Search | CSRC

Search Results

Keywords: Sorted By: Status: Series:

Showing 199 matching records.

Series	Number	Title Publications	Status	Release Date
SP	800-218	Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities SP 800-218 (Draft) Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities 9/30/2021 Status: Draft Download: SP 800-218 (Draft) (DOI); Local Download; SSDF Project homepage	Draft	9/30/2021
SP	800-216	Recommendations for Federal Vulnerability Disclosure Guidelines SP 800-216 (Draft) Recommendations for Federal Vulnerability Disclosure Guidelines 6/07/2021 Status: Draft Download: SP 800-216 (Draft) (DOI); Local Download; Comment template	Draft	6/07/2021
SP	800-214	2020 Cybersecurity and Privacy Annual Report SP 800-214 2020 Cybersecurity and Privacy Annual Report 9/28/2021 Status: Final Download: SP 800-214 (DOI); Local Download	Final	9/28/2021
SP	800-213A	IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog SP 800-213A IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog 11/29/2021 Status: Final Download: SP 800-213A (DOI); Local Download; Blog post	Final	11/29/2021
SP	800-213	IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements SP 800-213 IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements 11/29/2021 Status: Final Download: SP 800-213 (DOI); Local Download; Blog post	Final	11/29/2021
SP	800-211	2019 NIST/ITL Cybersecurity Program Annual Report SP 800-211 2019 NIST/ITL Cybersecurity Program Annual Report 8/24/2020 Status: Final Download: SP 800-211 (DOI); Local Download	Final	8/24/2020
SP	800-210	General Access Control Guidance for Cloud Systems SP 800-210 General Access Control Guidance for Cloud Systems 7/31/2020 Status: Final Download: SP 800-210 (DOI); Local Download	Final	7/31/2020
SP	800-209	Security Guidelines for Storage Infrastructure SP 800-209 Security Guidelines for Storage Infrastructure 10/26/2020 Status: Final Download: SP 800-209 (DOI); Local Download	Final	10/26/2020
SP	800-208	Recommendation for Stateful Hash-Based Signature Schemes SP 800-208 Recommendation for Stateful Hash-Based Signature Schemes 10/29/2020 Status: Final Download: SP 800-208 (DOI); Local Download; Comments received	Final	10/29/2020
SP	800-207	Zero Trust Architecture SP 800-207 Zero Trust Architecture 8/11/2020 Status: Final Download: SP 800-207 (DOI); Local Download; ZTA project at NCCoE; Japanese translation (unofficial--from PwC Consulting LLC for IPA, Japan)	Final	8/11/2020
SP	800-206	Annual Report 2018: NIST/ITL Cybersecurity Program SP 800-206 Annual Report 2018: NIST/ITL Cybersecurity Program 3/13/2020 Status: Final Download: SP 800-206 (DOI); Local Download	Final	3/13/2020
SP	800-205	Attribute Considerations for Access Control Systems SP 800-205 Attribute Considerations for Access Control Systems 6/18/2019 Status: Final Download: SP 800-205 (DOI); Local Download	Final	6/18/2019
SP	800-204C	Implementation of DevSecOps for a Microservices-based Application with Service Mesh SP 800-204C (Draft) Implementation of DevSecOps for a Microservices-based Application with Service Mesh 9/29/2021 Status: Draft Download: SP 800-204C (Draft) (DOI); Local Download	Draft	9/29/2021
SP	800-204B	Attribute-based Access Control for Microservices-based Applications using a Service Mesh SP 800-204B Attribute-based Access Control for Microservices-based Applications using a Service Mesh 8/06/2021 Status: Final Download: SP 800-204B (DOI); Local Download	Final	8/06/2021
SP	800-204A	Building Secure Microservices-based Applications Using Service-Mesh Architecture SP 800-204A Building Secure Microservices-based Applications Using Service-Mesh Architecture 5/27/2020 Status: Final Download: SP 800-204A (DOI); Local Download	Final	5/27/2020
SP	800-204	Security Strategies for Microservices-based Application Systems SP 800-204 Security Strategies for Microservices-based Application Systems 8/07/2019 Status: Final Download: SP 800-204 (DOI); Local Download	Final	8/07/2019
SP	800-203	2017 NIST/ITL Cybersecurity Program Annual Report SP 800-203 2017 NIST/ITL Cybersecurity Program Annual Report 7/02/2018 Status: Final Download: SP 800-203 (DOI); Local Download	Final	7/02/2018
SP	800-202	Quick Start Guide for Populating Mobile Test Devices SP 800-202 Quick Start Guide for Populating Mobile Test Devices 5/10/2018 Status: Final Download: SP 800-202 (DOI); Local Download; Computer Forensics Tool Testing (CFTT) Program; CFTT Federated Testing Project	Final	5/10/2018
SP	800-195	2016 NIST/ITL Cybersecurity Program Annual Report SP 800-195 2016 NIST/ITL Cybersecurity Program Annual Report 9/28/2017 Status: Final Download: SP 800-195 (DOI); Local Download	Final	9/28/2017
SP	800-193	Platform Firmware Resiliency Guidelines SP 800-193 Platform Firmware Resiliency Guidelines 5/04/2018 Status: Final Download: SP 800-193 (DOI); Local Download	Final	5/04/2018
SP	800-192	Verification and Test Methods for Access Control Policies/Models SP 800-192 Verification and Test Methods for Access Control Policies/Models 6/27/2017 Status: Final Download: SP 800-192 (DOI); Local Download	Final	6/27/2017
SP	800-190	Application Container Security Guide SP 800-190 Application Container Security Guide 9/25/2017 Status: Final Download: SP 800-190 (DOI); Local Download; Japanese translation (unofficial--from IPA, Japan)	Final	9/25/2017
SP	800-189	Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation SP 800-189 Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation 12/17/2019 Status: Final Download: SP 800-189 (DOI); Local Download; NIST RPKI Deployment Monitor	Final	12/17/2019
SP	800-188	De-Identifying Government Datasets (2nd Draft) SP 800-188 (Draft) De-Identifying Government Datasets (2nd Draft) 12/15/2016 Status: Draft Download: Draft SP 800-188; Comment Template	Draft	12/15/2016
SP	800-187	Guide to LTE Security SP 800-187 Guide to LTE Security 12/21/2017 Status: Final Download: SP 800-187 (DOI); Local Download	Final	12/21/2017
SP	800-186	Recommendations for Discrete Logarithm-Based Cryptography: Elliptic Curve Domain Parameters SP 800-186 (Draft) Recommendations for Discrete Logarithm-Based Cryptography: Elliptic Curve Domain Parameters 10/31/2019 Status: Draft Download: SP 800-186 (Draft) (DOI); Local Download; Comments received on Draft SP 800-186	Draft	10/31/2019
SP	800-185	SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash SP 800-185 SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash 12/22/2016 Status: Final Download: SP 800-185 (DOI); Local Download; Comments Received on Draft SP 800-185	Final	12/22/2016
SP	800-184	Guide for Cybersecurity Event Recovery SP 800-184 Guide for Cybersecurity Event Recovery 12/22/2016 Status: Final Download: SP 800-184 (DOI); Local Download; Press Release (12-22-2016)	Final	12/22/2016
SP	800-183	Networks of 'Things' SP 800-183 Networks of 'Things' 7/28/2016 Status: Final Download: SP 800-183 (DOI); Local Download; Press Release	Final	7/28/2016
SP	800-182	Computer Security Division 2015 Annual Report SP 800-182 Computer Security Division 2015 Annual Report 8/10/2016 Status: Final Download: SP 800-182 (DOI); Local Download	Final	8/10/2016
SP	800-181 Rev. 1	Workforce Framework for Cybersecurity (NICE Framework) SP 800-181 Rev. 1 Workforce Framework for Cybersecurity (NICE Framework) 11/16/2020 Status: Final Download: SP 800-181 Rev. 1 (DOI); Local Download; NICE Framework homepage; Blog post: "Back to the Basics: Announcing the New NICE Framework"	Final	11/16/2020
SP	800-180	NIST Definition of Microservices, Application Containers and System Virtual Machines SP 800-180 (Draft) NIST Definition of Microservices, Application Containers and System Virtual Machines 2/18/2016 Status: Draft Download: Draft SP 800-180; Comment Template	Draft	2/18/2016
SP	800-179 Rev. 1	Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-179 Rev. 1 (Draft) Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist 10/19/2018 Status: Draft Download: Draft SP 800-179 Rev. 1; Comment template; Supplemental Content (GitHub)	Draft	10/19/2018
SP	800-179	Guide to Securing Apple OS X 10.10 Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-179 Guide to Securing Apple OS X 10.10 Systems for IT Professionals: A NIST Security Configuration Checklist 12/05/2016 Status: Final Download: SP 800-179 (DOI); Local Download; Supplemental Content (GitHub); National Checklist Program	Final	12/05/2016
SP	800-178	A Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) SP 800-178 A Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) 10/03/2016 Status: Final Download: SP 800-178 (DOI); Local Download	Final	10/03/2016
SP	800-177 Rev. 1	Trustworthy Email SP 800-177 Rev. 1 Trustworthy Email 2/26/2019 Status: Final Download: SP 800-177 Rev. 1 (DOI); Local Download; High Assurance Domains project	Final	2/26/2019
SP	800-176	Computer Security Division 2014 Annual Report SP 800-176 Computer Security Division 2014 Annual Report 8/20/2015 Status: Final Download: SP 800-176 (DOI); Local Download	Final	8/20/2015
SP	800-175B Rev. 1	Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms SP 800-175B Rev. 1 Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms 3/31/2020 Status: Final Download: SP 800-175B Rev. 1 (DOI); Local Download	Final	3/31/2020
SP	800-175A	Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies SP 800-175A Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies 8/22/2016 Status: Final Download: SP 800-175A (DOI); Local Download; Comments Received from Final Draft	Final	8/22/2016
SP	800-172A	Assessing Enhanced Security Requirements for Controlled Unclassified Information SP 800-172A (Draft) Assessing Enhanced Security Requirements for Controlled Unclassified Information 4/27/2021 Status: Draft Download: SP 800-172A (Draft) (DOI); Local Download; Comment template	Draft	4/27/2021
SP	800-172	Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171 SP 800-172 Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171 2/02/2021 Status: Final Download: SP 800-172 (DOI); Local Download; NIST news article	Final	2/02/2021
SP	800-171 Rev. 2	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 2 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 1/28/2021 Status: Final Download: SP 800-171 Rev. 2 (DOI); Local Download; CUI Plan of Action template; CUI SSP template **[see Planning Note]; Mapping: Cybersecurity Framework v.1.0 to SP 800-171 Rev. 2	Final	1/28/2021
SP	800-171A	Assessing Security Requirements for Controlled Unclassified Information SP 800-171A Assessing Security Requirements for Controlled Unclassified Information 6/13/2018 Status: Final Download: SP 800-171A (DOI); Local Download; CUI SSP template **[see Planning Note]; CUI Plan of Action template	Final	6/13/2018
SP	800-170	Computer Security Division 2013 Annual Report SP 800-170 Computer Security Division 2013 Annual Report 9/04/2014 Status: Final Download: SP 800-170 (DOI); Local Download	Final	9/04/2014
SP	800-168	Approximate Matching: Definition and Terminology SP 800-168 Approximate Matching: Definition and Terminology 7/02/2014 Status: Final Download: SP 800-168 (DOI); Local Download	Final	7/02/2014
SP	800-167	Guide to Application Whitelisting SP 800-167 Guide to Application Whitelisting 10/28/2015 Status: Final Download: SP 800-167 (DOI); Local Download; Press Release	Final	10/28/2015
SP	800-166	Derived PIV Application and Data Model Test Guidelines SP 800-166 Derived PIV Application and Data Model Test Guidelines 6/06/2016 Status: Final Download: SP 800-166 (DOI); Local Download	Final	6/06/2016
SP	800-165	Computer Security Division 2012 Annual Report SP 800-165 Computer Security Division 2012 Annual Report 7/22/2013 Status: Final Download: SP 800-165 (DOI); Local Download	Final	7/22/2013
SP	800-164	Guidelines on Hardware-Rooted Security in Mobile Devices SP 800-164 (Draft) Guidelines on Hardware-Rooted Security in Mobile Devices 10/31/2012 Status: Draft Download: Draft SP 800-164	Draft	10/31/2012
SP	800-163 Rev. 1	Vetting the Security of Mobile Applications SP 800-163 Rev. 1 Vetting the Security of Mobile Applications 4/19/2019 Status: Final Download: SP 800-163 Rev. 1 (DOI); Local Download	Final	4/19/2019
SP	800-162	Guide to Attribute Based Access Control (ABAC) Definition and Considerations SP 800-162 Guide to Attribute Based Access Control (ABAC) Definition and Considerations 8/02/2019 Status: Final Download: SP 800-162 (DOI); Local Download	Final	8/02/2019
SP	800-161 Rev. 1	Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations (2nd Draft) SP 800-161 Rev. 1 (Draft) Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations (2nd Draft) 10/28/2021 Status: Draft Download: SP 800-161 Rev. 1 (Draft) (DOI); Local Download; Comment template; NIST’s Cyber Supply Chain Risk Management Program	Draft	10/28/2021
SP	800-161	Supply Chain Risk Management Practices for Federal Information Systems and Organizations SP 800-161 Supply Chain Risk Management Practices for Federal Information Systems and Organizations 4/08/2015 Status: Final Download: SP 800-161 (DOI); Local Download	Final	4/08/2015
SP	800-160 Vol. 2 Rev. 1	Developing Cyber-Resilient Systems: A Systems Security Engineering Approach SP 800-160 Vol. 2 Rev. 1 Developing Cyber-Resilient Systems: A Systems Security Engineering Approach 12/09/2021 Status: Final Download: SP 800-160 Vol. 2 Rev. 1 (DOI); Local Download; Systems Security Engineering (SSE) Project	Final	12/09/2021
SP	800-160 Vol. 1	Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems SP 800-160 Vol. 1 Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems 3/21/2018 Status: Final Download: SP 800-160 Vol. 1 (DOI); Local Download; Appendix D Supplement; Systems Security Engineering (SSE) Project; "Rethinking Cybersecurity from the Inside Out" (blog post)	Final	3/21/2018
SP	800-157	Guidelines for Derived Personal Identity Verification (PIV) Credentials SP 800-157 Guidelines for Derived Personal Identity Verification (PIV) Credentials 12/19/2014 Status: Final Download: SP 800-157 (DOI); Local Download; Comments and resolutions on Draft SP 800-157 (Mar. 2014)	Final	12/19/2014
SP	800-156	Representation of PIV Chain-of-Trust for Import and Export SP 800-156 Representation of PIV Chain-of-Trust for Import and Export 5/20/2016 Status: Final Download: SP 800-156 (DOI); Local Download; XSD Schema File for SP 800-156 Chain of Trust	Final	5/20/2016
SP	800-155	BIOS Integrity Measurement Guidelines SP 800-155 (Draft) BIOS Integrity Measurement Guidelines 12/08/2011 Status: Draft Download: Draft SP 800-155	Draft	12/08/2011
SP	800-154	Guide to Data-Centric System Threat Modeling SP 800-154 (Draft) Guide to Data-Centric System Threat Modeling 3/14/2016 Status: Draft Download: Draft SP 800-154; Comment Template	Draft	3/14/2016
SP	800-153	Guidelines for Securing Wireless Local Area Networks (WLANs) SP 800-153 Guidelines for Securing Wireless Local Area Networks (WLANs) 2/21/2012 Status: Final Download: SP 800-153 (DOI); Local Download; Press Release (Mar. 6, 2012)	Final	2/21/2012
SP	800-152	A Profile for U.S. Federal Cryptographic Key Management Systems (CKMS) SP 800-152 A Profile for U.S. Federal Cryptographic Key Management Systems (CKMS) 10/28/2015 Status: Final Download: SP 800-152 (DOI); Local Download; Comments received on final (3rd) Draft (Dec. 2014); Draft 3 (Dec. 2014); Draft 2 (Jan. 2014); Draft (Aug. 2012)	Final	10/28/2015
SP	800-150	Guide to Cyber Threat Information Sharing SP 800-150 Guide to Cyber Threat Information Sharing 10/04/2016 Status: Final Download: SP 800-150 (DOI); Local Download	Final	10/04/2016
SP	800-147B	BIOS Protection Guidelines for Servers SP 800-147B BIOS Protection Guidelines for Servers 8/28/2014 Status: Final Download: SP 800-147B (DOI); Local Download	Final	8/28/2014
SP	800-147	BIOS Protection Guidelines SP 800-147 BIOS Protection Guidelines 4/29/2011 Status: Final Download: SP 800-147 (DOI); Local Download; Press Release	Final	4/29/2011
SP	800-146	Cloud Computing Synopsis and Recommendations SP 800-146 Cloud Computing Synopsis and Recommendations 5/29/2012 Status: Final Download: SP 800-146 (DOI); Local Download; SP 800-146 (EPUB); Press Release	Final	5/29/2012
SP	800-145	The NIST Definition of Cloud Computing SP 800-145 The NIST Definition of Cloud Computing 9/28/2011 Status: Final Download: SP 800-145 (DOI); Local Download; SP 800-145 (EPUB); Press Release	Final	9/28/2011
SP	800-144	Guidelines on Security and Privacy in Public Cloud Computing SP 800-144 Guidelines on Security and Privacy in Public Cloud Computing 12/09/2011 Status: Final Download: SP 800-144 (DOI); Local Download; SP 800-144 (EPUB); Press Release	Final	12/09/2011
SP	800-142	Practical Combinatorial Testing SP 800-142 Practical Combinatorial Testing 10/07/2010 Status: Final Download: SP 800-142 (DOI); Local Download	Final	10/07/2010
SP	800-140F Rev. 1	CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140F Rev. 1 (Draft) CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 8/20/2021 Status: Draft Download: SP 800-140F Rev. 1 (Draft) (DOI); Local Download; Comment template	Draft	8/20/2021
SP	800-140F	CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140F CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140F (DOI); Local Download	Final	3/20/2020
SP	800-140E	CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790 Annex E and ISO/IEC 24579 Section 6.17 SP 800-140E CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790 Annex E and ISO/IEC 24579 Section 6.17 3/20/2020 Status: Final Download: SP 800-140E (DOI); Local Download	Final	3/20/2020
SP	800-140D Rev. 1	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D Rev. 1 (Draft) CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 8/20/2021 Status: Draft Download: SP 800-140D Rev. 1 (Draft) (DOI); Local Download; Comments template	Draft	8/20/2021
SP	800-140D	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140D (DOI); Local Download	Final	3/20/2020
SP	800-140C Rev. 1	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C Rev. 1 (Draft) CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 8/20/2021 Status: Draft Download: SP 800-140C Rev. 1 (Draft) (DOI); Local Download; Comment template	Draft	8/20/2021
SP	800-140C	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140C (DOI); Local Download	Final	3/20/2020
SP	800-140B	CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 3/20/2020 Status: Final Download: SP 800-140B (DOI); Local Download	Final	3/20/2020
SP	800-140A	CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140A CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140A (DOI); Local Download	Final	3/20/2020
SP	800-140	FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140 FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140 (DOI); Local Download	Final	3/20/2020
SP	800-137A	Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment SP 800-137A Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment 5/21/2020 Status: Final Download: SP 800-137A (DOI); Local Download; Element Catalog for SP 800-137A	Final	5/21/2020
SP	800-137	Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations SP 800-137 Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations 9/30/2011 Status: Final Download: SP 800-137 (DOI); Local Download; Press Release	Final	9/30/2011
SP	800-135 Rev. 1	Recommendation for Existing Application-Specific Key Derivation Functions SP 800-135 Rev. 1 Recommendation for Existing Application-Specific Key Derivation Functions 12/23/2011 Status: Final Download: SP 800-135 Rev. 1 (DOI); Local Download; Informative Note (09-19-2016)	Final	12/23/2011
SP	800-133 Rev. 2	Recommendation for Cryptographic Key Generation SP 800-133 Rev. 2 Recommendation for Cryptographic Key Generation 6/04/2020 Status: Final Download: SP 800-133 Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-133 Rev. 2	Final	6/04/2020
SP	800-132	Recommendation for Password-Based Key Derivation: Part 1: Storage Applications SP 800-132 Recommendation for Password-Based Key Derivation: Part 1: Storage Applications 12/22/2010 Status: Final Download: SP 800-132 (DOI); Local Download	Final	12/22/2010
SP	800-131A Rev. 2	Transitioning the Use of Cryptographic Algorithms and Key Lengths SP 800-131A Rev. 2 Transitioning the Use of Cryptographic Algorithms and Key Lengths 3/21/2019 Status: Final Download: SP 800-131A Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-131A Rev. 2	Final	3/21/2019
SP	800-130	A Framework for Designing Cryptographic Key Management Systems SP 800-130 A Framework for Designing Cryptographic Key Management Systems 8/15/2013 Status: Final Download: SP 800-130 (DOI); Local Download	Final	8/15/2013
SP	800-128	Guide for Security-Focused Configuration Management of Information Systems SP 800-128 Guide for Security-Focused Configuration Management of Information Systems 10/10/2019 Status: Final Download: SP 800-128 (DOI); Local Download	Final	10/10/2019
SP	800-126 Rev. 3	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 SP 800-126 Rev. 3 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 2/14/2018 Status: Final Download: SP 800-126 Rev. 3 (DOI); Local Download; SCAP project	Final	2/14/2018
SP	800-126 Rev. 2	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2 SP 800-126 Rev. 2 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2 3/19/2012 Status: Final Download: SP 800-126 Rev. 2 (DOI); Local Download; SCAP Project	Final	3/19/2012
SP	800-126A	SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 SP 800-126A SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 2/14/2018 Status: Final Download: SP 800-126A (DOI); Local Download; SCAP project	Final	2/14/2018
SP	800-126 Rev. 1	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.1 SP 800-126 Rev. 1 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.1 2/25/2011 Status: Final Download: SP 800-126 Rev. 1 (DOI); Local Download	Final	2/25/2011
SP	800-125B	Secure Virtual Network Configuration for Virtual Machine (VM) Protection SP 800-125B Secure Virtual Network Configuration for Virtual Machine (VM) Protection 3/07/2016 Status: Final Download: SP 800-125B (DOI); Local Download	Final	3/07/2016
SP	800-125A Rev. 1	Security Recommendations for Server-based Hypervisor Platforms SP 800-125A Rev. 1 Security Recommendations for Server-based Hypervisor Platforms 6/07/2018 Status: Final Download: SP 800-125A Rev. 1 (DOI); Local Download	Final	6/07/2018
SP	800-125	Guide to Security for Full Virtualization Technologies SP 800-125 Guide to Security for Full Virtualization Technologies 1/28/2011 Status: Final Download: SP 800-125 (DOI); Local Download; Press Release	Final	1/28/2011
SP	800-124 Rev. 2	Guidelines for Managing the Security of Mobile Devices in the Enterprise SP 800-124 Rev. 2 (Draft) Guidelines for Managing the Security of Mobile Devices in the Enterprise 3/24/2020 Status: Draft Download: SP 800-124 Rev. 2 (Draft) (DOI); Local Download	Draft	3/24/2020
SP	800-124 Rev. 1	Guidelines for Managing the Security of Mobile Devices in the Enterprise SP 800-124 Rev. 1 Guidelines for Managing the Security of Mobile Devices in the Enterprise 6/21/2013 Status: Final Download: SP 800-124 Rev. 1 (DOI); Local Download; SP 800-124 Rev. 1 (EPUB); Press Release	Final	6/21/2013
SP	800-123	Guide to General Server Security SP 800-123 Guide to General Server Security 7/25/2008 Status: Final Download: SP 800-123 (DOI); Local Download; SP 800-123 (EPUB)	Final	7/25/2008
SP	800-122	Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) SP 800-122 Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) 4/06/2010 Status: Final Download: SP 800-122 (DOI); Local Download; SP 800-122 (EPUB)	Final	4/06/2010
SP	800-121 Rev. 2	Guide to Bluetooth Security SP 800-121 Rev. 2 Guide to Bluetooth Security 5/08/2017 Status: Final Download: SP 800-121 Rev. 2 (DOI); Local Download	Final	5/08/2017
SP	800-119	Guidelines for the Secure Deployment of IPv6 SP 800-119 Guidelines for the Secure Deployment of IPv6 12/29/2010 Status: Final Download: SP 800-119 (DOI); Local Download	Final	12/29/2010
SP	800-116 Rev. 1	Guidelines for the Use of PIV Credentials in Facility Access SP 800-116 Rev. 1 Guidelines for the Use of PIV Credentials in Facility Access 6/29/2018 Status: Final Download: SP 800-116 Rev. 1 (DOI); Local Download	Final	6/29/2018
SP	800-115	Technical Guide to Information Security Testing and Assessment SP 800-115 Technical Guide to Information Security Testing and Assessment 9/30/2008 Status: Final Download: SP 800-115 (DOI); Local Download; SP 800-115 (EPUB)	Final	9/30/2008
SP	800-114 Rev. 1	User's Guide to Telework and Bring Your Own Device (BYOD) Security SP 800-114 Rev. 1 User's Guide to Telework and Bring Your Own Device (BYOD) Security 7/29/2016 Status: Final Download: SP 800-114 Rev. 1 (DOI); Local Download	Final	7/29/2016
SP	800-113	Guide to SSL VPNs SP 800-113 Guide to SSL VPNs 7/01/2008 Status: Final Download: SP 800-113 (DOI); Local Download	Final	7/01/2008
SP	800-111	Guide to Storage Encryption Technologies for End User Devices SP 800-111 Guide to Storage Encryption Technologies for End User Devices 11/15/2007 Status: Final Download: SP 800-111 (DOI); Local Download	Final	11/15/2007
SP	800-108 Rev. 1	Recommendation for Key Derivation Using Pseudorandom Functions SP 800-108 Rev. 1 (Draft) Recommendation for Key Derivation Using Pseudorandom Functions 10/18/2021 Status: Draft Download: SP 800-108 Rev. 1 (Draft) (DOI); Local Download	Draft	10/18/2021
SP	800-108	Recommendation for Key Derivation Using Pseudorandom Functions (Revised) SP 800-108 Recommendation for Key Derivation Using Pseudorandom Functions (Revised) 10/01/2009 Status: Final Download: SP 800-108 (DOI); Local Download	Final	10/01/2009
SP	800-107 Rev. 1	Recommendation for Applications Using Approved Hash Algorithms SP 800-107 Rev. 1 Recommendation for Applications Using Approved Hash Algorithms 8/24/2012 Status: Final Download: SP 800-107 Rev. 1 (DOI); Local Download	Final	8/24/2012
SP	800-106	Randomized Hashing for Digital Signatures SP 800-106 Randomized Hashing for Digital Signatures 2/25/2009 Status: Final Download: SP 800-106 (DOI); Local Download	Final	2/25/2009
SP	800-102	Recommendation for Digital Signature Timeliness SP 800-102 Recommendation for Digital Signature Timeliness 9/23/2009 Status: Final Download: SP 800-102 (DOI); Local Download	Final	9/23/2009
SP	800-101 Rev. 1	Guidelines on Mobile Device Forensics SP 800-101 Rev. 1 Guidelines on Mobile Device Forensics 5/15/2014 Status: Final Download: SP 800-101 Rev. 1 (DOI); Local Download	Final	5/15/2014
SP	800-100	Information Security Handbook: A Guide for Managers SP 800-100 Information Security Handbook: A Guide for Managers 3/07/2007 Status: Final Download: SP 800-100 (DOI); Local Download	Final	3/07/2007
SP	800-98	Guidelines for Securing Radio Frequency Identification (RFID) Systems SP 800-98 Guidelines for Securing Radio Frequency Identification (RFID) Systems 4/06/2007 Status: Final Download: SP 800-98 (DOI); Local Download	Final	4/06/2007
SP	800-97	Establishing Wireless Robust Security Networks: A Guide to IEEE 802.11i SP 800-97 Establishing Wireless Robust Security Networks: A Guide to IEEE 802.11i 2/07/2007 Status: Final Download: SP 800-97 (DOI); Local Download	Final	2/07/2007
SP	800-96	PIV Card to Reader Interoperability Guidelines SP 800-96 PIV Card to Reader Interoperability Guidelines 12/29/2006 Status: Final Download: SP 800-96 (DOI); Local Download	Final	12/29/2006
SP	800-95	Guide to Secure Web Services SP 800-95 Guide to Secure Web Services 8/29/2007 Status: Final Download: SP 800-95 (DOI); Local Download	Final	8/29/2007
SP	800-94 Rev. 1	Guide to Intrusion Detection and Prevention Systems (IDPS) SP 800-94 Rev. 1 (Draft) Guide to Intrusion Detection and Prevention Systems (IDPS) 7/25/2012 Status: Draft Download: Draft SP 800-94 Rev. 1	Draft	7/25/2012
SP	800-94	Guide to Intrusion Detection and Prevention Systems (IDPS) SP 800-94 Guide to Intrusion Detection and Prevention Systems (IDPS) 2/20/2007 Status: Final Download: SP 800-94 (DOI); Local Download	Final	2/20/2007
SP	800-92	Guide to Computer Security Log Management SP 800-92 Guide to Computer Security Log Management 9/13/2006 Status: Final Download: SP 800-92 (DOI); Local Download; SP 800-92 (EPUB)	Final	9/13/2006
SP	800-90C	Recommendation for Random Bit Generator (RBG) Constructions SP 800-90C (Draft) Recommendation for Random Bit Generator (RBG) Constructions 4/13/2016 Status: Draft Download: Second Draft SP 800-90C; Comment Template	Draft	4/13/2016
SP	800-90B	Recommendation for the Entropy Sources Used for Random Bit Generation SP 800-90B Recommendation for the Entropy Sources Used for Random Bit Generation 1/10/2018 Status: Final Download: SP 800-90B (DOI); Local Download; 2nd Draft SP 800-90B; Comments received on 2nd Draft; Summary of Changes (from 2nd Draft to Final); Markup of Changes (from 2nd Draft to Final)	Final	1/10/2018
SP	800-90A Rev. 1	Recommendation for Random Number Generation Using Deterministic Random Bit Generators SP 800-90A Rev. 1 Recommendation for Random Number Generation Using Deterministic Random Bit Generators 6/24/2015 Status: Final Download: SP 800-90A Rev. 1 (DOI); Local Download; Press Release	Final	6/24/2015
SP	800-89	Recommendation for Obtaining Assurances for Digital Signature Applications SP 800-89 Recommendation for Obtaining Assurances for Digital Signature Applications 11/30/2006 Status: Final Download: SP 800-89 (DOI); Local Download	Final	11/30/2006
SP	800-88 Rev. 1	Guidelines for Media Sanitization SP 800-88 Rev. 1 Guidelines for Media Sanitization 12/17/2014 Status: Final Download: SP 800-88 Rev. 1 (DOI); Local Download; Sample "Certificate of Sanitization" from Appendix G	Final	12/17/2014
SP	800-87 Rev. 2	Codes for Identification of Federal and Federally-Assisted Organizations SP 800-87 Rev. 2 Codes for Identification of Federal and Federally-Assisted Organizations 4/19/2018 Status: Final Download: SP 800-87 Rev. 2 (DOI); Local Download	Final	4/19/2018
SP	800-86	Guide to Integrating Forensic Techniques into Incident Response SP 800-86 Guide to Integrating Forensic Techniques into Incident Response 9/01/2006 Status: Final Download: SP 800-86 (DOI); Local Download	Final	9/01/2006
SP	800-85B-4	PIV Data Model Test Guidelines SP 800-85B-4 (Draft) PIV Data Model Test Guidelines 8/06/2014 Status: Draft Download: Draft SP 800-85B-4; Comment Template	Draft	8/06/2014
SP	800-85B	PIV Data Model Test Guidelines SP 800-85B PIV Data Model Test Guidelines 7/31/2006 Status: Final Download: SP 800-85B (DOI); Local Download	Final	7/31/2006
SP	800-85A-4	PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 Compliance) SP 800-85A-4 PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 Compliance) 4/13/2016 Status: Final Download: SP 800-85A-4 (DOI); Local Download	Final	4/13/2016
SP	800-84	Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities SP 800-84 Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities 9/21/2006 Status: Final Download: SP 800-84 (DOI); Local Download; SP 800-84 (EPUB)	Final	9/21/2006
SP	800-83 Rev. 1	Guide to Malware Incident Prevention and Handling for Desktops and Laptops SP 800-83 Rev. 1 Guide to Malware Incident Prevention and Handling for Desktops and Laptops 7/22/2013 Status: Final Download: SP 800-83 Rev. 1 (DOI); Local Download	Final	7/22/2013
SP	800-82 Rev. 3	PRE-DRAFT Call for Comments: Guide to Industrial Control Systems (ICS) Security SP 800-82 Rev. 3 (Draft) PRE-DRAFT Call for Comments: Guide to Industrial Control Systems (ICS) Security 4/23/2021 Status: Draft Download: None available	Draft	4/23/2021
SP	800-82 Rev. 2	Guide to Industrial Control Systems (ICS) Security SP 800-82 Rev. 2 Guide to Industrial Control Systems (ICS) Security 6/03/2015 Status: Final Download: SP 800-82 Rev. 2 (DOI); Local Download; Press Release	Final	6/03/2015
SP	800-81-2	Secure Domain Name System (DNS) Deployment Guide SP 800-81-2 Secure Domain Name System (DNS) Deployment Guide 9/18/2013 Status: Final Download: SP 800-81-2 (DOI); Local Download	Final	9/18/2013
SP	800-79-2	Guidelines for the Authorization of Personal Identity Verification Card Issuers (PCI) and Derived PIV Credential Issuers (DPCI) SP 800-79-2 Guidelines for the Authorization of Personal Identity Verification Card Issuers (PCI) and Derived PIV Credential Issuers (DPCI) 7/30/2015 Status: Final Download: SP 800-79-2 (DOI); Local Download	Final	7/30/2015
SP	800-78-4	Cryptographic Algorithms and Key Sizes for Personal Identity Verification SP 800-78-4 Cryptographic Algorithms and Key Sizes for Personal Identity Verification 5/29/2015 Status: Final Download: SP 800-78-4 (DOI); Local Download	Final	5/29/2015
SP	800-77 Rev. 1	Guide to IPsec VPNs SP 800-77 Rev. 1 Guide to IPsec VPNs 6/30/2020 Status: Final Download: SP 800-77 Rev. 1 (DOI); Local Download	Final	6/30/2020
SP	800-76-2	Biometric Specifications for Personal Identity Verification SP 800-76-2 Biometric Specifications for Personal Identity Verification 7/11/2013 Status: Final Download: SP 800-76-2 (DOI); Local Download	Final	7/11/2013
SP	800-73-4	Interfaces for Personal Identity Verification SP 800-73-4 Interfaces for Personal Identity Verification 2/12/2016 Status: Final Download: SP 800-73-4 (DOI); Local Download; Press Release (06-16-2015)	Final	2/12/2016
SP	800-72	Guidelines on PDA Forensics SP 800-72 Guidelines on PDA Forensics 11/01/2004 Status: Final Download: SP 800-72 (DOI); Local Download	Final	11/01/2004
SP	800-71	Recommendation for Key Establishment Using Symmetric Block Ciphers SP 800-71 (Draft) Recommendation for Key Establishment Using Symmetric Block Ciphers 7/02/2018 Status: Draft Download: Draft SP 800-71	Draft	7/02/2018
SP	800-70 Rev. 4	National Checklist Program for IT Products: Guidelines for Checklist Users and Developers SP 800-70 Rev. 4 National Checklist Program for IT Products: Guidelines for Checklist Users and Developers 2/15/2018 Status: Final Download: SP 800-70 Rev. 4 (DOI); Local Download; National Checklist Program	Final	2/15/2018
SP	800-67 Rev. 2	Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher SP 800-67 Rev. 2 Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher 11/17/2017 Status: Final Download: SP 800-67 Rev. 2 (DOI); Local Download; NIST Statement on Current Use and Deprecation of TDEA (7/11/17)	Final	11/17/2017
SP	800-66 Rev. 2	PRE-DRAFT Call for Comments: Implementing the HIPAA Security Rule SP 800-66 Rev. 2 (Draft) PRE-DRAFT Call for Comments: Implementing the HIPAA Security Rule 4/29/2021 Status: Draft Download: None available	Draft	4/29/2021
SP	800-66 Rev. 1	An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule SP 800-66 Rev. 1 An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule 10/23/2008 Status: Final Download: SP 800-66 Rev. 1 (DOI); Local Download	Final	10/23/2008
SP	800-63-4	PRE-DRAFT Call for Comments: Digital Identity Guidelines SP 800-63-4 (Draft) PRE-DRAFT Call for Comments: Digital Identity Guidelines 6/08/2020 Status: Draft Download: None available	Draft	6/08/2020
SP	800-63-3	Digital Identity Guidelines SP 800-63-3 Digital Identity Guidelines 3/02/2020 Status: Final Download: SP 800-63-3 (DOI); Local Download; FAQ; SP 800-63 (GitHub)	Final	3/02/2020
SP	800-63C	Digital Identity Guidelines: Federation and Assertions SP 800-63C Digital Identity Guidelines: Federation and Assertions 3/02/2020 Status: Final Download: SP 800-63C (DOI); Local Download	Final	3/02/2020
SP	800-63B	Digital Identity Guidelines: Authentication and Lifecycle Management SP 800-63B Digital Identity Guidelines: Authentication and Lifecycle Management 3/02/2020 Status: Final Download: SP 800-63B (DOI); Local Download	Final	3/02/2020
SP	800-63A	Digital Identity Guidelines: Enrollment and Identity Proofing SP 800-63A Digital Identity Guidelines: Enrollment and Identity Proofing 3/02/2020 Status: Final Download: SP 800-63A (DOI); Local Download	Final	3/02/2020
SP	800-61 Rev. 2	Computer Security Incident Handling Guide SP 800-61 Rev. 2 Computer Security Incident Handling Guide 8/06/2012 Status: Final Download: SP 800-61 Rev. 2 (DOI); Local Download; Press Release	Final	8/06/2012
SP	800-60 Vol. 2 Rev. 1	Guide for Mapping Types of Information and Information Systems to Security Categories: Appendices SP 800-60 Vol. 2 Rev. 1 Guide for Mapping Types of Information and Information Systems to Security Categories: Appendices 8/01/2008 Status: Final Download: SP 800-60 Vol. 2 Rev. 1 (DOI); Local Download	Final	8/01/2008
SP	800-60 Vol. 1 Rev. 1	Guide for Mapping Types of Information and Information Systems to Security Categories SP 800-60 Vol. 1 Rev. 1 Guide for Mapping Types of Information and Information Systems to Security Categories 8/01/2008 Status: Final Download: SP 800-60 Vol. 1 Rev. 1 (DOI); Local Download	Final	8/01/2008
SP	800-59	Guideline for Identifying an Information System as a National Security System SP 800-59 Guideline for Identifying an Information System as a National Security System 8/20/2003 Status: Final Download: SP 800-59 (DOI); Local Download	Final	8/20/2003
SP	800-58	Security Considerations for Voice Over IP Systems SP 800-58 Security Considerations for Voice Over IP Systems 1/01/2005 Status: Final Download: SP 800-58 (DOI); Local Download	Final	1/01/2005
SP	800-57 Part 3 Rev. 1	Recommendation for Key Management, Part 3: Application-Specific Key Management Guidance SP 800-57 Part 3 Rev. 1 Recommendation for Key Management, Part 3: Application-Specific Key Management Guidance 1/22/2015 Status: Final Download: SP 800-57 Part 3 Rev. 1 (DOI); Local Download	Final	1/22/2015
SP	800-57 Part 2 Rev. 1	Recommendation for Key Management: Part 2 – Best Practices for Key Management Organizations SP 800-57 Part 2 Rev. 1 Recommendation for Key Management: Part 2 – Best Practices for Key Management Organizations 5/23/2019 Status: Final Download: SP 800-57 Part 2 Rev. 1 (DOI); Local Download	Final	5/23/2019
SP	800-57 Part 1 Rev. 5	Recommendation for Key Management: Part 1 – General SP 800-57 Part 1 Rev. 5 Recommendation for Key Management: Part 1 – General 5/04/2020 Status: Final Download: SP 800-57 Part 1 Rev. 5 (DOI); Local Download	Final	5/04/2020
SP	800-56C Rev. 2	Recommendation for Key-Derivation Methods in Key-Establishment Schemes SP 800-56C Rev. 2 Recommendation for Key-Derivation Methods in Key-Establishment Schemes 8/18/2020 Status: Final Download: SP 800-56C Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-56C Rev. 2	Final	8/18/2020
SP	800-56B Rev. 2	Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography SP 800-56B Rev. 2 Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography 3/21/2019 Status: Final Download: SP 800-56B Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-56B Rev. 2 (July 2018)	Final	3/21/2019
SP	800-56A Rev. 3	Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography SP 800-56A Rev. 3 Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography 4/16/2018 Status: Final Download: SP 800-56A Rev. 3 (DOI); Local Download; Comments received on Draft SP 800-56A Rev. 3	Final	4/16/2018
SP	800-55 Rev. 2	PRE-DRAFT Call for Comments: Performance Measurement Guide for Information Security SP 800-55 Rev. 2 (Draft) PRE-DRAFT Call for Comments: Performance Measurement Guide for Information Security 9/24/2020 Status: Draft Download: None available	Draft	9/24/2020
SP	800-55 Rev. 1	Performance Measurement Guide for Information Security SP 800-55 Rev. 1 Performance Measurement Guide for Information Security 7/16/2008 Status: Final Download: SP 800-55 Rev. 1 (DOI); Local Download	Final	7/16/2008
SP	800-53 Rev. 5	Security and Privacy Controls for Information Systems and Organizations SP 800-53 Rev. 5 Security and Privacy Controls for Information Systems and Organizations 12/10/2020 Status: Final Download: SP 800-53 Rev. 5 (DOI); Local Download; Control Catalog (spreadsheet); Analysis of updates between 800-53 Rev. 5 and Rev. 4, by MITRE Corp. for ODNI; Mapping: Appendix J Privacy Controls (Rev. 4) to Rev. 5; Mappings: Cybersecurity Framework and Privacy Framework to Rev. 5; Mapping: Rev. 5 to ISO/IEC 27001; OSCAL Version of Rev. 5 controls; Control Collaboration Index Template; Control Collaboration Index Template; Blog post	Final	12/10/2020
SP	800-53B	Control Baselines for Information Systems and Organizations SP 800-53B Control Baselines for Information Systems and Organizations 12/10/2020 Status: Final Download: SP 800-53B (DOI); Local Download; Control Baselines spreadsheet; Security Control Overlay Repository (SCOR); OSCAL [an OSCAL version of 800-53B is in development]; NIST news article	Final	12/10/2020
SP	800-53A Rev. 5	Assessing Security and Privacy Controls in Information Systems and Organizations SP 800-53A Rev. 5 (Draft) Assessing Security and Privacy Controls in Information Systems and Organizations 8/03/2021 Status: Draft Download: SP 800-53A Rev. 5 (Draft) (DOI); Local Download; Comment template; [Plain Text] Assessment Procedures; [CSV] README for CSV file of Assessment Procedures; [CSV] Assessment Procedures; [OSCAL] oscal-content GitHub repo	Draft	8/03/2021
SP	800-53A Rev. 4	Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans SP 800-53A Rev. 4 Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans 12/18/2014 Status: Final Download: SP 800-53A Rev. 4 (DOI); Local Download; Word version of SP 800-53A Rev. 4 (12-18-2014); Downloads (XML, CSV); Press Release	Final	12/18/2014
SP	800-52 Rev. 2	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations SP 800-52 Rev. 2 Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations 8/29/2019 Status: Final Download: SP 800-52 Rev. 2 (DOI); Local Download	Final	8/29/2019
SP	800-51 Rev. 1	Guide to Using Vulnerability Naming Schemes SP 800-51 Rev. 1 Guide to Using Vulnerability Naming Schemes 2/25/2011 Status: Final Download: SP 800-51 Rev. 1 (DOI); Local Download; Press Release	Final	2/25/2011
SP	800-50 Rev. 1	PRE-DRAFT Call for Comments: Building a Cybersecurity and Privacy Awareness and Training Program SP 800-50 Rev. 1 (Draft) PRE-DRAFT Call for Comments: Building a Cybersecurity and Privacy Awareness and Training Program 9/21/2021 Status: Draft Download: None available	Draft	9/21/2021
SP	800-50	Building an Information Technology Security Awareness and Training Program SP 800-50 Building an Information Technology Security Awareness and Training Program 10/01/2003 Status: Final Download: SP 800-50 (DOI); Local Download	Final	10/01/2003
SP	800-49	Federal S/MIME V3 Client Profile SP 800-49 Federal S/MIME V3 Client Profile 11/05/2002 Status: Final Download: SP 800-49 (DOI); Local Download	Final	11/05/2002
SP	800-47 Rev. 1	Managing the Security of Information Exchanges SP 800-47 Rev. 1 Managing the Security of Information Exchanges 7/20/2021 Status: Final Download: SP 800-47 Rev. 1 (DOI); Local Download	Final	7/20/2021
SP	800-46 Rev. 3	PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security SP 800-46 Rev. 3 (Draft) PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security 9/10/2020 Status: Draft Download: None available	Draft	9/10/2020
SP	800-46 Rev. 2	Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security SP 800-46 Rev. 2 Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security 7/29/2016 Status: Final Download: SP 800-46 Rev. 2 (DOI); Local Download	Final	7/29/2016
SP	800-45 Version 2	Guidelines on Electronic Mail Security SP 800-45 Version 2 Guidelines on Electronic Mail Security 2/20/2007 Status: Final Download: SP 800-45 Version 2 (DOI); Local Download	Final	2/20/2007
SP	800-44 Version 2	Guidelines on Securing Public Web Servers SP 800-44 Version 2 Guidelines on Securing Public Web Servers 10/09/2007 Status: Final Download: SP 800-44 Version 2 (DOI); Local Download	Final	10/09/2007
SP	800-41 Rev. 1	Guidelines on Firewalls and Firewall Policy SP 800-41 Rev. 1 Guidelines on Firewalls and Firewall Policy 9/28/2009 Status: Final Download: SP 800-41 Rev. 1 (DOI); Local Download	Final	9/28/2009
SP	800-40 Rev. 4	Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology SP 800-40 Rev. 4 (Draft) Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology 11/17/2021 Status: Draft Download: SP 800-40 Rev. 4 (Draft) (DOI); Local Download	Draft	11/17/2021
SP	800-40 Rev. 3	Guide to Enterprise Patch Management Technologies SP 800-40 Rev. 3 Guide to Enterprise Patch Management Technologies 7/22/2013 Status: Final Download: SP 800-40 Rev. 3 (DOI); Local Download; Press Release	Final	7/22/2013
SP	800-39	Managing Information Security Risk: Organization, Mission, and Information System View SP 800-39 Managing Information Security Risk: Organization, Mission, and Information System View 3/01/2011 Status: Final Download: SP 800-39 (DOI); Local Download; Press Release	Final	3/01/2011
SP	800-38G Rev. 1	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G Rev. 1 (Draft) Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 2/28/2019 Status: Draft Download: SP 800-38G Rev. 1 (Draft) (DOI); Local Download; Comments received; Letter of Assurance (from Voltage Security; since acquired by HP, Inc.); Block Cipher Techniques project	Draft	2/28/2019
SP	800-38G	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 3/29/2016 Status: Final Download: SP 800-38G (DOI); Local Download; Letter of Assurance (from Voltage Security; since acquired by HP, Inc.); Press Release	Final	3/29/2016
SP	800-38F	Recommendation for Block Cipher Modes of Operation: Methods for Key Wrapping SP 800-38F Recommendation for Block Cipher Modes of Operation: Methods for Key Wrapping 12/13/2012 Status: Final Download: SP 800-38F (DOI); Local Download	Final	12/13/2012
SP	800-38E	Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices SP 800-38E Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices 1/18/2010 Status: Final Download: SP 800-38E (DOI); Local Download	Final	1/18/2010
SP	800-38D	Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC SP 800-38D Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC 11/28/2007 Status: Final Download: SP 800-38D (DOI); Local Download	Final	11/28/2007
SP	800-38C	Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality SP 800-38C Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality 7/20/2007 Status: Final Download: SP 800-38C (DOI); Local Download	Final	7/20/2007
SP	800-38B	Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication SP 800-38B Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication 10/06/2016 Status: Final Download: SP 800-38B (DOI); Local Download	Final	10/06/2016
SP	800-38A Addendum	Recommendation for Block Cipher Modes of Operation: Three Variants of Ciphertext Stealing for CBC Mode SP 800-38A Addendum Recommendation for Block Cipher Modes of Operation: Three Variants of Ciphertext Stealing for CBC Mode 10/21/2010 Status: Final Download: SP 800-38A Addendum (DOI); Local Download	Final	10/21/2010
SP	800-38A	Recommendation for Block Cipher Modes of Operation: Methods and Techniques SP 800-38A Recommendation for Block Cipher Modes of Operation: Methods and Techniques 12/01/2001 Status: Final Download: SP 800-38A (DOI); Local Download	Final	12/01/2001
SP	800-37 Rev. 2	Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy SP 800-37 Rev. 2 Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy 12/20/2018 Status: Final Download: SP 800-37 Rev. 2 (DOI); Local Download	Final	12/20/2018
SP	800-35	Guide to Information Technology Security Services SP 800-35 Guide to Information Technology Security Services 10/09/2003 Status: Final Download: SP 800-35 (DOI); Local Download	Final	10/09/2003
SP	800-34 Rev. 1	Contingency Planning Guide for Federal Information Systems SP 800-34 Rev. 1 Contingency Planning Guide for Federal Information Systems 11/11/2010 Status: Final Download: SP 800-34 Rev. 1 (DOI); Local Download; Business Impact Analysis (BIA) Template; Contingency Planning: Low Impact System Template; Contingency Planning: Moderate Impact System Template; Contingency Planning: High Impact System Template	Final	11/11/2010
SP	800-30 Rev. 1	Guide for Conducting Risk Assessments SP 800-30 Rev. 1 Guide for Conducting Risk Assessments 9/17/2012 Status: Final Download: SP 800-30 Rev. 1 (DOI); Local Download; SP 800-30 Rev. 1 (EPUB); Press Release	Final	9/17/2012
SP	800-28 Version 2	Guidelines on Active Content and Mobile Code SP 800-28 Version 2 Guidelines on Active Content and Mobile Code 3/07/2008 Status: Final Download: SP 800-28 Version 2 (DOI); Local Download	Final	3/07/2008
SP	800-22 Rev. 1a	A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications SP 800-22 Rev. 1a A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications 4/30/2010 Status: Final Download: SP 800-22 Rev. 1a (DOI); Local Download	Final	4/30/2010
SP	800-18 Rev. 1	Guide for Developing Security Plans for Federal Information Systems SP 800-18 Rev. 1 Guide for Developing Security Plans for Federal Information Systems 2/24/2006 Status: Final Download: SP 800-18 Rev. 1 (DOI); Local Download	Final	2/24/2006
SP	800-16 Rev. 1	A Role-Based Model for Federal Information Technology/Cybersecurity Training (3rd Draft) SP 800-16 Rev. 1 (Draft) A Role-Based Model for Federal Information Technology/Cybersecurity Training (3rd Draft) 3/14/2014 Status: Draft Download: Draft SP 800-16 Rev. 1 (3rd draft)	Draft	3/14/2014
SP	800-16	Information Technology Security Training Requirements: a Role- and Performance-Based Model SP 800-16 Information Technology Security Training Requirements: a Role- and Performance-Based Model 4/01/1998 Status: Final Download: SP 800-16 (DOI); Local Download	Final	4/01/1998
SP	800-12 Rev. 1	An Introduction to Information Security SP 800-12 Rev. 1 An Introduction to Information Security 6/22/2017 Status: Final Download: SP 800-12 Rev. 1 (DOI); Local Download	Final	6/22/2017

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Current Publications

Search Results

Current Publications