U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.


Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

SP 800-65

Integrating IT Security into the Capital Planning and Investment Control Process

Date Published: January 2005

Planning Note (8/1/2018): Withdrawn: Pre-dates important NIST guidance such as SP 800-53 Rev. 4SP 800-53A Rev. 4, and the Cybersecurity Framework.


Joan Hash (NIST), Nadya Bartol, Holly Rollins, Will Robinson, John Abeles, Steve Batdorff



Capital planning and investment control; CPIC; FISMA; IT security investments
Control Families

Assessment, Authorization and Monitoring; Planning; Program Management; Risk Assessment; System and Services Acquisition


SP 800-65 (DOI)
Local Download

Supplemental Material:
None available

Document History:
01/01/05: SP 800-65


Security and Privacy
acquisition; planning

Laws and Regulations
OMB Circular A-11