<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Spoiledlunch</title><link>https://26ebd17c.spoiledlunch.pages.dev/</link><description>Nerdy Stuff. Tech Talk. Zero Freshness. Analysis and commentary on GRC, security, and AI.</description><generator>Hugo 0.160.1</generator><language>en-us</language><lastBuildDate>Fri, 24 Apr 2026 08:30:00 -0400</lastBuildDate><atom:link href="https://26ebd17c.spoiledlunch.pages.dev/tags/nist/" rel="self" type="application/rss+xml"/><item><title>AI Governance Gets Real Only After Deployment</title><link>https://26ebd17c.spoiledlunch.pages.dev/articles/2026-04-24-ai-governance-gets-real-only-after-deployment/</link><pubDate>Fri, 24 Apr 2026 08:30:00 -0400</pubDate><guid>https://26ebd17c.spoiledlunch.pages.dev/articles/2026-04-24-ai-governance-gets-real-only-after-deployment/</guid><description>
&lt;![CDATA[<p><strong>Article</strong> • April 24, 2026 • 2 min read</p><p><strong>Topics:</strong> AI</p><p>The industry still talks about AI governance like the hardest part is agreeing on principles before launch. Recent work from NIST and OpenAI points to a different reality: the difficult part starts …</p><p><a href="https://26ebd17c.spoiledlunch.pages.dev/articles/2026-04-24-ai-governance-gets-real-only-after-deployment/">Read full analysis →</a></p>
]]></description><author>@spoiledlunch</author><category>AI</category><category>ai governance</category><category>monitoring</category><category>nist</category><category>safety</category></item><item><title>Why Visibility Is Becoming a Hardware Security Problem</title><link>https://26ebd17c.spoiledlunch.pages.dev/articles/2026-04-24-why-visibility-is-becoming-a-hardware-security-problem/</link><pubDate>Fri, 24 Apr 2026 08:10:00 -0400</pubDate><guid>https://26ebd17c.spoiledlunch.pages.dev/articles/2026-04-24-why-visibility-is-becoming-a-hardware-security-problem/</guid><description>
&lt;![CDATA[<p><strong>Article</strong> • April 24, 2026 • 2 min read</p><p><strong>Topics:</strong> Security</p><p>Security teams still talk about hardware trust like it is a procurement checkbox, but recent NIST guidance points to a more embarrassing reality: many organizations are defending systems they cannot …</p><p><a href="https://26ebd17c.spoiledlunch.pages.dev/articles/2026-04-24-why-visibility-is-becoming-a-hardware-security-problem/">Read full analysis →</a></p>
]]></description><author>@spoiledlunch</author><category>Security</category><category>hardware security</category><category>firmware</category><category>monitoring</category><category>nist</category></item><item><title>NIST Publishes Hardware Security White Paper on Firmware-Based Monitoring</title><link>https://26ebd17c.spoiledlunch.pages.dev/news/2026-04-15-nist-publishes-hardware-security-white-paper-on-firmware-based-monitoring/</link><pubDate>Wed, 15 Apr 2026 09:00:00 -0400</pubDate><guid>https://26ebd17c.spoiledlunch.pages.dev/news/2026-04-15-nist-publishes-hardware-security-white-paper-on-firmware-based-monitoring/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • April 15, 2026</p><p><strong>Topics:</strong> Security</p><p>Summary: NIST published Cybersecurity White Paper 52, &ldquo;Firmware-Based Monitoring for Bus-Based Computer Systems,&rdquo; on April 15, 2026. The …</p><p><a href="https://26ebd17c.spoiledlunch.pages.dev/news/2026-04-15-nist-publishes-hardware-security-white-paper-on-firmware-based-monitoring/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>Security</category><category>NIST</category><category>hardware security</category><category>firmware</category><category>forensics</category></item><item><title>NIST Releases CSF 2.0 Quick-Start Guides for ERM and Informative References</title><link>https://26ebd17c.spoiledlunch.pages.dev/news/2026-03-23-nist-releases-csf-2-0-quick-start-guides-for-erm-and-informative-references/</link><pubDate>Mon, 23 Mar 2026 09:00:00 -0400</pubDate><guid>https://26ebd17c.spoiledlunch.pages.dev/news/2026-03-23-nist-releases-csf-2-0-quick-start-guides-for-erm-and-informative-references/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • March 23, 2026</p><p><strong>Topics:</strong> GRC</p><p>Summary: NIST announced two Cybersecurity Framework 2.0 quick-start guide updates on March 23, 2026. The agency released the final SP 1308 guide on …</p><p><a href="https://26ebd17c.spoiledlunch.pages.dev/news/2026-03-23-nist-releases-csf-2-0-quick-start-guides-for-erm-and-informative-references/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>GRC</category><category>NIST</category><category>CSF 2.0</category><category>ERM</category><category>governance</category></item><item><title>NIST Finalizes Revision 3 of Its DNS Deployment Guide</title><link>https://26ebd17c.spoiledlunch.pages.dev/news/2026-03-19-nist-finalizes-revision-3-of-its-dns-deployment-guide/</link><pubDate>Thu, 19 Mar 2026 09:00:00 -0400</pubDate><guid>https://26ebd17c.spoiledlunch.pages.dev/news/2026-03-19-nist-finalizes-revision-3-of-its-dns-deployment-guide/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • March 19, 2026</p><p><strong>Topics:</strong> Security</p><p>Summary: NIST published the final version of SP 800-81 Revision 3, &ldquo;Secure Domain Name System (DNS) Deployment Guide,&rdquo; on March 19, 2026. …</p><p><a href="https://26ebd17c.spoiledlunch.pages.dev/news/2026-03-19-nist-finalizes-revision-3-of-its-dns-deployment-guide/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>Security</category><category>NIST</category><category>DNS</category><category>DNSSEC</category><category>zero trust</category></item><item><title>NIST Maps the Hard Parts of Monitoring Deployed AI Systems</title><link>https://26ebd17c.spoiledlunch.pages.dev/news/2026-03-09-nist-maps-the-hard-parts-of-monitoring-deployed-ai-systems/</link><pubDate>Mon, 09 Mar 2026 09:00:00 -0400</pubDate><guid>https://26ebd17c.spoiledlunch.pages.dev/news/2026-03-09-nist-maps-the-hard-parts-of-monitoring-deployed-ai-systems/</guid><description>
&lt;![CDATA[<p><strong>News Brief</strong> • March 9, 2026</p><p><strong>Topics:</strong> AI</p><p>Summary: NIST published AI 800-4, &ldquo;Challenges to the Monitoring of Deployed AI Systems,&rdquo; on March 9, 2026. The report groups monitoring …</p><p><a href="https://26ebd17c.spoiledlunch.pages.dev/news/2026-03-09-nist-maps-the-hard-parts-of-monitoring-deployed-ai-systems/">Read brief →</a></p>
]]></description><author>@spoiledlunch</author><category>AI</category><category>NIST</category><category>AI monitoring</category><category>AI governance</category><category>standards</category></item></channel></rss>