Kantara Initiative's Plans for 800-63 Revision 4

As you know, NIST 800-63 version 4 was released on August 1. Note that NIST does not establish implementation due dates for 800-63 for federal agencies. However, OMB has the standing requirement in OMB Circular A-130 that federal agencies must implement NIST SP 800 series publications within 1 year of publication. 

With those parameters in mind, Kantara will work to have version 4 assessment criteria written, reviewed, and commented on so that it is ready to be assessed no later than the summer of 2026. We are working on the contracts and timelines for the revised assessment criteria, which will be written, reviewed, and edited to meet the specified timeframe. Due to changes in recent months, Kantara is able to access some experts who have agreed to assist in completing this work as soon as practicable. 

Kantara will provide drafts of version 4 assessment criteria for a 45-day public comment period, as we have in the past, to gather input and suggested revisions. Details will be communicated via the Secretariat to all assurance program companies and to the broader Kantara community. Sign up to receive further details as they are released.

Please do not hesitate to reach out with your questions. Please be sure to copy the Secretariat email address. 

Kay Chopard | Executive Director
Email: kay@kantarainitiative.org
LinkedIn:  @KantaraInitiative