Search | CSRC

Search Results

Showing 218 matching records.

Series	Number	Title Publications	Status	Release Date
SP	1800-31	Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways (Preliminary Draft) SP 1800-31 (Draft) Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways (Preliminary Draft) 9/10/2020 Status: Draft Download: Prelim. Draft SP 1800-31A; Submit Comments; Project homepage	Draft	9/10/2020
SP	1800-30	Securing Telehealth Remote Patient Monitoring Ecosystem SP 1800-30 (Draft) Securing Telehealth Remote Patient Monitoring Ecosystem 11/16/2020 Status: Draft Download: Draft SP 1800-30 volumes and Project homepage; Submit comments	Draft	11/16/2020
SP	1800-27	Securing Property Management Systems SP 1800-27 (Draft) Securing Property Management Systems 9/14/2020 Status: Draft Download: Draft SP 1800-27 volumes and Project Homepage; Submit Comments	Draft	9/14/2020
SP	1800-26	Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events SP 1800-26 Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events 12/08/2020 Status: Final Download: SP 1800-26 (DOI); Local Download; SP 1800-26 volumes and project homepage	Final	12/08/2020
SP	1800-25	Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events SP 1800-25 Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events 12/08/2020 Status: Final Download: SP 1800-25 (DOI); Local Download; SP 1800-25 volumes and project homepage	Final	12/08/2020
SP	1800-24	Securing Picture Archiving and Communication System (PACS) SP 1800-24 (Draft) Securing Picture Archiving and Communication System (PACS) 9/16/2019 Status: Draft Download: Draft SP 1800-24 volumes and Project Homepage; Submit comments	Draft	9/16/2019
SP	1800-23	Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry SP 1800-23 Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry 5/20/2020 Status: Final Download: SP 1800-23 (DOI); Local Download; Web version; Project Homepage	Final	5/20/2020
SP	1800-21	Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) SP 1800-21 Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) 9/15/2020 Status: Final Download: SP 1800-21 (DOI); Local Download; SP 1800-21 volumes and Project Homepage	Final	9/15/2020
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 (Draft) Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 4/13/2020 Status: Draft Download: SP 1800-19C (Prelim. Draft 1); Submit Comments on SP 1800-19C; SP 1800-19A (Prelim. Draft 1); SP 1800-19B (Prelim. Draft 1); Project Homepage	Draft	4/13/2020
SP	1800-18	Privileged Account Management for the Financial Services Sector SP 1800-18 (Draft) Privileged Account Management for the Financial Services Sector 9/28/2018 Status: Draft Download: Draft SP 1800-18 volumes and Project Homepage; Submit Comments	Draft	9/28/2018
SP	1800-17	Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers SP 1800-17 Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers 7/30/2019 Status: Final Download: SP 1800-17 (DOI); Local Download; Web version; Project Homepage	Final	7/30/2019
SP	1800-16	Securing Web Transactions: TLS Server Certificate Management SP 1800-16 Securing Web Transactions: TLS Server Certificate Management 6/16/2020 Status: Final Download: SP 1800-16 (DOI); Local Download; SP 1800-16 volumes and Project Homepage	Final	6/16/2020
SP	1800-15	Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) SP 1800-15 (Draft) Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) 9/16/2020 Status: Draft Download: Draft SP 1800-15 (34 MB); Submit Comments on SP 1800-15; Project Homepage	Draft	9/16/2020
SP	1800-14	Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation SP 1800-14 Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation 6/28/2019 Status: Final Download: SP 1800-14 (DOI); Local Download; Web version; Project Homepage	Final	6/28/2019
SP	1800-13	Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders (2nd Draft) SP 1800-13 (Draft) Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders (2nd Draft) 5/29/2019 Status: Draft Download: Second Draft SP 1800-13 volumes and Project Homepage; Submit Comments	Draft	5/29/2019
SP	1800-12	Derived Personal Identity Verification (PIV) Credentials SP 1800-12 Derived Personal Identity Verification (PIV) Credentials 8/27/2019 Status: Final Download: SP 1800-12 (DOI); Local Download; Web version; Project Homepage	Final	8/27/2019
SP	1800-11	Data Integrity: Recovering from Ransomware and Other Destructive Events SP 1800-11 Data Integrity: Recovering from Ransomware and Other Destructive Events 9/22/2020 Status: Final Download: SP 1800-11 (DOI); Local Download; SP 1800-11 volumes and Project Homepage	Final	9/22/2020
SP	1800-9	Access Rights Management for the Financial Services Sector SP 1800-9 (Draft) Access Rights Management for the Financial Services Sector 8/31/2017 Status: Draft Download: Draft 1800-9 volumes and homepage; Submit Comments; Learn more about this project	Draft	8/31/2017
SP	1800-8	Securing Wireless Infusion Pumps in Healthcare Delivery Organizations SP 1800-8 Securing Wireless Infusion Pumps in Healthcare Delivery Organizations 8/17/2018 Status: Final Download: SP 1800-8 (DOI); Local Download; Web version; Project Homepage	Final	8/17/2018
SP	1800-7	Situational Awareness for Electric Utilities SP 1800-7 Situational Awareness for Electric Utilities 8/07/2019 Status: Final Download: SP 1800-7 (DOI); Local Download; Web version; Project Homepage	Final	8/07/2019
SP	1800-6	Domain Name System-Based Electronic Mail Security SP 1800-6 Domain Name System-Based Electronic Mail Security 1/19/2018 Status: Final Download: SP 1800-6 (DOI); Local Download; Project Homepage (with links to HTML version)	Final	1/19/2018
SP	1800-5	IT Asset Management SP 1800-5 IT Asset Management 9/07/2018 Status: Final Download: SP 1800-5 (DOI); Local Download; Web version; Project Homepage	Final	9/07/2018
SP	1800-4	Mobile Device Security: Cloud and Hybrid Builds SP 1800-4 Mobile Device Security: Cloud and Hybrid Builds 2/21/2019 Status: Final Download: SP 1800-4 (DOI); Local Download; Web version; Project Homepage	Final	2/21/2019
SP	1800-3	Attribute Based Access Control (2nd Draft) SP 1800-3 (Draft) Attribute Based Access Control (2nd Draft) 9/20/2017 Status: Draft Download: Draft SP 1800-3 volumes and Project Homepage; Submit Comments	Draft	9/20/2017
SP	1800-2	Identity and Access Management for Electric Utilities SP 1800-2 Identity and Access Management for Electric Utilities 7/13/2018 Status: Final Download: SP 1800-2 (DOI); Local Download; Other Publication Files; Project Homepage	Final	7/13/2018
SP	1800-1	Securing Electronic Health Records on Mobile Devices SP 1800-1 Securing Electronic Health Records on Mobile Devices 7/27/2018 Status: Final Download: SP 1800-1 (DOI); Local Download; Web version; Project Homepage	Final	7/27/2018
SP	1500-16	Improving Veteran Transitions to Civilian Cybersecurity Roles: Workshop Report SP 1500-16 Improving Veteran Transitions to Civilian Cybersecurity Roles: Workshop Report 8/20/2020 Status: Final Download: SP 1500-16 (DOI); Local Download	Final	8/20/2020
SP	1500-4r2	NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 3 SP 1500-4r2 NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 3 10/21/2019 Status: Final Download: SP 1500-4r2 (DOI); Local Download; NIST Big Data Interoperability Framework V3.0; NIST news article	Final	10/21/2019
SP	800-213	IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements SP 800-213 (Draft) IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements 12/15/2020 Status: Draft Download: SP 800-213 (Draft) (DOI); Local Download; IoT Device Cybersecurity Requirement Catalogs	Draft	12/15/2020
SP	800-211	2019 NIST/ITL Cybersecurity Program Annual Report SP 800-211 2019 NIST/ITL Cybersecurity Program Annual Report 8/24/2020 Status: Final Download: SP 800-211 (DOI); Local Download	Final	8/24/2020
SP	800-210	General Access Control Guidance for Cloud Systems SP 800-210 General Access Control Guidance for Cloud Systems 7/31/2020 Status: Final Download: SP 800-210 (DOI); Local Download	Final	7/31/2020
SP	800-209	Security Guidelines for Storage Infrastructure SP 800-209 Security Guidelines for Storage Infrastructure 10/26/2020 Status: Final Download: SP 800-209 (DOI); Local Download	Final	10/26/2020
SP	800-208	Recommendation for Stateful Hash-Based Signature Schemes SP 800-208 Recommendation for Stateful Hash-Based Signature Schemes 10/29/2020 Status: Final Download: SP 800-208 (DOI); Local Download; Comments received	Final	10/29/2020
SP	800-207	Zero Trust Architecture SP 800-207 Zero Trust Architecture 8/11/2020 Status: Final Download: SP 800-207 (DOI); Local Download; ZTA project at NCCoE; Japanese translation (unofficial--from PwC Consulting LLC for IPA, Japan)	Final	8/11/2020
SP	800-206	Annual Report 2018: NIST/ITL Cybersecurity Program SP 800-206 Annual Report 2018: NIST/ITL Cybersecurity Program 3/13/2020 Status: Final Download: SP 800-206 (DOI); Local Download	Final	3/13/2020
SP	800-205	Attribute Considerations for Access Control Systems SP 800-205 Attribute Considerations for Access Control Systems 6/18/2019 Status: Final Download: SP 800-205 (DOI); Local Download	Final	6/18/2019
SP	800-204A	Building Secure Microservices-based Applications Using Service-Mesh Architecture SP 800-204A Building Secure Microservices-based Applications Using Service-Mesh Architecture 5/27/2020 Status: Final Download: SP 800-204A (DOI); Local Download	Final	5/27/2020
SP	800-204	Security Strategies for Microservices-based Application Systems SP 800-204 Security Strategies for Microservices-based Application Systems 8/07/2019 Status: Final Download: SP 800-204 (DOI); Local Download	Final	8/07/2019
SP	800-203	2017 NIST/ITL Cybersecurity Program Annual Report SP 800-203 2017 NIST/ITL Cybersecurity Program Annual Report 7/02/2018 Status: Final Download: SP 800-203 (DOI); Local Download	Final	7/02/2018
SP	800-202	Quick Start Guide for Populating Mobile Test Devices SP 800-202 Quick Start Guide for Populating Mobile Test Devices 5/10/2018 Status: Final Download: SP 800-202 (DOI); Local Download; Computer Forensics Tool Testing (CFTT) Program; CFTT Federated Testing Project	Final	5/10/2018
SP	800-195	2016 NIST/ITL Cybersecurity Program Annual Report SP 800-195 2016 NIST/ITL Cybersecurity Program Annual Report 9/28/2017 Status: Final Download: SP 800-195 (DOI); Local Download	Final	9/28/2017
SP	800-193	Platform Firmware Resiliency Guidelines SP 800-193 Platform Firmware Resiliency Guidelines 5/04/2018 Status: Final Download: SP 800-193 (DOI); Local Download	Final	5/04/2018
SP	800-192	Verification and Test Methods for Access Control Policies/Models SP 800-192 Verification and Test Methods for Access Control Policies/Models 6/27/2017 Status: Final Download: SP 800-192 (DOI); Local Download	Final	6/27/2017
SP	800-190	Application Container Security Guide SP 800-190 Application Container Security Guide 9/25/2017 Status: Final Download: SP 800-190 (DOI); Local Download; Japanese translation (unofficial--from IPA, Japan)	Final	9/25/2017
SP	800-189	Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation SP 800-189 Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation 12/17/2019 Status: Final Download: SP 800-189 (DOI); Local Download	Final	12/17/2019
SP	800-188	De-Identifying Government Datasets (2nd Draft) SP 800-188 (Draft) De-Identifying Government Datasets (2nd Draft) 12/15/2016 Status: Draft Download: Draft SP 800-188; Comment Template	Draft	12/15/2016
SP	800-187	Guide to LTE Security SP 800-187 Guide to LTE Security 12/21/2017 Status: Final Download: SP 800-187 (DOI); Local Download	Final	12/21/2017
SP	800-186	Recommendations for Discrete Logarithm-Based Cryptography: Elliptic Curve Domain Parameters SP 800-186 (Draft) Recommendations for Discrete Logarithm-Based Cryptography: Elliptic Curve Domain Parameters 10/31/2019 Status: Draft Download: SP 800-186 (Draft) (DOI); Local Download; Comments received on Draft SP 800-186	Draft	10/31/2019
SP	800-185	SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash SP 800-185 SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash 12/22/2016 Status: Final Download: SP 800-185 (DOI); Local Download; Comments Received on Draft SP 800-185	Final	12/22/2016
SP	800-184	Guide for Cybersecurity Event Recovery SP 800-184 Guide for Cybersecurity Event Recovery 12/22/2016 Status: Final Download: SP 800-184 (DOI); Local Download; Press Release (12-22-2016)	Final	12/22/2016
SP	800-183	Networks of 'Things' SP 800-183 Networks of 'Things' 7/28/2016 Status: Final Download: SP 800-183 (DOI); Local Download; Press Release	Final	7/28/2016
SP	800-182	Computer Security Division 2015 Annual Report SP 800-182 Computer Security Division 2015 Annual Report 8/10/2016 Status: Final Download: SP 800-182 (DOI); Local Download	Final	8/10/2016
SP	800-181 Rev. 1	Workforce Framework for Cybersecurity (NICE Framework) SP 800-181 Rev. 1 Workforce Framework for Cybersecurity (NICE Framework) 11/16/2020 Status: Final Download: SP 800-181 Rev. 1 (DOI); Local Download; NICE Framework homepage; Blog post: "Back to the Basics: Announcing the New NICE Framework"	Final	11/16/2020
SP	800-180	NIST Definition of Microservices, Application Containers and System Virtual Machines SP 800-180 (Draft) NIST Definition of Microservices, Application Containers and System Virtual Machines 2/18/2016 Status: Draft Download: Draft SP 800-180; Comment Template	Draft	2/18/2016
SP	800-179 Rev. 1	Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-179 Rev. 1 (Draft) Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist 10/19/2018 Status: Draft Download: Draft SP 800-179 Rev. 1; Comment template; Supplemental Content (GitHub)	Draft	10/19/2018
SP	800-179	Guide to Securing Apple OS X 10.10 Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-179 Guide to Securing Apple OS X 10.10 Systems for IT Professionals: A NIST Security Configuration Checklist 12/05/2016 Status: Final Download: SP 800-179 (DOI); Local Download; Supplemental Content (GitHub); National Checklist Program	Final	12/05/2016
SP	800-178	A Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) SP 800-178 A Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) 10/03/2016 Status: Final Download: SP 800-178 (DOI); Local Download	Final	10/03/2016
SP	800-177 Rev. 1	Trustworthy Email SP 800-177 Rev. 1 Trustworthy Email 2/26/2019 Status: Final Download: SP 800-177 Rev. 1 (DOI); Local Download; High Assurance Domains project	Final	2/26/2019
SP	800-176	Computer Security Division 2014 Annual Report SP 800-176 Computer Security Division 2014 Annual Report 8/20/2015 Status: Final Download: SP 800-176 (DOI); Local Download	Final	8/20/2015
SP	800-175B Rev. 1	Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms SP 800-175B Rev. 1 Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms 3/31/2020 Status: Final Download: SP 800-175B Rev. 1 (DOI); Local Download	Final	3/31/2020
SP	800-175A	Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies SP 800-175A Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies 8/22/2016 Status: Final Download: SP 800-175A (DOI); Local Download; Comments Received from Final Draft	Final	8/22/2016
SP	800-172	Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171 (Final Public Draft) SP 800-172 (Draft) Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171 (Final Public Draft) 7/06/2020 Status: Draft Download: SP 800-172 (Draft) (DOI); Local Download; Comment template	Draft	7/06/2020
SP	800-171 Rev. 2	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 2 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 2/21/2020 Status: Final Download: SP 800-171 Rev. 2 (DOI); Local Download; CUI Plan of Action template; CUI SSP template **[see Planning Note]; Mapping: Cybersecurity Framework v.1.0 to SP 800-171 Rev. 2	Final	2/21/2020
SP	800-171A	Assessing Security Requirements for Controlled Unclassified Information SP 800-171A Assessing Security Requirements for Controlled Unclassified Information 6/13/2018 Status: Final Download: SP 800-171A (DOI); Local Download; CUI SSP template **[see Planning Note]; CUI Plan of Action template	Final	6/13/2018
SP	800-171 Rev. 1	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 1 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 6/07/2018 Status: Final Download: SP 800-171 Rev. 1 (DOI); Local Download; CUI Plan of Action template; CUI SSP template **[see Planning Note]; Mapping: Cybersecurity Framework v.1.0 to SP 800-171 Rev. 1	Final	6/07/2018
SP	800-170	Computer Security Division 2013 Annual Report SP 800-170 Computer Security Division 2013 Annual Report 9/04/2014 Status: Final Download: SP 800-170 (DOI); Local Download	Final	9/04/2014
SP	800-168	Approximate Matching: Definition and Terminology SP 800-168 Approximate Matching: Definition and Terminology 7/02/2014 Status: Final Download: SP 800-168 (DOI); Local Download	Final	7/02/2014
SP	800-167	Guide to Application Whitelisting SP 800-167 Guide to Application Whitelisting 10/28/2015 Status: Final Download: SP 800-167 (DOI); Local Download; Press Release	Final	10/28/2015
SP	800-166	Derived PIV Application and Data Model Test Guidelines SP 800-166 Derived PIV Application and Data Model Test Guidelines 6/06/2016 Status: Final Download: SP 800-166 (DOI); Local Download	Final	6/06/2016
SP	800-165	Computer Security Division 2012 Annual Report SP 800-165 Computer Security Division 2012 Annual Report 7/22/2013 Status: Final Download: SP 800-165 (DOI); Local Download	Final	7/22/2013
SP	800-164	Guidelines on Hardware-Rooted Security in Mobile Devices SP 800-164 (Draft) Guidelines on Hardware-Rooted Security in Mobile Devices 10/31/2012 Status: Draft Download: Draft SP 800-164	Draft	10/31/2012
SP	800-163 Rev. 1	Vetting the Security of Mobile Applications SP 800-163 Rev. 1 Vetting the Security of Mobile Applications 4/19/2019 Status: Final Download: SP 800-163 Rev. 1 (DOI); Local Download	Final	4/19/2019
SP	800-162	Guide to Attribute Based Access Control (ABAC) Definition and Considerations SP 800-162 Guide to Attribute Based Access Control (ABAC) Definition and Considerations 8/02/2019 Status: Final Download: SP 800-162 (DOI); Local Download	Final	8/02/2019
SP	800-161 Rev. 1	PRE-DRAFT Call for Comments: Supply Chain Risk Management Practices for Federal Information Systems and Organizations SP 800-161 Rev. 1 (Draft) PRE-DRAFT Call for Comments: Supply Chain Risk Management Practices for Federal Information Systems and Organizations 2/04/2020 Status: Draft Download: None available	Draft	2/04/2020
SP	800-161	Supply Chain Risk Management Practices for Federal Information Systems and Organizations SP 800-161 Supply Chain Risk Management Practices for Federal Information Systems and Organizations 4/08/2015 Status: Final Download: SP 800-161 (DOI); Local Download	Final	4/08/2015
SP	800-160 Vol. 2	Developing Cyber Resilient Systems: A Systems Security Engineering Approach SP 800-160 Vol. 2 Developing Cyber Resilient Systems: A Systems Security Engineering Approach 11/27/2019 Status: Final Download: SP 800-160 Vol. 2 (DOI); Local Download	Final	11/27/2019
SP	800-160 Vol. 1	Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems SP 800-160 Vol. 1 Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems 3/21/2018 Status: Final Download: SP 800-160 Vol. 1 (DOI); Local Download; Appendix D Supplement; "Rethinking Cybersecurity from the Inside Out" (blog post)	Final	3/21/2018
SP	800-157	Guidelines for Derived Personal Identity Verification (PIV) Credentials SP 800-157 Guidelines for Derived Personal Identity Verification (PIV) Credentials 12/19/2014 Status: Final Download: SP 800-157 (DOI); Local Download; Comments and resolutions on Draft SP 800-157 (Mar. 2014)	Final	12/19/2014
SP	800-156	Representation of PIV Chain-of-Trust for Import and Export SP 800-156 Representation of PIV Chain-of-Trust for Import and Export 5/20/2016 Status: Final Download: SP 800-156 (DOI); Local Download; XSD Schema File for SP 800-156 Chain of Trust	Final	5/20/2016
SP	800-155	BIOS Integrity Measurement Guidelines SP 800-155 (Draft) BIOS Integrity Measurement Guidelines 12/08/2011 Status: Draft Download: Draft SP 800-155	Draft	12/08/2011
SP	800-154	Guide to Data-Centric System Threat Modeling SP 800-154 (Draft) Guide to Data-Centric System Threat Modeling 3/14/2016 Status: Draft Download: Draft SP 800-154; Comment Template	Draft	3/14/2016
SP	800-153	Guidelines for Securing Wireless Local Area Networks (WLANs) SP 800-153 Guidelines for Securing Wireless Local Area Networks (WLANs) 2/21/2012 Status: Final Download: SP 800-153 (DOI); Local Download; Press Release (Mar. 6, 2012)	Final	2/21/2012
SP	800-152	A Profile for U.S. Federal Cryptographic Key Management Systems (CKMS) SP 800-152 A Profile for U.S. Federal Cryptographic Key Management Systems (CKMS) 10/28/2015 Status: Final Download: SP 800-152 (DOI); Local Download; Comments received on final (3rd) Draft (Dec. 2014); Draft 3 (Dec. 2014); Draft 2 (Jan. 2014); Draft (Aug. 2012)	Final	10/28/2015
SP	800-150	Guide to Cyber Threat Information Sharing SP 800-150 Guide to Cyber Threat Information Sharing 10/04/2016 Status: Final Download: SP 800-150 (DOI); Local Download	Final	10/04/2016
SP	800-147B	BIOS Protection Guidelines for Servers SP 800-147B BIOS Protection Guidelines for Servers 8/28/2014 Status: Final Download: SP 800-147B (DOI); Local Download	Final	8/28/2014
SP	800-147	BIOS Protection Guidelines SP 800-147 BIOS Protection Guidelines 4/29/2011 Status: Final Download: SP 800-147 (DOI); Local Download; Press Release	Final	4/29/2011
SP	800-146	Cloud Computing Synopsis and Recommendations SP 800-146 Cloud Computing Synopsis and Recommendations 5/29/2012 Status: Final Download: SP 800-146 (DOI); Local Download; SP 800-146 (EPUB); Press Release	Final	5/29/2012
SP	800-145	The NIST Definition of Cloud Computing SP 800-145 The NIST Definition of Cloud Computing 9/28/2011 Status: Final Download: SP 800-145 (DOI); Local Download; SP 800-145 (EPUB); Press Release	Final	9/28/2011
SP	800-144	Guidelines on Security and Privacy in Public Cloud Computing SP 800-144 Guidelines on Security and Privacy in Public Cloud Computing 12/09/2011 Status: Final Download: SP 800-144 (DOI); Local Download; SP 800-144 (EPUB); Press Release	Final	12/09/2011
SP	800-142	Practical Combinatorial Testing SP 800-142 Practical Combinatorial Testing 10/07/2010 Status: Final Download: SP 800-142 (DOI); Local Download	Final	10/07/2010
SP	800-140F	CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140F CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140F (DOI); Local Download	Final	3/20/2020
SP	800-140E	CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790 Annex E and ISO/IEC 24579 Section 6.17 SP 800-140E CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790 Annex E and ISO/IEC 24579 Section 6.17 3/20/2020 Status: Final Download: SP 800-140E (DOI); Local Download	Final	3/20/2020
SP	800-140D	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140D (DOI); Local Download	Final	3/20/2020
SP	800-140C	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140C (DOI); Local Download	Final	3/20/2020
SP	800-140B	CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 3/20/2020 Status: Final Download: SP 800-140B (DOI); Local Download	Final	3/20/2020
SP	800-140A	CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140A CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140A (DOI); Local Download	Final	3/20/2020
SP	800-140	FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140 FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final Download: SP 800-140 (DOI); Local Download	Final	3/20/2020
SP	800-137A	Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment SP 800-137A Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment 5/21/2020 Status: Final Download: SP 800-137A (DOI); Local Download; Element Catalog for SP 800-137A	Final	5/21/2020
SP	800-137	Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations SP 800-137 Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations 9/30/2011 Status: Final Download: SP 800-137 (DOI); Local Download; Press Release	Final	9/30/2011
SP	800-135 Rev. 1	Recommendation for Existing Application-Specific Key Derivation Functions SP 800-135 Rev. 1 Recommendation for Existing Application-Specific Key Derivation Functions 12/23/2011 Status: Final Download: SP 800-135 Rev. 1 (DOI); Local Download; Informative Note (09-19-2016)	Final	12/23/2011
SP	800-133 Rev. 2	Recommendation for Cryptographic Key Generation SP 800-133 Rev. 2 Recommendation for Cryptographic Key Generation 6/04/2020 Status: Final Download: SP 800-133 Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-133 Rev. 2	Final	6/04/2020
SP	800-132	Recommendation for Password-Based Key Derivation: Part 1: Storage Applications SP 800-132 Recommendation for Password-Based Key Derivation: Part 1: Storage Applications 12/22/2010 Status: Final Download: SP 800-132 (DOI); Local Download	Final	12/22/2010
SP	800-131A Rev. 2	Transitioning the Use of Cryptographic Algorithms and Key Lengths SP 800-131A Rev. 2 Transitioning the Use of Cryptographic Algorithms and Key Lengths 3/21/2019 Status: Final Download: SP 800-131A Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-131A Rev. 2	Final	3/21/2019
SP	800-130	A Framework for Designing Cryptographic Key Management Systems SP 800-130 A Framework for Designing Cryptographic Key Management Systems 8/15/2013 Status: Final Download: SP 800-130 (DOI); Local Download	Final	8/15/2013
SP	800-128	Guide for Security-Focused Configuration Management of Information Systems SP 800-128 Guide for Security-Focused Configuration Management of Information Systems 10/10/2019 Status: Final Download: SP 800-128 (DOI); Local Download	Final	10/10/2019
SP	800-126 Rev. 3	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 SP 800-126 Rev. 3 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 2/14/2018 Status: Final Download: SP 800-126 Rev. 3 (DOI); Local Download; SCAP project	Final	2/14/2018
SP	800-126 Rev. 2	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2 SP 800-126 Rev. 2 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2 3/19/2012 Status: Final Download: SP 800-126 Rev. 2 (DOI); Local Download; SCAP Project	Final	3/19/2012
SP	800-126A	SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 SP 800-126A SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 2/14/2018 Status: Final Download: SP 800-126A (DOI); Local Download; SCAP project	Final	2/14/2018
SP	800-126 Rev. 1	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.1 SP 800-126 Rev. 1 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.1 2/25/2011 Status: Final Download: SP 800-126 Rev. 1 (DOI); Local Download	Final	2/25/2011
SP	800-125B	Secure Virtual Network Configuration for Virtual Machine (VM) Protection SP 800-125B Secure Virtual Network Configuration for Virtual Machine (VM) Protection 3/07/2016 Status: Final Download: SP 800-125B (DOI); Local Download	Final	3/07/2016
SP	800-125A Rev. 1	Security Recommendations for Server-based Hypervisor Platforms SP 800-125A Rev. 1 Security Recommendations for Server-based Hypervisor Platforms 6/07/2018 Status: Final Download: SP 800-125A Rev. 1 (DOI); Local Download	Final	6/07/2018
SP	800-125	Guide to Security for Full Virtualization Technologies SP 800-125 Guide to Security for Full Virtualization Technologies 1/28/2011 Status: Final Download: SP 800-125 (DOI); Local Download; Press Release	Final	1/28/2011
SP	800-124 Rev. 2	Guidelines for Managing the Security of Mobile Devices in the Enterprise SP 800-124 Rev. 2 (Draft) Guidelines for Managing the Security of Mobile Devices in the Enterprise 3/24/2020 Status: Draft Download: SP 800-124 Rev. 2 (Draft) (DOI); Local Download	Draft	3/24/2020
SP	800-124 Rev. 1	Guidelines for Managing the Security of Mobile Devices in the Enterprise SP 800-124 Rev. 1 Guidelines for Managing the Security of Mobile Devices in the Enterprise 6/21/2013 Status: Final Download: SP 800-124 Rev. 1 (DOI); Local Download; SP 800-124 Rev. 1 (EPUB); Press Release	Final	6/21/2013
SP	800-123	Guide to General Server Security SP 800-123 Guide to General Server Security 7/25/2008 Status: Final Download: SP 800-123 (DOI); Local Download; SP 800-123 (EPUB)	Final	7/25/2008
SP	800-122	Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) SP 800-122 Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) 4/06/2010 Status: Final Download: SP 800-122 (DOI); Local Download; SP 800-122 (EPUB)	Final	4/06/2010
SP	800-121 Rev. 2	Guide to Bluetooth Security SP 800-121 Rev. 2 Guide to Bluetooth Security 5/08/2017 Status: Final Download: SP 800-121 Rev. 2 (DOI); Local Download	Final	5/08/2017
SP	800-119	Guidelines for the Secure Deployment of IPv6 SP 800-119 Guidelines for the Secure Deployment of IPv6 12/29/2010 Status: Final Download: SP 800-119 (DOI); Local Download	Final	12/29/2010
SP	800-116 Rev. 1	Guidelines for the Use of PIV Credentials in Facility Access SP 800-116 Rev. 1 Guidelines for the Use of PIV Credentials in Facility Access 6/29/2018 Status: Final Download: SP 800-116 Rev. 1 (DOI); Local Download	Final	6/29/2018
SP	800-115	Technical Guide to Information Security Testing and Assessment SP 800-115 Technical Guide to Information Security Testing and Assessment 9/30/2008 Status: Final Download: SP 800-115 (DOI); Local Download; SP 800-115 (EPUB)	Final	9/30/2008
SP	800-114 Rev. 1	User's Guide to Telework and Bring Your Own Device (BYOD) Security SP 800-114 Rev. 1 User's Guide to Telework and Bring Your Own Device (BYOD) Security 7/29/2016 Status: Final Download: SP 800-114 Rev. 1 (DOI); Local Download	Final	7/29/2016
SP	800-113	Guide to SSL VPNs SP 800-113 Guide to SSL VPNs 7/01/2008 Status: Final Download: SP 800-113 (DOI); Local Download	Final	7/01/2008
SP	800-111	Guide to Storage Encryption Technologies for End User Devices SP 800-111 Guide to Storage Encryption Technologies for End User Devices 11/15/2007 Status: Final Download: SP 800-111 (DOI); Local Download	Final	11/15/2007
SP	800-108	Recommendation for Key Derivation Using Pseudorandom Functions (Revised) SP 800-108 Recommendation for Key Derivation Using Pseudorandom Functions (Revised) 10/01/2009 Status: Final Download: SP 800-108 (DOI); Local Download	Final	10/01/2009
SP	800-107 Rev. 1	Recommendation for Applications Using Approved Hash Algorithms SP 800-107 Rev. 1 Recommendation for Applications Using Approved Hash Algorithms 8/24/2012 Status: Final Download: SP 800-107 Rev. 1 (DOI); Local Download	Final	8/24/2012
SP	800-106	Randomized Hashing for Digital Signatures SP 800-106 Randomized Hashing for Digital Signatures 2/25/2009 Status: Final Download: SP 800-106 (DOI); Local Download	Final	2/25/2009
SP	800-102	Recommendation for Digital Signature Timeliness SP 800-102 Recommendation for Digital Signature Timeliness 9/23/2009 Status: Final Download: SP 800-102 (DOI); Local Download	Final	9/23/2009
SP	800-101 Rev. 1	Guidelines on Mobile Device Forensics SP 800-101 Rev. 1 Guidelines on Mobile Device Forensics 5/15/2014 Status: Final Download: SP 800-101 Rev. 1 (DOI); Local Download	Final	5/15/2014
SP	800-100	Information Security Handbook: A Guide for Managers SP 800-100 Information Security Handbook: A Guide for Managers 3/07/2007 Status: Final Download: SP 800-100 (DOI); Local Download	Final	3/07/2007
SP	800-98	Guidelines for Securing Radio Frequency Identification (RFID) Systems SP 800-98 Guidelines for Securing Radio Frequency Identification (RFID) Systems 4/06/2007 Status: Final Download: SP 800-98 (DOI); Local Download	Final	4/06/2007
SP	800-97	Establishing Wireless Robust Security Networks: A Guide to IEEE 802.11i SP 800-97 Establishing Wireless Robust Security Networks: A Guide to IEEE 802.11i 2/07/2007 Status: Final Download: SP 800-97 (DOI); Local Download	Final	2/07/2007
SP	800-96	PIV Card to Reader Interoperability Guidelines SP 800-96 PIV Card to Reader Interoperability Guidelines 12/29/2006 Status: Final Download: SP 800-96 (DOI); Local Download	Final	12/29/2006
SP	800-95	Guide to Secure Web Services SP 800-95 Guide to Secure Web Services 8/29/2007 Status: Final Download: SP 800-95 (DOI); Local Download	Final	8/29/2007
SP	800-94 Rev. 1	Guide to Intrusion Detection and Prevention Systems (IDPS) SP 800-94 Rev. 1 (Draft) Guide to Intrusion Detection and Prevention Systems (IDPS) 7/25/2012 Status: Draft Download: Draft SP 800-94 Rev. 1	Draft	7/25/2012
SP	800-94	Guide to Intrusion Detection and Prevention Systems (IDPS) SP 800-94 Guide to Intrusion Detection and Prevention Systems (IDPS) 2/20/2007 Status: Final Download: SP 800-94 (DOI); Local Download	Final	2/20/2007
SP	800-92	Guide to Computer Security Log Management SP 800-92 Guide to Computer Security Log Management 9/13/2006 Status: Final Download: SP 800-92 (DOI); Local Download; SP 800-92 (EPUB)	Final	9/13/2006
SP	800-90C	Recommendation for Random Bit Generator (RBG) Constructions SP 800-90C (Draft) Recommendation for Random Bit Generator (RBG) Constructions 4/13/2016 Status: Draft Download: Second Draft SP 800-90C; Comment Template	Draft	4/13/2016
SP	800-90B	Recommendation for the Entropy Sources Used for Random Bit Generation SP 800-90B Recommendation for the Entropy Sources Used for Random Bit Generation 1/10/2018 Status: Final Download: SP 800-90B (DOI); Local Download; 2nd Draft SP 800-90B; Comments received on 2nd Draft; Summary of Changes (from 2nd Draft to Final); Markup of Changes (from 2nd Draft to Final)	Final	1/10/2018
SP	800-90A Rev. 1	Recommendation for Random Number Generation Using Deterministic Random Bit Generators SP 800-90A Rev. 1 Recommendation for Random Number Generation Using Deterministic Random Bit Generators 6/24/2015 Status: Final Download: SP 800-90A Rev. 1 (DOI); Local Download; Press Release	Final	6/24/2015
SP	800-89	Recommendation for Obtaining Assurances for Digital Signature Applications SP 800-89 Recommendation for Obtaining Assurances for Digital Signature Applications 11/30/2006 Status: Final Download: SP 800-89 (DOI); Local Download	Final	11/30/2006
SP	800-88 Rev. 1	Guidelines for Media Sanitization SP 800-88 Rev. 1 Guidelines for Media Sanitization 12/17/2014 Status: Final Download: SP 800-88 Rev. 1 (DOI); Local Download	Final	12/17/2014
SP	800-87 Rev. 2	Codes for Identification of Federal and Federally-Assisted Organizations SP 800-87 Rev. 2 Codes for Identification of Federal and Federally-Assisted Organizations 4/19/2018 Status: Final Download: SP 800-87 Rev. 2 (DOI); Local Download	Final	4/19/2018
SP	800-86	Guide to Integrating Forensic Techniques into Incident Response SP 800-86 Guide to Integrating Forensic Techniques into Incident Response 9/01/2006 Status: Final Download: SP 800-86 (DOI); Local Download	Final	9/01/2006
SP	800-85B-4	PIV Data Model Test Guidelines SP 800-85B-4 (Draft) PIV Data Model Test Guidelines 8/06/2014 Status: Draft Download: Draft SP 800-85B-4; Comment Template	Draft	8/06/2014
SP	800-85B	PIV Data Model Test Guidelines SP 800-85B PIV Data Model Test Guidelines 7/31/2006 Status: Final Download: SP 800-85B (DOI); Local Download	Final	7/31/2006
SP	800-85A-4	PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 Compliance) SP 800-85A-4 PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 Compliance) 4/13/2016 Status: Final Download: SP 800-85A-4 (DOI); Local Download	Final	4/13/2016
SP	800-84	Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities SP 800-84 Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities 9/21/2006 Status: Final Download: SP 800-84 (DOI); Local Download; SP 800-84 (EPUB)	Final	9/21/2006
SP	800-83 Rev. 1	Guide to Malware Incident Prevention and Handling for Desktops and Laptops SP 800-83 Rev. 1 Guide to Malware Incident Prevention and Handling for Desktops and Laptops 7/22/2013 Status: Final Download: SP 800-83 Rev. 1 (DOI); Local Download	Final	7/22/2013
SP	800-82 Rev. 2	Guide to Industrial Control Systems (ICS) Security SP 800-82 Rev. 2 Guide to Industrial Control Systems (ICS) Security 6/03/2015 Status: Final Download: SP 800-82 Rev. 2 (DOI); Local Download; Press Release	Final	6/03/2015
SP	800-81-2	Secure Domain Name System (DNS) Deployment Guide SP 800-81-2 Secure Domain Name System (DNS) Deployment Guide 9/18/2013 Status: Final Download: SP 800-81-2 (DOI); Local Download	Final	9/18/2013
SP	800-79-2	Guidelines for the Authorization of Personal Identity Verification Card Issuers (PCI) and Derived PIV Credential Issuers (DPCI) SP 800-79-2 Guidelines for the Authorization of Personal Identity Verification Card Issuers (PCI) and Derived PIV Credential Issuers (DPCI) 7/30/2015 Status: Final Download: SP 800-79-2 (DOI); Local Download	Final	7/30/2015
SP	800-78-4	Cryptographic Algorithms and Key Sizes for Personal Identity Verification SP 800-78-4 Cryptographic Algorithms and Key Sizes for Personal Identity Verification 5/29/2015 Status: Final Download: SP 800-78-4 (DOI); Local Download	Final	5/29/2015
SP	800-77 Rev. 1	Guide to IPsec VPNs SP 800-77 Rev. 1 Guide to IPsec VPNs 6/30/2020 Status: Final Download: SP 800-77 Rev. 1 (DOI); Local Download	Final	6/30/2020
SP	800-76-2	Biometric Specifications for Personal Identity Verification SP 800-76-2 Biometric Specifications for Personal Identity Verification 7/11/2013 Status: Final Download: SP 800-76-2 (DOI); Local Download	Final	7/11/2013
SP	800-73-4	Interfaces for Personal Identity Verification SP 800-73-4 Interfaces for Personal Identity Verification 2/12/2016 Status: Final Download: SP 800-73-4 (DOI); Local Download; Press Release (06-16-2015)	Final	2/12/2016
SP	800-72	Guidelines on PDA Forensics SP 800-72 Guidelines on PDA Forensics 11/01/2004 Status: Final Download: SP 800-72 (DOI); Local Download	Final	11/01/2004
SP	800-71	Recommendation for Key Establishment Using Symmetric Block Ciphers SP 800-71 (Draft) Recommendation for Key Establishment Using Symmetric Block Ciphers 7/02/2018 Status: Draft Download: Draft SP 800-71	Draft	7/02/2018
SP	800-70 Rev. 4	National Checklist Program for IT Products: Guidelines for Checklist Users and Developers SP 800-70 Rev. 4 National Checklist Program for IT Products: Guidelines for Checklist Users and Developers 2/15/2018 Status: Final Download: SP 800-70 Rev. 4 (DOI); Local Download; National Checklist Program	Final	2/15/2018
SP	800-67 Rev. 2	Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher SP 800-67 Rev. 2 Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher 11/17/2017 Status: Final Download: SP 800-67 Rev. 2 (DOI); Local Download; NIST Statement on Current Use and Deprecation of TDEA (7/11/17)	Final	11/17/2017
SP	800-66 Rev. 1	An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule SP 800-66 Rev. 1 An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule 10/23/2008 Status: Final Download: SP 800-66 Rev. 1 (DOI); Local Download	Final	10/23/2008
SP	800-63-4	PRE-DRAFT Call for Comments: Digital Identity Guidelines SP 800-63-4 (Draft) PRE-DRAFT Call for Comments: Digital Identity Guidelines 6/08/2020 Status: Draft Download: None available	Draft	6/08/2020
SP	800-63-3	Digital Identity Guidelines SP 800-63-3 Digital Identity Guidelines 3/02/2020 Status: Final Download: SP 800-63-3 (DOI); Local Download; FAQ; SP 800-63 (GitHub)	Final	3/02/2020
SP	800-63C	Digital Identity Guidelines: Federation and Assertions SP 800-63C Digital Identity Guidelines: Federation and Assertions 3/02/2020 Status: Final Download: SP 800-63C (DOI); Local Download	Final	3/02/2020
SP	800-63B	Digital Identity Guidelines: Authentication and Lifecycle Management SP 800-63B Digital Identity Guidelines: Authentication and Lifecycle Management 3/02/2020 Status: Final Download: SP 800-63B (DOI); Local Download	Final	3/02/2020
SP	800-63A	Digital Identity Guidelines: Enrollment and Identity Proofing SP 800-63A Digital Identity Guidelines: Enrollment and Identity Proofing 3/02/2020 Status: Final Download: SP 800-63A (DOI); Local Download	Final	3/02/2020
SP	800-61 Rev. 2	Computer Security Incident Handling Guide SP 800-61 Rev. 2 Computer Security Incident Handling Guide 8/06/2012 Status: Final Download: SP 800-61 Rev. 2 (DOI); Local Download; Press Release	Final	8/06/2012
SP	800-60 Vol. 2 Rev. 1	Guide for Mapping Types of Information and Information Systems to Security Categories: Appendices SP 800-60 Vol. 2 Rev. 1 Guide for Mapping Types of Information and Information Systems to Security Categories: Appendices 8/01/2008 Status: Final Download: SP 800-60 Vol. 2 Rev. 1 (DOI); Local Download	Final	8/01/2008
SP	800-60 Vol. 1 Rev. 1	Guide for Mapping Types of Information and Information Systems to Security Categories SP 800-60 Vol. 1 Rev. 1 Guide for Mapping Types of Information and Information Systems to Security Categories 8/01/2008 Status: Final Download: SP 800-60 Vol. 1 Rev. 1 (DOI); Local Download	Final	8/01/2008
SP	800-59	Guideline for Identifying an Information System as a National Security System SP 800-59 Guideline for Identifying an Information System as a National Security System 8/20/2003 Status: Final Download: SP 800-59 (DOI); Local Download	Final	8/20/2003
SP	800-58	Security Considerations for Voice Over IP Systems SP 800-58 Security Considerations for Voice Over IP Systems 1/01/2005 Status: Final Download: SP 800-58 (DOI); Local Download	Final	1/01/2005
SP	800-57 Part 3 Rev. 1	Recommendation for Key Management, Part 3: Application-Specific Key Management Guidance SP 800-57 Part 3 Rev. 1 Recommendation for Key Management, Part 3: Application-Specific Key Management Guidance 1/22/2015 Status: Final Download: SP 800-57 Part 3 Rev. 1 (DOI); Local Download	Final	1/22/2015
SP	800-57 Part 2 Rev. 1	Recommendation for Key Management: Part 2 – Best Practices for Key Management Organizations SP 800-57 Part 2 Rev. 1 Recommendation for Key Management: Part 2 – Best Practices for Key Management Organizations 5/23/2019 Status: Final Download: SP 800-57 Part 2 Rev. 1 (DOI); Local Download	Final	5/23/2019
SP	800-57 Part 1 Rev. 5	Recommendation for Key Management: Part 1 – General SP 800-57 Part 1 Rev. 5 Recommendation for Key Management: Part 1 – General 5/04/2020 Status: Final Download: SP 800-57 Part 1 Rev. 5 (DOI); Local Download	Final	5/04/2020
SP	800-56C Rev. 2	Recommendation for Key-Derivation Methods in Key-Establishment Schemes SP 800-56C Rev. 2 Recommendation for Key-Derivation Methods in Key-Establishment Schemes 8/18/2020 Status: Final Download: SP 800-56C Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-56C Rev. 2	Final	8/18/2020
SP	800-56B Rev. 2	Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography SP 800-56B Rev. 2 Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography 3/21/2019 Status: Final Download: SP 800-56B Rev. 2 (DOI); Local Download; Comments received on Draft SP 800-56B Rev. 2 (July 2018)	Final	3/21/2019
SP	800-56A Rev. 3	Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography SP 800-56A Rev. 3 Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography 4/16/2018 Status: Final Download: SP 800-56A Rev. 3 (DOI); Local Download; Comments received on Draft SP 800-56A Rev. 3	Final	4/16/2018
SP	800-55 Rev. 2	PRE-DRAFT Call for Comments: Performance Measurement Guide for Information Security SP 800-55 Rev. 2 (Draft) PRE-DRAFT Call for Comments: Performance Measurement Guide for Information Security 9/24/2020 Status: Draft Download: None available	Draft	9/24/2020
SP	800-55 Rev. 1	Performance Measurement Guide for Information Security SP 800-55 Rev. 1 Performance Measurement Guide for Information Security 7/16/2008 Status: Final Download: SP 800-55 Rev. 1 (DOI); Local Download	Final	7/16/2008
SP	800-53 Rev. 5	Security and Privacy Controls for Information Systems and Organizations SP 800-53 Rev. 5 Security and Privacy Controls for Information Systems and Organizations 12/10/2020 Status: Final Download: SP 800-53 Rev. 5 (DOI); Local Download; Analysis of updates between 800-53 Rev. 5 and Rev. 4, by MITRE Corp. for ODNI; Mapping: Appendix J Privacy Controls (Rev. 4) to Rev. 5; Mappings: Cybersecurity Framework and Privacy Framework to Rev. 5; Mapping: Rev. 5 to ISO/IEC 27001; OSCAL Version of Rev. 5 controls; Control Collaboration Index Template; Control Collaboration Index Template; Blog post	Final	12/10/2020
SP	800-53 Rev. 4	Security and Privacy Controls for Federal Information Systems and Organizations SP 800-53 Rev. 4 Security and Privacy Controls for Federal Information Systems and Organizations 1/22/2015 Status: Final Download: SP 800-53 Rev. 4 (DOI); Local Download; Word version of SP 800-53 Rev. 4 (01-22-2015); 800-53 Rev 4 Control Database; XML file for SP 800-53 Rev. 4 (01-15-2014); Summary of NIST SP 800-53 Revision 4; Press Release (04-30-2013)	Final	1/22/2015
SP	800-53B	Control Baselines for Information Systems and Organizations SP 800-53B Control Baselines for Information Systems and Organizations 12/10/2020 Status: Final Download: SP 800-53B (DOI); Local Download; Security Control Overlay Repository (SCOR); OSCAL [an OSCAL version of 800-53B is in development]; NIST news article	Final	12/10/2020
SP	800-53A Rev. 4	Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans SP 800-53A Rev. 4 Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans 12/18/2014 Status: Final Download: SP 800-53A Rev. 4 (DOI); Local Download; Word version of SP 800-53A Rev. 4 (12-18-2014); XML file for SP 800-53A Rev. 4 (06-16-2015); Press Release	Final	12/18/2014
SP	800-52 Rev. 2	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations SP 800-52 Rev. 2 Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations 8/29/2019 Status: Final Download: SP 800-52 Rev. 2 (DOI); Local Download	Final	8/29/2019
SP	800-51 Rev. 1	Guide to Using Vulnerability Naming Schemes SP 800-51 Rev. 1 Guide to Using Vulnerability Naming Schemes 2/25/2011 Status: Final Download: SP 800-51 Rev. 1 (DOI); Local Download; Press Release	Final	2/25/2011
SP	800-50	Building an Information Technology Security Awareness and Training Program SP 800-50 Building an Information Technology Security Awareness and Training Program 10/01/2003 Status: Final Download: SP 800-50 (DOI); Local Download	Final	10/01/2003
SP	800-49	Federal S/MIME V3 Client Profile SP 800-49 Federal S/MIME V3 Client Profile 11/05/2002 Status: Final Download: SP 800-49 (DOI); Local Download	Final	11/05/2002
SP	800-47	Security Guide for Interconnecting Information Technology Systems SP 800-47 Security Guide for Interconnecting Information Technology Systems 9/01/2002 Status: Final Download: SP 800-47 (DOI); Local Download	Final	9/01/2002
SP	800-46 Rev. 3	PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security SP 800-46 Rev. 3 (Draft) PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security 9/10/2020 Status: Draft Download: None available	Draft	9/10/2020
SP	800-46 Rev. 2	Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security SP 800-46 Rev. 2 Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security 7/29/2016 Status: Final Download: SP 800-46 Rev. 2 (DOI); Local Download	Final	7/29/2016
SP	800-45 Version 2	Guidelines on Electronic Mail Security SP 800-45 Version 2 Guidelines on Electronic Mail Security 2/20/2007 Status: Final Download: SP 800-45 Version 2 (DOI); Local Download	Final	2/20/2007
SP	800-44 Version 2	Guidelines on Securing Public Web Servers SP 800-44 Version 2 Guidelines on Securing Public Web Servers 10/09/2007 Status: Final Download: SP 800-44 Version 2 (DOI); Local Download	Final	10/09/2007
SP	800-41 Rev. 1	Guidelines on Firewalls and Firewall Policy SP 800-41 Rev. 1 Guidelines on Firewalls and Firewall Policy 9/28/2009 Status: Final Download: SP 800-41 Rev. 1 (DOI); Local Download	Final	9/28/2009
SP	800-40 Rev. 3	Guide to Enterprise Patch Management Technologies SP 800-40 Rev. 3 Guide to Enterprise Patch Management Technologies 7/22/2013 Status: Final Download: SP 800-40 Rev. 3 (DOI); Local Download; Press Release	Final	7/22/2013
SP	800-39	Managing Information Security Risk: Organization, Mission, and Information System View SP 800-39 Managing Information Security Risk: Organization, Mission, and Information System View 3/01/2011 Status: Final Download: SP 800-39 (DOI); Local Download; Press Release	Final	3/01/2011
SP	800-38G Rev. 1	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G Rev. 1 (Draft) Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 2/28/2019 Status: Draft Download: SP 800-38G Rev. 1 (Draft) (DOI); Local Download; Comments received; Letter of Assurance (from Voltage Security; since acquired by HP, Inc.); Block Cipher Techniques project	Draft	2/28/2019
SP	800-38G	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 3/29/2016 Status: Final Download: SP 800-38G (DOI); Local Download; Letter of Assurance (from Voltage Security; since acquired by HP, Inc.); Press Release	Final	3/29/2016
SP	800-38F	Recommendation for Block Cipher Modes of Operation: Methods for Key Wrapping SP 800-38F Recommendation for Block Cipher Modes of Operation: Methods for Key Wrapping 12/13/2012 Status: Final Download: SP 800-38F (DOI); Local Download	Final	12/13/2012
SP	800-38E	Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices SP 800-38E Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices 1/18/2010 Status: Final Download: SP 800-38E (DOI); Local Download	Final	1/18/2010
SP	800-38D	Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC SP 800-38D Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC 11/28/2007 Status: Final Download: SP 800-38D (DOI); Local Download	Final	11/28/2007
SP	800-38C	Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality SP 800-38C Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality 7/20/2007 Status: Final Download: SP 800-38C (DOI); Local Download	Final	7/20/2007
SP	800-38B	Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication SP 800-38B Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication 10/06/2016 Status: Final Download: SP 800-38B (DOI); Local Download	Final	10/06/2016
SP	800-38A Addendum	Recommendation for Block Cipher Modes of Operation: Three Variants of Ciphertext Stealing for CBC Mode SP 800-38A Addendum Recommendation for Block Cipher Modes of Operation: Three Variants of Ciphertext Stealing for CBC Mode 10/21/2010 Status: Final Download: SP 800-38A Addendum (DOI); Local Download	Final	10/21/2010
SP	800-38A	Recommendation for Block Cipher Modes of Operation: Methods and Techniques SP 800-38A Recommendation for Block Cipher Modes of Operation: Methods and Techniques 12/01/2001 Status: Final Download: SP 800-38A (DOI); Local Download	Final	12/01/2001
SP	800-37 Rev. 2	Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy SP 800-37 Rev. 2 Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy 12/20/2018 Status: Final Download: SP 800-37 Rev. 2 (DOI); Local Download	Final	12/20/2018
SP	800-35	Guide to Information Technology Security Services SP 800-35 Guide to Information Technology Security Services 10/09/2003 Status: Final Download: SP 800-35 (DOI); Local Download	Final	10/09/2003
SP	800-34 Rev. 1	Contingency Planning Guide for Federal Information Systems SP 800-34 Rev. 1 Contingency Planning Guide for Federal Information Systems 11/11/2010 Status: Final Download: SP 800-34 Rev. 1 (DOI); Local Download; Business Impact Analysis (BIA) Template; Contingency Planning: Low Impact System Template; Contingency Planning: Moderate Impact System Template; Contingency Planning: High Impact System Template	Final	11/11/2010
SP	800-32	Introduction to Public Key Technology and the Federal PKI Infrastructure SP 800-32 Introduction to Public Key Technology and the Federal PKI Infrastructure 2/26/2001 Status: Final Download: SP 800-32 (DOI); Local Download	Final	2/26/2001
SP	800-30 Rev. 1	Guide for Conducting Risk Assessments SP 800-30 Rev. 1 Guide for Conducting Risk Assessments 9/17/2012 Status: Final Download: SP 800-30 Rev. 1 (DOI); Local Download; SP 800-30 Rev. 1 (EPUB); Press Release	Final	9/17/2012
SP	800-28 Version 2	Guidelines on Active Content and Mobile Code SP 800-28 Version 2 Guidelines on Active Content and Mobile Code 3/07/2008 Status: Final Download: SP 800-28 Version 2 (DOI); Local Download	Final	3/07/2008
SP	800-25	Federal Agency Use of Public Key Technology for Digital Signatures and Authentication SP 800-25 Federal Agency Use of Public Key Technology for Digital Signatures and Authentication 10/01/2000 Status: Final Download: SP 800-25 (DOI); Local Download	Final	10/01/2000
SP	800-22 Rev. 1a	A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications SP 800-22 Rev. 1a A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications 4/30/2010 Status: Final Download: SP 800-22 Rev. 1a (DOI); Local Download	Final	4/30/2010
SP	800-18 Rev. 1	Guide for Developing Security Plans for Federal Information Systems SP 800-18 Rev. 1 Guide for Developing Security Plans for Federal Information Systems 2/24/2006 Status: Final Download: SP 800-18 Rev. 1 (DOI); Local Download	Final	2/24/2006
SP	800-16	Information Technology Security Training Requirements: a Role- and Performance-Based Model SP 800-16 Information Technology Security Training Requirements: a Role- and Performance-Based Model 4/01/1998 Status: Final Download: SP 800-16 (DOI); Local Download	Final	4/01/1998
SP	800-15	MISPC Minimum Interoperability Specification for PKI Components, Version 1 SP 800-15 MISPC Minimum Interoperability Specification for PKI Components, Version 1 1/01/1998 Status: Final Download: SP 800-15 (DOI); Local Download	Final	1/01/1998
SP	800-12 Rev. 1	An Introduction to Information Security SP 800-12 Rev. 1 An Introduction to Information Security 6/22/2017 Status: Final Download: SP 800-12 Rev. 1 (DOI); Local Download	Final	6/22/2017
SP	500-325	Fog Computing Conceptual Model SP 500-325 Fog Computing Conceptual Model 3/14/2018 Status: Final Download: SP 500-325 (DOI); Local Download	Final	3/14/2018
SP	500-320	Report of the Workshop on Software Measures and Metrics to Reduce Security Vulnerabilities (SwMM-RSV) SP 500-320 Report of the Workshop on Software Measures and Metrics to Reduce Security Vulnerabilities (SwMM-RSV) 11/10/2016 Status: Final Download: SP 500-320 (DOI); Local Download	Final	11/10/2016
SP	500-304	Conformance Testing Methodology Framework for ANSI/NIST-ITL 1-2011 Update: 2013, Data Format for the Interchange of Fingerprint, Facial & Other Biometric Information SP 500-304 Conformance Testing Methodology Framework for ANSI/NIST-ITL 1-2011 Update: 2013, Data Format for the Interchange of Fingerprint, Facial & Other Biometric Information 6/24/2015 Status: Final Download: SP 500-304 (DOI); Local Download; BioCTS homepage	Final	6/24/2015

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Current Publications

Search Results

Current Publications