Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

News & Updates

Stay informed as the Information Technology Laboratory’s Cybersecurity and Privacy Program releases publications, schedules virtual and in-person events, and announces other important developments.

Subscribe to our email updates.

Visit these additional NIST sites to learn more about:

  • NVD: National Vulnerability Database news and status updates
  • NICE: National Initiative for Cybersecurity Education news and events
  • NCCoE: National Cybersecurity Center of Excellence news and events
  • NIST-wide cybersecurity and privacy news and events
 
Showing 6 matching records.
NIST Released 2 Enterprise Patch Management SPs
April 6, 2022

NIST's National Cybersecurity Center of Excellence (NCCoE) has released two new final publications on enterprise patch management - Special Publication 800-40 Revision 4 and Special Publication 1800-31.

Enterprise Patch Management: Draft Publications Available for Comment
November 17, 2021

Two draft publications on enterprise patch management are available for public comment through January 10, 2022: Draft SP 800-40 Rev. 4 and Draft SP 1800-31.

Improving Enterprise Patching for General IT Sys
September 10, 2020

A preliminary draft of Volume A of SP 1800-31A, "Improving Enterprise Patching for General IT Systems," is available for comment through October 9, 2020.

NIST Publishes NISTIR 8011 Vol. 4
April 28, 2020

NIST has published Volume 4 of NISTIR 8011:  "Automation Support for Security Control Assessments: Software Vulnerability Management."

NIST Releases Draft SP 1800-23 for Comment
September 23, 2019

The NCCoE has released Draft SP 1800-23, "Energy Sector Asset Management," for public comment. The comment period ends November 25, 2019.

NIST Released DRAFT Special Publication 800-40 Revision 3
September 5, 2012

NIST announces the public comment release of draft NIST Special Publication (SP) 800-40 Revision 3, Guide to Enterprise Patch Management Technologies. Patch management is the process for identifying, acquiring, installing, and verifying patches for products and systems.