NIST CSWP 35, Cybersecurity Threat Modeling the Genomic Data Sequencing Workflow
NIST initial public draft illustrating cybersecurity threat modeling for a genomic data sequencing and analysis workflow.
Definition
NIST CSWP 35 initial public draft, Cybersecurity Threat Modeling the Genomic Data Sequencing Workflow: An example threat model implementation for genomic data sequencing and analysis, was published December 16, 2024. It illustrates threat modeling for genomic sequencing and analysis. It is not an HPH Cybersecurity Framework profile and is not NIST IR 8473.What this means in practice
Organizations handling genomic sequencing and analysis can use the example to inform workflow-specific threat modeling. Do not use it as an authoritative HIPAA, HICP, IEC 80001-1 or HPH-CPG crosswalk.Examples
- Illustrative: A genomic laboratory reviews CSWP 35 draft examples when modeling its sequencing and analysis workflow.
- •Do not confuse CSWP 35 with IR 8473.
- •Label the located CSWP 35 edition as an initial public draft, not a final standard.
- •Do not infer healthcare regulatory crosswalks or compliance from a genomic workflow example.
Frequently asked questions
Related terms
Grouped by themeEditor's picks
· Hand-selected related conceptsVoluntary HHS healthcare cybersecurity practices that can support recognized-security-practices evidence in HIPAA enforcement.
HHS's sector-specific list of essential and enhanced cybersecurity goals for healthcare, derived from HICP and the NIST CSF.
U.S. federal law governing the privacy and security of protected health information.
An industry-developed reference framework from the Healthcare Sector Coordinating Council for end-to-end MedTech cybersecurity.
More in Cybersecurity
· Same categoryInternational standard for risk management of IT networks that incorporate medical devices.
A risk-based framework of cybersecurity functions and outcomes published by NIST and widely used to organize MedTech security programs.
AAMI/ANSI standard establishing requirements for medical-device cybersecurity activities throughout the lifecycle.
AAMI Technical Information Report providing MedTech-specific guidance on cybersecurity risk management.
Where this term appears across MedTech Terms.
Latest in MedTech
Sources
2 sourcesSources support the definition or relevant regulatory context, not necessarily every claim on this page. Each is graded against our source-tier hierarchy so you can see what rests on binding law versus commentary.
Official-source claim check:
The merged entry misidentifies two unrelated NIST publications. CSWP 35 concerns genomic sequencing threat modeling; IR 8473 concerns EV extreme fast charging.
Partial review: verified corrections are applied, but this is not a full accuracy certification. The last full review date is unchanged.
Remaining verification limits
- Located CSWP 35 initial draft and IR 8473 final publisher records. A later final CSWP 35 edition was not established; do not imply one.
- 1NIST CSWP 35 initial draftTier 2 UncheckedNISTcsrc.nist.gov
- 2NIST CSWP 35 PDFTier 2 UncheckedNISTnvlpubs.nist.gov
Inline markers like [1] jump to the matching reference above.