and AAL3 explained
What the three NIST authentication assurance levels require, how session timeouts differ, and how to pick a level for an app without over-engineering.
Oct 18, 20263 min read
Compliance
NIST AI RMF or ISO 42001: which should you start with?
NIST AI RMF is a voluntary risk framework and ISO/IEC 42001 is a management system standard. How they differ and how to choose where to start.
Oct 18, 20263 min read
Compliance
NIST AI 600-1's 12 generative AI risks, read for RAG assistants
The 12 risks in NIST's Generative AI Profile, and which ones a retrieval-augmented assistant should test first, such as privacy and information security.
Oct 18, 20263 min read
Compliance
NIST 800-53 baselines: what low, moderate and high mean
SP 800-53B defines low, moderate and high control baselines. Learn how a system lands in one, what tailoring does and where overlays fit.
Oct 18, 20263 min read
Stay informed
Weekly insights on software supply chain security, delivered to your inbox.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.