Search | CSRC

Search Results

Showing 629 matching records.

Series	Number	Title Publications	Status	Release Date
IR	8505	A Data Protection Approach for Cloud-Native Applications IR 8505 (Final) A Data Protection Approach for Cloud-Native Applications 9/30/2024 Status: Final	Final	9/30/2024
CSWP	31	Proxy Validation and Verification for Critical AI Systems: A Proxy Design Process CSWP 31 (Final) Proxy Validation and Verification for Critical AI Systems: A Proxy Design Process 9/26/2024 Status: Final	Final	9/26/2024
SP	800-50 Rev. 1	Building a Cybersecurity and Privacy Learning Program SP 800-50 Rev. 1 (Final) Building a Cybersecurity and Privacy Learning Program 9/12/2024 Status: Final	Final	9/12/2024
IR	8425A	Recommended Cybersecurity Requirements for Consumer-Grade Router Products IR 8425A (Final) Recommended Cybersecurity Requirements for Consumer-Grade Router Products 9/10/2024 Status: Final	Final	9/10/2024
IR	8459	Report on the Block Cipher Modes of Operation in the NIST SP 800-38 Series IR 8459 (Final) Report on the Block Cipher Modes of Operation in the NIST SP 800-38 Series 9/10/2024 Status: Final	Final	9/10/2024
FIPS	203	Module-Lattice-Based Key-Encapsulation Mechanism Standard FIPS 203 (Final) Module-Lattice-Based Key-Encapsulation Mechanism Standard 8/13/2024 Status: Final	Final	8/13/2024
FIPS	204	Module-Lattice-Based Digital Signature Standard FIPS 204 (Final) Module-Lattice-Based Digital Signature Standard 8/13/2024 Status: Final	Final	8/13/2024
FIPS	205	Stateless Hash-Based Digital Signature Standard FIPS 205 (Final) Stateless Hash-Based Digital Signature Standard 8/13/2024 Status: Final	Final	8/13/2024
SP	800-201	NIST Cloud Computing Forensic Reference Architecture SP 800-201 (Final) NIST Cloud Computing Forensic Reference Architecture 7/30/2024 Status: Final	Final	7/30/2024
SP	800-231	Bug Framework (BF): Formalizing Cybersecurity Weaknesses and Vulnerabilities SP 800-231 (Final) Bug Framework (BF): Formalizing Cybersecurity Weaknesses and Vulnerabilities 7/30/2024 Status: Final	Final	7/30/2024
SP	800-218A	Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile SP 800-218A (Final) Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile 7/26/2024 Status: Final	Final	7/26/2024
SP	1314	NIST Risk Management Framework (RMF) Small Enterprise Quick Start Guide: A Comprehensive, Flexible, Risk-Based Approach to Managing Information Security and Privacy Risk SP 1314 (Final) NIST Risk Management Framework (RMF) Small Enterprise Quick Start Guide: A Comprehensive, Flexible, Risk-Based Approach to Managing Information Security and Privacy Risk 7/23/2024 Status: Final	Final	7/23/2024
SP	800-73-5	Interfaces for Personal Identity Verification: Part 1 – PIV Card Application Namespace, Data Model and Representation SP 800-73-5 (Final) Interfaces for Personal Identity Verification: Part 1 – PIV Card Application Namespace, Data Model and Representation 7/15/2024 Status: Final	Final	7/15/2024
SP	800-73-5	Interfaces for Personal Identity Verification: Part 2 – PIV Card Application Card Command Interface SP 800-73-5 (Final) Interfaces for Personal Identity Verification: Part 2 – PIV Card Application Card Command Interface 7/15/2024 Status: Final	Final	7/15/2024
SP	800-73-5	Interfaces for Personal Identity Verification: Part 3 – PIV Client Application Programming Interface SP 800-73-5 (Final) Interfaces for Personal Identity Verification: Part 3 – PIV Client Application Programming Interface 7/15/2024 Status: Final	Final	7/15/2024
SP	800-78-5	Cryptographic Algorithms and Key Sizes for Personal Identity Verification SP 800-78-5 (Final) Cryptographic Algorithms and Key Sizes for Personal Identity Verification 7/15/2024 Status: Final	Final	7/15/2024
SP	800-229	Fiscal Year 2023 Cybersecurity and Privacy Annual Report SP 800-229 (Final) Fiscal Year 2023 Cybersecurity and Privacy Annual Report 5/20/2024 Status: Final	Final	5/20/2024
SP	800-171 Rev. 3	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 3 (Final) Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 5/14/2024 Status: Final	Final	5/14/2024
SP	800-171A Rev. 3	Assessing Security Requirements for Controlled Unclassified Information SP 800-171A Rev. 3 (Final) Assessing Security Requirements for Controlled Unclassified Information 5/14/2024 Status: Final	Final	5/14/2024
IR	8504	Access Control on NoSQL Databases IR 8504 (Final) Access Control on NoSQL Databases 5/07/2024 Status: Final	Final	5/07/2024
SP	800-63B	[Supplement 1] Incorporating Syncable Authenticators into NIST SP 800-63B: Digital Identity Guidelines — Authentication and Lifecycle Management SP 800-63B (Final) [Supplement 1] Incorporating Syncable Authenticators into NIST SP 800-63B: Digital Identity Guidelines — Authentication and Lifecycle Management 4/22/2024 Status: Final	Final	4/22/2024
IR	8286C	Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight IR 8286C (Final) Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight 3/06/2024 Status: Final	Final	3/06/2024
IR	8472	Non-Fungible Token Security IR 8472 (Final) Non-Fungible Token Security 3/01/2024 Status: Final	Final	3/01/2024
IR	8477	Mapping Relationships Between Documentary Standards, Regulations, Frameworks, and Guidelines: Developing Cybersecurity and Privacy Concept Mappings IR 8477 (Final) Mapping Relationships Between Documentary Standards, Regulations, Frameworks, and Guidelines: Developing Cybersecurity and Privacy Concept Mappings 2/26/2024 Status: Final	Final	2/26/2024
IR	8278 Rev. 1	National Online Informative References (OLIR) Program: Overview, Benefits, and Use IR 8278 Rev. 1 (Final) National Online Informative References (OLIR) Program: Overview, Benefits, and Use 2/26/2024 Status: Final	Final	2/26/2024
IR	8278A Rev. 1	National Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers IR 8278A Rev. 1 (Final) National Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers 2/26/2024 Status: Final	Final	2/26/2024
CSWP	29	The NIST Cybersecurity Framework (CSF) 2.0 CSWP 29 (Final) The NIST Cybersecurity Framework (CSF) 2.0 2/26/2024 Status: Final	Final	2/26/2024
SP	1300	NIST Cybersecurity Framework 2.0: Small Business Quick-Start Guide SP 1300 (Final) NIST Cybersecurity Framework 2.0: Small Business Quick-Start Guide 2/26/2024 Status: Final	Final	2/26/2024
SP	1301	NIST Cybersecurity Framework 2.0: Quick-Start Guide for Creating and Using Organizational Profiles SP 1301 (Final) NIST Cybersecurity Framework 2.0: Quick-Start Guide for Creating and Using Organizational Profiles 2/26/2024 Status: Final	Final	2/26/2024
SP	1299	NIST Cybersecurity Framework 2.0: Resource and Overview Guide SP 1299 (Final) NIST Cybersecurity Framework 2.0: Resource and Overview Guide 2/26/2024 Status: Final	Final	2/26/2024
SP	1800-28	Data Confidentiality: Identifying and Protecting Assets Against Data Breaches SP 1800-28 (Final) Data Confidentiality: Identifying and Protecting Assets Against Data Breaches 2/23/2024 Status: Final	Final	2/23/2024
SP	1800-29	Data Confidentiality: Detect, Respond to, and Recover from Data Breaches SP 1800-29 (Final) Data Confidentiality: Detect, Respond to, and Recover from Data Breaches 2/23/2024 Status: Final	Final	2/23/2024
SP	800-66 Rev. 2	Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide SP 800-66 Rev. 2 (Final) Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule: A Cybersecurity Resource Guide 2/14/2024 Status: Final	Final	2/14/2024
SP	800-204D	Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines SP 800-204D (Final) Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines 2/12/2024 Status: Final	Final	2/12/2024
SP	800-223	High-Performance Computing Security: Architecture, Threat Analysis, and Security Posture SP 800-223 (Final) High-Performance Computing Security: Architecture, Threat Analysis, and Security Posture 2/09/2024 Status: Final	Final	2/09/2024
SP	800-108 Rev. 1	Recommendation for Key Derivation Using Pseudorandom Functions SP 800-108 Rev. 1 (Final) Recommendation for Key Derivation Using Pseudorandom Functions 2/02/2024 Status: Final	Final	2/02/2024
VTS	200-1	Cybersecurity Framework Election Infrastructure Profile VTS 200-1 (Final) Cybersecurity Framework Election Infrastructure Profile 2/01/2024 Status: Final	Final	2/01/2024
AI	100-2 E2023	Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations AI 100-2 E2023 (Final) Adversarial Machine Learning: A Taxonomy and Terminology of Attacks and Mitigations 1/04/2024 Status: Final	Final	1/04/2024
IR	8450	Overview and Considerations of Access Control Based on Attribute Encryption IR 8450 (Final) Overview and Considerations of Access Control Based on Attribute Encryption 12/20/2023 Status: Final	Final	12/20/2023
IR	8432	Cybersecurity of Genomic Data IR 8432 (Final) Cybersecurity of Genomic Data 12/20/2023 Status: Final	Final	12/20/2023
CSWP	30	Automation Support for Control Assessments: Project Update and Vision CSWP 30 (Final) Automation Support for Control Assessments: Project Update and Vision 12/06/2023 Status: Final	Final	12/06/2023
SP	800-221	Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio SP 800-221 (Final) Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio 11/17/2023 Status: Final	Final	11/17/2023
SP	800-221A	Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio SP 800-221A (Final) Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio 11/17/2023 Status: Final	Final	11/17/2023
SP	800-140B Rev. 1	Cryptographic Module Validation Program (CMVP) Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B Rev. 1 (Final) Cryptographic Module Validation Program (CMVP) Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 11/17/2023 Status: Final	Final	11/17/2023
TN	2276	NIST Phish Scale User Guide TN 2276 (Final) NIST Phish Scale User Guide 11/15/2023 Status: Final	Final	11/15/2023
IR	8473	Cybersecurity Framework Profile for Electric Vehicle Extreme Fast Charging Infrastructure IR 8473 (Final) Cybersecurity Framework Profile for Electric Vehicle Extreme Fast Charging Infrastructure 10/16/2023 Status: Final	Final	10/16/2023
IR	8406	Cybersecurity Framework Profile for Liquefied Natural Gas IR 8406 (Final) Cybersecurity Framework Profile for Liquefied Natural Gas 10/10/2023 Status: Final	Final	10/10/2023
SP	800-82 Rev. 3	Guide to Operational Technology (OT) Security SP 800-82 Rev. 3 (Final) Guide to Operational Technology (OT) Security 9/28/2023 Status: Final	Final	9/28/2023
SP	1800-22	Mobile Device Security: Bring Your Own Device (BYOD) SP 1800-22 (Final) Mobile Device Security: Bring Your Own Device (BYOD) 9/28/2023 Status: Final	Final	9/28/2023
IR	8476	3rd High-Performance Computing Security Workshop: Joint NIST-NSF Workshop Report IR 8476 (Final) 3rd High-Performance Computing Security Workshop: Joint NIST-NSF Workshop Report 9/26/2023 Status: Final	Final	9/26/2023
IR	8441	Cybersecurity Framework Profile for Hybrid Satellite Networks (HSN) IR 8441 (Final) Cybersecurity Framework Profile for Hybrid Satellite Networks (HSN) 9/25/2023 Status: Final	Final	9/25/2023
SP	800-188	De-Identifying Government Datasets: Techniques and Governance SP 800-188 (Final) De-Identifying Government Datasets: Techniques and Governance 9/14/2023 Status: Final	Final	9/14/2023
SP	800-207A	A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Cloud Environments SP 800-207A (Final) A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Cloud Environments 9/13/2023 Status: Final	Final	9/13/2023
IR	8408	Understanding Stablecoin Technology and Related Security Considerations IR 8408 (Final) Understanding Stablecoin Technology and Related Security Considerations 9/05/2023 Status: Final	Final	9/05/2023
Project Description		Manufacturing Supply Chain Traceability with Blockchain Related Technology: Reference Implementation Project Description (Final) Manufacturing Supply Chain Traceability with Blockchain Related Technology: Reference Implementation 8/14/2023 Status: Final	Final	8/14/2023
IR	8270	Introduction to Cybersecurity for Commercial Satellite Operations IR 8270 (Final) Introduction to Cybersecurity for Commercial Satellite Operations 7/25/2023 Status: Final	Final	7/25/2023
SP	800-140C Rev. 2	Cryptographic Module Validation Program (CMVP)-Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C Rev. 2 (Final) Cryptographic Module Validation Program (CMVP)-Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 7/25/2023 Status: Final	Final	7/25/2023
SP	800-140D Rev. 2	Cryptographic Module Validation Program (CMVP)-Approved Sensitive Security Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D Rev. 2 (Final) Cryptographic Module Validation Program (CMVP)-Approved Sensitive Security Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 7/25/2023 Status: Final	Final	7/25/2023
SP	800-219 Rev. 1	Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) SP 800-219 Rev. 1 (Final) Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) 7/20/2023 Status: Final	Final	7/20/2023
IR	8355	NICE Framework Competency Areas: Preparing a Job-Ready Cybersecurity Workforce IR 8355 (Final) NICE Framework Competency Areas: Preparing a Job-Ready Cybersecurity Workforce 6/21/2023 Status: Final	Final	6/21/2023
Project Description		Cybersecurity for the Water and Wastewater Sector: A Practical Reference Design for Mitigating Cyber Risk in Water and Wastewater Systems Project Description (Final) Cybersecurity for the Water and Wastewater Sector: A Practical Reference Design for Mitigating Cyber Risk in Water and Wastewater Systems 6/20/2023 Status: Final	Final	6/20/2023
IR	8454	Status Report on the Final Round of the NIST Lightweight Cryptography Standardization Process IR 8454 (Final) Status Report on the Final Round of the NIST Lightweight Cryptography Standardization Process 6/16/2023 Status: Final	Final	6/16/2023
Project Description		Accelerate Adoption of Digital Identities on Mobile Devices: Identity Management Project Description (Final) Accelerate Adoption of Digital Identities on Mobile Devices: Identity Management 6/01/2023 Status: Final	Final	6/01/2023
SP	800-225	Fiscal Year 2022 Cybersecurity and Privacy Annual Report SP 800-225 (Final) Fiscal Year 2022 Cybersecurity and Privacy Annual Report 5/30/2023 Status: Final	Final	5/30/2023
SP	800-216	Recommendations for Federal Vulnerability Disclosure Guidelines SP 800-216 (Final) Recommendations for Federal Vulnerability Disclosure Guidelines 5/24/2023 Status: Final	Final	5/24/2023
SP	800-124 Rev. 2	Guidelines for Managing the Security of Mobile Devices in the Enterprise SP 800-124 Rev. 2 (Final) Guidelines for Managing the Security of Mobile Devices in the Enterprise 5/17/2023 Status: Final	Final	5/17/2023
FIPS	197	Advanced Encryption Standard (AES) FIPS 197 (Final) Advanced Encryption Standard (AES) 5/09/2023 Status: Final	Final	5/09/2023
IR	8427	Discussion on the Full Entropy Assumption of the SP 800-90 Series IR 8427 (Final) Discussion on the Full Entropy Assumption of the SP 800-90 Series 4/14/2023 Status: Final	Final	4/14/2023
CSWP	28	Security Segmentation in a Small Manufacturing Environment CSWP 28 (Final) Security Segmentation in a Small Manufacturing Environment 4/06/2023 Status: Final	Final	4/06/2023
FIPS	186-5	Digital Signature Standard (DSS) FIPS 186-5 (Final) Digital Signature Standard (DSS) 2/03/2023 Status: Final	Final	2/03/2023
SP	800-186	Recommendations for Discrete Logarithm-based Cryptography: Elliptic Curve Domain Parameters SP 800-186 (Final) Recommendations for Discrete Logarithm-based Cryptography: Elliptic Curve Domain Parameters 2/03/2023 Status: Final	Final	2/03/2023
IR	8323 Rev. 1	Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services IR 8323 Rev. 1 (Final) Foundational PNT Profile: Applying the Cybersecurity Framework for the Responsible Use of Positioning, Navigation, and Timing (PNT) Services 1/31/2023 Status: Final	Final	1/31/2023
SP	1288	Federal Cybersecurity Role-Based Training Approaches, Successes, and Challenges SP 1288 (Final) Federal Cybersecurity Role-Based Training Approaches, Successes, and Challenges 1/11/2023 Status: Final	Final	1/11/2023
IR	8401	Satellite Ground Segment: Applying the Cybersecurity Framework to Satellite Command and Control IR 8401 (Final) Satellite Ground Segment: Applying the Cybersecurity Framework to Satellite Command and Control 12/30/2022 Status: Final	Final	12/30/2022
Project Description		Responding to and Recovering from a Cyber Attack: Cybersecurity for the Manufacturing Sector (Rev. 1) Project Description (Final) Responding to and Recovering from a Cyber Attack: Cybersecurity for the Manufacturing Sector (Rev. 1) 12/22/2022 Status: Final	Final	12/22/2022
SP	1800-34	Validating the Integrity of Computing Devices SP 1800-34 (Final) Validating the Integrity of Computing Devices 12/09/2022 Status: Final	Final	12/09/2022
SP	800-215	Guide to a Secure Enterprise Network Landscape SP 800-215 (Final) Guide to a Secure Enterprise Network Landscape 11/17/2022 Status: Final	Final	11/17/2022
IR	8286D	Using Business Impact Analysis to Inform Risk Prioritization and Response IR 8286D (Final) Using Business Impact Analysis to Inform Risk Prioritization and Response 11/17/2022 Status: Final	Final	11/17/2022
SP	800-160 Vol. 1 Rev. 1	Engineering Trustworthy Secure Systems SP 800-160 Vol. 1 Rev. 1 (Final) Engineering Trustworthy Secure Systems 11/16/2022 Status: Final	Final	11/16/2022
IR	8409	Measuring the Common Vulnerability Scoring System Base Score Equation IR 8409 (Final) Measuring the Common Vulnerability Scoring System Base Score Equation 11/15/2022 Status: Final	Final	11/15/2022
Project Description		Mitigating AI/ML Bias in Context: Establishing Practices for Testing, Evaluation, Verification, and Validation of AI Systems Project Description (Final) Mitigating AI/ML Bias in Context: Establishing Practices for Testing, Evaluation, Verification, and Validation of AI Systems 11/09/2022 Status: Final	Final	11/09/2022
Project Description		Software Supply Chain and DevOps Security Practices: Implementing a Risk-Based Approach to DevSecOps Project Description (Final) Software Supply Chain and DevOps Security Practices: Implementing a Risk-Based Approach to DevSecOps 11/09/2022 Status: Final	Final	11/09/2022
IR	8413	Status Report on the Third Round of the NIST Post-Quantum Cryptography Standardization Process IR 8413 (Final) Status Report on the Third Round of the NIST Post-Quantum Cryptography Standardization Process 9/29/2022 Status: Final	Final	9/29/2022
SP	800-220	Fiscal Year 2021 Cybersecurity and Privacy Annual Report SP 800-220 (Final) Fiscal Year 2021 Cybersecurity and Privacy Annual Report 9/26/2022 Status: Final	Final	9/26/2022
IR	8431	Workshop Summary Report for “Building on the NIST Foundations: Next Steps in IoT Cybersecurity” IR 8431 (Final) Workshop Summary Report for “Building on the NIST Foundations: Next Steps in IoT Cybersecurity” 9/20/2022 Status: Final	Final	9/20/2022
IR	8425	Profile of the IoT Core Baseline for Consumer IoT Products IR 8425 (Final) Profile of the IoT Core Baseline for Consumer IoT Products 9/20/2022 Status: Final	Final	9/20/2022
Project Description		Mitigating Cybersecurity Risk in Telehealth Smart Home Integration: Cybersecurity for the Healthcare Sector Project Description (Final) Mitigating Cybersecurity Risk in Telehealth Smart Home Integration: Cybersecurity for the Healthcare Sector 8/29/2022 Status: Final	Final	8/29/2022
IR	8235	Security Guidance for First Responder Mobile and Wearable Devices IR 8235 (Final) Security Guidance for First Responder Mobile and Wearable Devices 7/20/2022 Status: Final	Final	7/20/2022
CSWP	26	Ordered t-way Combinations for Testing State-based Systems CSWP 26 (Final) Ordered t-way Combinations for Testing State-based Systems 6/13/2022 Status: Final	Final	6/13/2022
IR	8403	Blockchain for Access Control Systems IR 8403 (Final) Blockchain for Access Control Systems 5/26/2022 Status: Final	Final	5/26/2022
CSWP	25	A Data Structure for Integrity Protection with Erasure Capability CSWP 25 (Final) A Data Structure for Integrity Protection with Erasure Capability 5/20/2022 Status: Final	Final	5/20/2022
CSWP	20	Planning for a Zero Trust Architecture: A Planning Guide for Federal Administrators CSWP 20 (Final) Planning for a Zero Trust Architecture: A Planning Guide for Federal Administrators 5/06/2022 Status: Final	Final	5/06/2022
SP	800-161 Rev. 1	Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations SP 800-161 Rev. 1 (Final) Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations 5/05/2022 Status: Final	Final	5/05/2022
IR	8320	Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases IR 8320 (Final) Hardware-Enabled Security: Enabling a Layered Approach to Platform Security for Cloud and Edge Computing Use Cases 5/04/2022 Status: Final	Final	5/04/2022
IR	8320B	Hardware-Enabled Security: Policy-Based Governance in Trusted Container Platforms IR 8320B (Final) Hardware-Enabled Security: Policy-Based Governance in Trusted Container Platforms 4/20/2022 Status: Final	Final	4/20/2022
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 (Final) Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 4/20/2022 Status: Final	Final	4/20/2022
IR	8419	Blockchain and Related Technologies to Support Manufacturing Supply Chain Traceability: Needs and Industry Perspectives IR 8419 (Final) Blockchain and Related Technologies to Support Manufacturing Supply Chain Traceability: Needs and Industry Perspectives 4/07/2022 Status: Final	Final	4/07/2022
SP	800-40 Rev. 4	Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology SP 800-40 Rev. 4 (Final) Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology 4/06/2022 Status: Final	Final	4/06/2022
SP	1800-31	Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways SP 1800-31 (Final) Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways 4/06/2022 Status: Final	Final	4/06/2022
IR	8420	Federal Cybersecurity Awareness Programs: A Mixed Methods Research Study IR 8420 (Final) Federal Cybersecurity Awareness Programs: A Mixed Methods Research Study 3/25/2022 Status: Final	Final	3/25/2022
IR	8420A	Approaches and Challenges of Federal Cybersecurity Awareness Programs IR 8420A (Final) Approaches and Challenges of Federal Cybersecurity Awareness Programs 3/25/2022 Status: Final	Final	3/25/2022
IR	8420B	The Federal Cybersecurity Awareness Workforce: Professional Backgrounds, Knowledge, Skills, and Development Activities IR 8420B (Final) The Federal Cybersecurity Awareness Workforce: Professional Backgrounds, Knowledge, Skills, and Development Activities 3/25/2022 Status: Final	Final	3/25/2022
SP	1800-10	Protecting Information and System Integrity in Industrial Control System Environments: Cybersecurity for the Manufacturing Sector SP 1800-10 (Final) Protecting Information and System Integrity in Industrial Control System Environments: Cybersecurity for the Manufacturing Sector 3/16/2022 Status: Final	Final	3/16/2022
SP	800-172A	Assessing Enhanced Security Requirements for Controlled Unclassified Information SP 800-172A (Final) Assessing Enhanced Security Requirements for Controlled Unclassified Information 3/15/2022 Status: Final	Final	3/15/2022
SP	800-204C	Implementation of DevSecOps for a Microservices-based Application with Service Mesh SP 800-204C (Final) Implementation of DevSecOps for a Microservices-based Application with Service Mesh 3/08/2022 Status: Final	Final	3/08/2022
IR	8374	Ransomware Risk Management: A Cybersecurity Framework Profile IR 8374 (Final) Ransomware Risk Management: A Cybersecurity Framework Profile 2/23/2022 Status: Final	Final	2/23/2022
SP	1800-30	Securing Telehealth Remote Patient Monitoring Ecosystem SP 1800-30 (Final) Securing Telehealth Remote Patient Monitoring Ecosystem 2/22/2022 Status: Final	Final	2/22/2022
IR	8286B	Prioritizing Cybersecurity Risk for Enterprise Risk Management IR 8286B (Final) Prioritizing Cybersecurity Risk for Enterprise Risk Management 2/10/2022 Status: Final	Final	2/10/2022
CSWP	23	Recommended Criteria for Cybersecurity Labeling of Consumer Software CSWP 23 (Final) Recommended Criteria for Cybersecurity Labeling of Consumer Software 2/04/2022 Status: Final	Final	2/04/2022
CSWP	24	Recommended Criteria for Cybersecurity Labeling for Consumer Internet of Things (IoT) Products CSWP 24 (Final) Recommended Criteria for Cybersecurity Labeling for Consumer Internet of Things (IoT) Products 2/04/2022 Status: Final	Final	2/04/2022
SP	800-218	Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities SP 800-218 (Final) Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities 2/03/2022 Status: Final	Final	2/03/2022
SP	1800-32	Securing Distributed Energy Resources: An Example of Industrial Internet of Things Cybersecurity SP 1800-32 (Final) Securing Distributed Energy Resources: An Example of Industrial Internet of Things Cybersecurity 2/02/2022 Status: Final	Final	2/02/2022
SP	800-53A Rev. 5	Assessing Security and Privacy Controls in Information Systems and Organizations SP 800-53A Rev. 5 (Final) Assessing Security and Privacy Controls in Information Systems and Organizations 1/25/2022 Status: Final	Final	1/25/2022
FIPS	201-3	Personal Identity Verification (PIV) of Federal Employees and Contractors FIPS 201-3 (Final) Personal Identity Verification (PIV) of Federal Employees and Contractors 1/24/2022 Status: Final	Final	1/24/2022
SP	800-121 Rev. 2	Guide to Bluetooth Security SP 800-121 Rev. 2 (Final) Guide to Bluetooth Security 1/19/2022 Status: Final	Final	1/19/2022
SP	800-160 Vol. 2 Rev. 1	Developing Cyber-Resilient Systems: A Systems Security Engineering Approach SP 800-160 Vol. 2 Rev. 1 (Final) Developing Cyber-Resilient Systems: A Systems Security Engineering Approach 12/09/2021 Status: Final	Final	12/09/2021
SP	800-213	IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements SP 800-213 (Final) IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements 11/29/2021 Status: Final	Final	11/29/2021
SP	800-213A	IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog SP 800-213A (Final) IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog 11/29/2021 Status: Final	Final	11/29/2021
IR	8286A	Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management IR 8286A (Final) Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management 11/12/2021 Status: Final	Final	11/12/2021
IR	8397	Guidelines on Minimum Standards for Developer Verification of Software IR 8397 (Final) Guidelines on Minimum Standards for Developer Verification of Software 10/06/2021 Status: Final	Final	10/06/2021
CSWP	21	Benefits of an Updated Mapping between the NIST Cybersecurity Framework and the NERC Critical Infrastructure Protection Standards CSWP 21 (Final) Benefits of an Updated Mapping between the NIST Cybersecurity Framework and the NERC Critical Infrastructure Protection Standards 9/29/2021 Status: Final	Final	9/29/2021
SP	800-214	2020 Cybersecurity and Privacy Annual Report SP 800-214 (Final) 2020 Cybersecurity and Privacy Annual Report 9/28/2021 Status: Final	Final	9/28/2021
IR	8360	Machine Learning for Access Control Policy Verification IR 8360 (Final) Machine Learning for Access Control Policy Verification 9/16/2021 Status: Final	Final	9/16/2021
TN	2060	BGP Secure Routing Extension (BGP-SRx): Reference Implementation and Test Tools for Emerging BGP Security Standards TN 2060 (Final) BGP Secure Routing Extension (BGP-SRx): Reference Implementation and Test Tools for Emerging BGP Security Standards 9/15/2021 Status: Final	Final	9/15/2021
IR	8379	Summary Report for the Virtual Workshop Addressing Public Comment on NIST Cybersecurity for IoT Guidance IR 8379 (Final) Summary Report for the Virtual Workshop Addressing Public Comment on NIST Cybersecurity for IoT Guidance 9/09/2021 Status: Final	Final	9/09/2021
IR	8259B	IoT Non-Technical Supporting Capability Core Baseline IR 8259B (Final) IoT Non-Technical Supporting Capability Core Baseline 8/25/2021 Status: Final	Final	8/25/2021
SP	1800-13	Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders SP 1800-13 (Final) Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders 8/25/2021 Status: Final	Final	8/25/2021
IR	8170	Approaches for Federal Agencies to Use the Cybersecurity Framework IR 8170 (Final) Approaches for Federal Agencies to Use the Cybersecurity Framework 8/17/2021 Status: Final	Final	8/17/2021
SP	800-204B	Attribute-based Access Control for Microservices-based Applications using a Service Mesh SP 800-204B (Final) Attribute-based Access Control for Microservices-based Applications using a Service Mesh 8/06/2021 Status: Final	Final	8/06/2021
SP	1271	Getting Started with the NIST Cybersecurity Framework: A Quick Start Guide SP 1271 (Final) Getting Started with the NIST Cybersecurity Framework: A Quick Start Guide 8/06/2021 Status: Final	Final	8/06/2021
Project Description		Migration to Post-Quantum Cryptography Project Description (Final) Migration to Post-Quantum Cryptography 8/04/2021 Status: Final	Final	8/04/2021
IR	8319	Review of the Advanced Encryption Standard IR 8319 (Final) Review of the Advanced Encryption Standard 7/23/2021 Status: Final	Final	7/23/2021
Project Description		Data Classification Practices: Facilitating Data-Centric Security Management Project Description (Final) Data Classification Practices: Facilitating Data-Centric Security Management 7/22/2021 Status: Final	Final	7/22/2021
IR	8369	Status Report on the Second Round of the NIST Lightweight Cryptography Standardization Process IR 8369 (Final) Status Report on the Second Round of the NIST Lightweight Cryptography Standardization Process 7/21/2021 Status: Final	Final	7/21/2021
SP	800-47 Rev. 1	Managing the Security of Information Exchanges SP 800-47 Rev. 1 (Final) Managing the Security of Information Exchanges 7/20/2021 Status: Final	Final	7/20/2021
Project Description		Automation of the Cryptographic Module Validation Program (CMVP) Project Description (Final) Automation of the Cryptographic Module Validation Program (CMVP) 7/01/2021 Status: Final	Final	7/01/2021
IR	8320A	Hardware-Enabled Security: Container Platform Security Prototype IR 8320A (Final) Hardware-Enabled Security: Container Platform Security Prototype 6/17/2021 Status: Final	Final	6/17/2021
Project Description		Addressing Visibility Challenges with TLS 1.3 Project Description (Final) Addressing Visibility Challenges with TLS 1.3 5/26/2021 Status: Final	Final	5/26/2021
SP	1800-15	Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) SP 1800-15 (Final) Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) 5/26/2021 Status: Final	Final	5/26/2021
Project Description		Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security Project Description (Final) Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security 5/20/2021 Status: Final	Final	5/20/2021
CSWP	15	Getting Ready for Post-Quantum Cryptography: Exploring Challenges Associated with Adopting and Using Post-Quantum Cryptographic Algorithms CSWP 15 (Final) Getting Ready for Post-Quantum Cryptography: Exploring Challenges Associated with Adopting and Using Post-Quantum Cryptographic Algorithms 4/28/2021 Status: Final	Final	4/28/2021
IR	8347	NIST Test Personal Identity Verification (PIV) Cards Version 2 IR 8347 (Final) NIST Test Personal Identity Verification (PIV) Cards Version 2 4/02/2021 Status: Final	Final	4/02/2021
IR	8212	ISCMA: An Information Security Continuous Monitoring Program Assessment IR 8212 (Final) ISCMA: An Information Security Continuous Monitoring Program Assessment 3/31/2021 Status: Final	Final	3/31/2021
SP	1800-27	Securing Property Management Systems SP 1800-27 (Final) Securing Property Management Systems 3/30/2021 Status: Final	Final	3/30/2021
IR	8333	Workshop Summary Report for “Cybersecurity Risks in Consumer Home Internet of Things (IoT) Products” Virtual Workshop IR 8333 (Final) Workshop Summary Report for “Cybersecurity Risks in Consumer Home Internet of Things (IoT) Products” Virtual Workshop 3/29/2021 Status: Final	Final	3/29/2021
IR	8276	Key Practices in Cyber Supply Chain Risk Management: Observations from Industry IR 8276 (Final) Key Practices in Cyber Supply Chain Risk Management: Observations from Industry 2/11/2021 Status: Final	Final	2/11/2021
IR	8301	Blockchain Networks: Token Design and Management Overview IR 8301 (Final) Blockchain Networks: Token Design and Management Overview 2/09/2021 Status: Final	Final	2/09/2021
SP	800-172	Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171 SP 800-172 (Final) Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171 2/02/2021 Status: Final	Final	2/02/2021
IR	8322	Workshop Summary Report for “Building the Federal Profile For IoT Device Cybersecurity” Virtual Workshop IR 8322 (Final) Workshop Summary Report for “Building the Federal Profile For IoT Device Cybersecurity” Virtual Workshop 1/07/2021 Status: Final	Final	1/07/2021
SP	1800-24	Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector SP 1800-24 (Final) Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector 12/21/2020 Status: Final	Final	12/21/2020
IR	8246	Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers IR 8246 (Final) Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers 12/15/2020 Status: Final	Final	12/15/2020
SP	800-53 Rev. 5	Security and Privacy Controls for Information Systems and Organizations SP 800-53 Rev. 5 (Final) Security and Privacy Controls for Information Systems and Organizations 12/10/2020 Status: Final	Final	12/10/2020
SP	800-53B	Control Baselines for Information Systems and Organizations SP 800-53B (Final) Control Baselines for Information Systems and Organizations 12/10/2020 Status: Final	Final	12/10/2020
SP	1800-26	Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events SP 1800-26 (Final) Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events 12/08/2020 Status: Final	Final	12/08/2020
SP	1800-25	Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events SP 1800-25 (Final) Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events 12/08/2020 Status: Final	Final	12/08/2020
IR	8330	Research Report: User Perceptions of Smart Home Privacy and Security IR 8330 (Final) Research Report: User Perceptions of Smart Home Privacy and Security 11/17/2020 Status: Final	Final	11/17/2020
SP	800-181 Rev. 1	Workforce Framework for Cybersecurity (NICE Framework) SP 800-181 Rev. 1 (Final) Workforce Framework for Cybersecurity (NICE Framework) 11/16/2020 Status: Final	Final	11/16/2020
SP	800-208	Recommendation for Stateful Hash-Based Signature Schemes SP 800-208 (Final) Recommendation for Stateful Hash-Based Signature Schemes 10/29/2020 Status: Final	Final	10/29/2020
SP	800-209	Security Guidelines for Storage Infrastructure SP 800-209 (Final) Security Guidelines for Storage Infrastructure 10/26/2020 Status: Final	Final	10/26/2020
TN	2111	An Empirical Study on Flow-based Botnet Attacks Prediction TN 2111 (Final) An Empirical Study on Flow-based Botnet Attacks Prediction 10/22/2020 Status: Final	Final	10/22/2020
Project Description		Implementing a Zero Trust Architecture Project Description (Final) Implementing a Zero Trust Architecture 10/21/2020 Status: Final	Final	10/21/2020
IR	8286	Integrating Cybersecurity and Enterprise Risk Management (ERM) IR 8286 (Final) Integrating Cybersecurity and Enterprise Risk Management (ERM) 10/13/2020 Status: Final	Final	10/13/2020
IR	8183 Rev. 1	Cybersecurity Framework Version 1.1 Manufacturing Profile IR 8183 Rev. 1 (Final) Cybersecurity Framework Version 1.1 Manufacturing Profile 10/07/2020 Status: Final	Final	10/07/2020
SP	1800-11	Data Integrity: Recovering from Ransomware and Other Destructive Events SP 1800-11 (Final) Data Integrity: Recovering from Ransomware and Other Destructive Events 9/22/2020 Status: Final	Final	9/22/2020
SP	1800-21	Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) SP 1800-21 (Final) Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) 9/15/2020 Status: Final	Final	9/15/2020
IR	8006	NIST Cloud Computing Forensic Science Challenges IR 8006 (Final) NIST Cloud Computing Forensic Science Challenges 8/25/2020 Status: Final	Final	8/25/2020
SP	800-211	2019 NIST/ITL Cybersecurity Program Annual Report SP 800-211 (Final) 2019 NIST/ITL Cybersecurity Program Annual Report 8/24/2020 Status: Final	Final	8/24/2020
SP	1500-16	Improving Veteran Transitions to Civilian Cybersecurity Roles: Workshop Report SP 1500-16 (Final) Improving Veteran Transitions to Civilian Cybersecurity Roles: Workshop Report 8/20/2020 Status: Final	Final	8/20/2020
SP	800-56C Rev. 2	Recommendation for Key-Derivation Methods in Key-Establishment Schemes SP 800-56C Rev. 2 (Final) Recommendation for Key-Derivation Methods in Key-Establishment Schemes 8/18/2020 Status: Final	Final	8/18/2020
SP	800-207	Zero Trust Architecture SP 800-207 (Final) Zero Trust Architecture 8/11/2020 Status: Final	Final	8/11/2020
SP	800-210	General Access Control Guidance for Cloud Systems SP 800-210 (Final) General Access Control Guidance for Cloud Systems 7/31/2020 Status: Final	Final	7/31/2020
TN	2066	OpenFMB Proof of Concept Implementation Research TN 2066 (Final) OpenFMB Proof of Concept Implementation Research 7/29/2020 Status: Final	Final	7/29/2020
IR	8309	Status Report on the Second Round of the NIST Post-Quantum Cryptography Standardization Process IR 8309 (Final) Status Report on the Second Round of the NIST Post-Quantum Cryptography Standardization Process 7/22/2020 Status: Final	Final	7/22/2020
IR	8219	Securing Manufacturing Industrial Control Systems: Behavioral Anomaly Detection IR 8219 (Final) Securing Manufacturing Industrial Control Systems: Behavioral Anomaly Detection 7/16/2020 Status: Final	Final	7/16/2020
IR	8214A	NIST Roadmap Toward Criteria for Threshold Schemes for Cryptographic Primitives IR 8214A (Final) NIST Roadmap Toward Criteria for Threshold Schemes for Cryptographic Primitives 7/07/2020 Status: Final	Final	7/07/2020
SP	800-77 Rev. 1	Guide to IPsec VPNs SP 800-77 Rev. 1 (Final) Guide to IPsec VPNs 6/30/2020 Status: Final	Final	6/30/2020
SP	1800-16	Securing Web Transactions: TLS Server Certificate Management SP 1800-16 (Final) Securing Web Transactions: TLS Server Certificate Management 6/16/2020 Status: Final	Final	6/16/2020
SP	800-133 Rev. 2	Recommendation for Cryptographic Key Generation SP 800-133 Rev. 2 (Final) Recommendation for Cryptographic Key Generation 6/04/2020 Status: Final	Final	6/04/2020
IR	8259A	IoT Device Cybersecurity Capability Core Baseline IR 8259A (Final) IoT Device Cybersecurity Capability Core Baseline 5/29/2020 Status: Final	Final	5/29/2020
IR	8259	Foundational Cybersecurity Activities for IoT Device Manufacturers IR 8259 (Final) Foundational Cybersecurity Activities for IoT Device Manufacturers 5/29/2020 Status: Final	Final	5/29/2020
SP	800-204A	Building Secure Microservices-based Applications Using Service-Mesh Architecture SP 800-204A (Final) Building Secure Microservices-based Applications Using Service-Mesh Architecture 5/27/2020 Status: Final	Final	5/27/2020
SP	800-137A	Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment SP 800-137A (Final) Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment 5/21/2020 Status: Final	Final	5/21/2020
SP	1800-23	Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry SP 1800-23 (Final) Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry 5/20/2020 Status: Final	Final	5/20/2020
IR	8196	Security Analysis of First Responder Mobile and Wearable Devices IR 8196 (Final) Security Analysis of First Responder Mobile and Wearable Devices 5/11/2020 Status: Final	Final	5/11/2020
SP	800-57 Part 1 Rev. 5	Recommendation for Key Management: Part 1 – General SP 800-57 Part 1 Rev. 5 (Final) Recommendation for Key Management: Part 1 – General 5/04/2020 Status: Final	Final	5/04/2020
IR	8294	Symposium on Federally Funded Research on Cybersecurity of Electric Vehicle Supply Equipment (EVSE) IR 8294 (Final) Symposium on Federally Funded Research on Cybersecurity of Electric Vehicle Supply Equipment (EVSE) 4/29/2020 Status: Final	Final	4/29/2020
IR	8011 Vol. 4	Automation Support for Security Control Assessments: Software Vulnerability Management IR 8011 Vol. 4 (Final) Automation Support for Security Control Assessments: Software Vulnerability Management 4/28/2020 Status: Final	Final	4/28/2020
Project Description		5G Cybersecurity: Preparing a Secure Evolution to 5G Project Description (Final) 5G Cybersecurity: Preparing a Secure Evolution to 5G 4/13/2020 Status: Final	Final	4/13/2020
SP	800-175B Rev. 1	Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms SP 800-175B Rev. 1 (Final) Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms 3/31/2020 Status: Final	Final	3/31/2020
Project Description		Critical Cybersecurity Hygiene: Patching the Enterprise Project Description (Final) Critical Cybersecurity Hygiene: Patching the Enterprise 3/30/2020 Status: Final	Final	3/30/2020
Project Description		Validating the Integrity of Computing Devices: Supply Chain Assurance Project Description (Final) Validating the Integrity of Computing Devices: Supply Chain Assurance 3/26/2020 Status: Final	Final	3/26/2020
SP	800-140	FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140 (Final) FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final	Final	3/20/2020
SP	800-140A	CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140A (Final) CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final	Final	3/20/2020
SP	800-140E	CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790 Annex E and ISO/IEC 24579 Section 6.17 SP 800-140E (Final) CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790 Annex E and ISO/IEC 24579 Section 6.17 3/20/2020 Status: Final	Final	3/20/2020
SP	800-140F	CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140F (Final) CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Final	Final	3/20/2020
SP	800-206	Annual Report 2018: NIST/ITL Cybersecurity Program SP 800-206 (Final) Annual Report 2018: NIST/ITL Cybersecurity Program 3/13/2020 Status: Final	Final	3/13/2020
SP	800-63A	Digital Identity Guidelines: Enrollment and Identity Proofing SP 800-63A (Final) Digital Identity Guidelines: Enrollment and Identity Proofing 3/02/2020 Status: Final	Final	3/02/2020
SP	800-63B	Digital Identity Guidelines: Authentication and Lifecycle Management SP 800-63B (Final) Digital Identity Guidelines: Authentication and Lifecycle Management 3/02/2020 Status: Final	Final	3/02/2020
SP	800-63C	Digital Identity Guidelines: Federation and Assertions SP 800-63C (Final) Digital Identity Guidelines: Federation and Assertions 3/02/2020 Status: Final	Final	3/02/2020
SP	800-63-3	Digital Identity Guidelines SP 800-63-3 (Final) Digital Identity Guidelines 3/02/2020 Status: Final	Final	3/02/2020
IR	8287	A Roadmap for Successful Regional Alliances and Multistakeholder Partnerships to Build the Cybersecurity Workforce IR 8287 (Final) A Roadmap for Successful Regional Alliances and Multistakeholder Partnerships to Build the Cybersecurity Workforce 2/20/2020 Status: Final	Final	2/20/2020
Project Description		Protecting Information and System Integrity in Industrial Control Systems Environments: Cybersecurity for the Manufacturing Sector Project Description (Final) Protecting Information and System Integrity in Industrial Control Systems Environments: Cybersecurity for the Manufacturing Sector 2/07/2020 Status: Final	Final	2/07/2020
CSWP	11C	Case Studies in Cyber Supply Chain Risk Management: Anonymous Renewable Energy Company CSWP 11C (Final) Case Studies in Cyber Supply Chain Risk Management: Anonymous Renewable Energy Company 2/04/2020 Status: Final	Final	2/04/2020
CSWP	11A	Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Electronics Company CSWP 11A (Final) Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Electronics Company 2/04/2020 Status: Final	Final	2/04/2020
CSWP	11	Case Studies in Cyber Supply Chain Risk Management: Summary of Findings and Recommendations CSWP 11 (Final) Case Studies in Cyber Supply Chain Risk Management: Summary of Findings and Recommendations 2/04/2020 Status: Final	Final	2/04/2020
CSWP	11D	Case Studies in Cyber Supply Chain Risk Management: Mayo Clinic CSWP 11D (Final) Case Studies in Cyber Supply Chain Risk Management: Mayo Clinic 2/04/2020 Status: Final	Final	2/04/2020
CSWP	11E	Case Studies in Cyber Supply Chain Risk Management: Palo Alto Networks, Inc. CSWP 11E (Final) Case Studies in Cyber Supply Chain Risk Management: Palo Alto Networks, Inc. 2/04/2020 Status: Final	Final	2/04/2020
CSWP	11B	Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Goods Company CSWP 11B (Final) Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Goods Company 2/04/2020 Status: Final	Final	2/04/2020
CSWP	11F	Case Studies in Cyber Supply Chain Risk Management: Seagate Technology CSWP 11F (Final) Case Studies in Cyber Supply Chain Risk Management: Seagate Technology 2/04/2020 Status: Final	Final	2/04/2020
CSWP	10	NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management, Version 1.0 CSWP 10 (Final) NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management, Version 1.0 1/16/2020 Status: Final	Final	1/16/2020
CSWP	9	A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems CSWP 9 (Final) A Taxonomic Approach to Understanding Emerging Blockchain Identity Management Systems 1/14/2020 Status: Final	Final	1/14/2020
SP	800-189	Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation SP 800-189 (Final) Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation 12/17/2019 Status: Final	Final	12/17/2019
Project Description		Data Confidentiality: Detect, Respond to, and Recover from Data Breaches Project Description (Final) Data Confidentiality: Detect, Respond to, and Recover from Data Breaches 12/05/2019 Status: Final	Final	12/05/2019
Project Description		Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches Project Description (Final) Data Confidentiality: Identifying and Protecting Assets and Data Against Data Breaches 12/05/2019 Status: Final	Final	12/05/2019
SP	1500-4 Rev. 2	NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 3 SP 1500-4 Rev. 2 (Final) NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 3 10/21/2019 Status: Final	Final	10/21/2019
SP	800-128	Guide for Security-Focused Configuration Management of Information Systems SP 800-128 (Final) Guide for Security-Focused Configuration Management of Information Systems 10/10/2019 Status: Final	Final	10/10/2019
IR	8268	Status Report on the First Round of the NIST Lightweight Cryptography Standardization Process IR 8268 (Final) Status Report on the First Round of the NIST Lightweight Cryptography Standardization Process 10/07/2019 Status: Final	Final	10/07/2019
IR	8183A Vol. 1	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 1 – General Implementation Guidance IR 8183A Vol. 1 (Final) Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 1 – General Implementation Guidance 9/30/2019 Status: Final	Final	9/30/2019
IR	8183A Vol. 2	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 2 – Process-based Manufacturing System Use Case IR 8183A Vol. 2 (Final) Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 2 – Process-based Manufacturing System Use Case 9/30/2019 Status: Final	Final	9/30/2019
IR	8183A Vol. 3	Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 3 – Discrete-based Manufacturing System Use Case IR 8183A Vol. 3 (Final) Cybersecurity Framework Manufacturing Profile Low Impact Level Example Implementations Guide: Volume 3 – Discrete-based Manufacturing System Use Case 9/30/2019 Status: Final	Final	9/30/2019
SP	800-52 Rev. 2	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations SP 800-52 Rev. 2 (Final) Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations 8/29/2019 Status: Final	Final	8/29/2019
SP	1800-12	Derived Personal Identity Verification (PIV) Credentials SP 1800-12 (Final) Derived Personal Identity Verification (PIV) Credentials 8/27/2019 Status: Final	Final	8/27/2019
Project Description		Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources Project Description (Final) Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources 8/15/2019 Status: Final	Final	8/15/2019
SP	800-204	Security Strategies for Microservices-based Application Systems SP 800-204 (Final) Security Strategies for Microservices-based Application Systems 8/07/2019 Status: Final	Final	8/07/2019
SP	1800-7	Situational Awareness for Electric Utilities SP 1800-7 (Final) Situational Awareness for Electric Utilities 8/07/2019 Status: Final	Final	8/07/2019
SP	800-162	Guide to Attribute Based Access Control (ABAC) Definition and Considerations SP 800-162 (Final) Guide to Attribute Based Access Control (ABAC) Definition and Considerations 8/02/2019 Status: Final	Final	8/02/2019
SP	1800-17	Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers SP 1800-17 (Final) Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers 7/30/2019 Status: Final	Final	7/30/2019
TN	2051	Cybersecurity Framework Smart Grid Profile TN 2051 (Final) Cybersecurity Framework Smart Grid Profile 7/09/2019 Status: Final	Final	7/09/2019
IR	7298 Rev. 3	Glossary of Key Information Security Terms IR 7298 Rev. 3 (Final) Glossary of Key Information Security Terms 7/03/2019 Status: Final	Final	7/03/2019
SP	1800-14	Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation SP 1800-14 (Final) Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation 6/28/2019 Status: Final	Final	6/28/2019
IR	8228	Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks IR 8228 (Final) Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks 6/25/2019 Status: Final	Final	6/25/2019
SP	800-205	Attribute Considerations for Access Control Systems SP 800-205 (Final) Attribute Considerations for Access Control Systems 6/18/2019 Status: Final	Final	6/18/2019
IR	8221	A Methodology for Enabling Forensic Analysis Using Hypervisor Vulnerabilities Data IR 8221 (Final) A Methodology for Enabling Forensic Analysis Using Hypervisor Vulnerabilities Data 6/05/2019 Status: Final	Final	6/05/2019
SP	800-57 Part 2 Rev. 1	Recommendation for Key Management: Part 2 – Best Practices for Key Management Organizations SP 800-57 Part 2 Rev. 1 (Final) Recommendation for Key Management: Part 2 – Best Practices for Key Management Organizations 5/23/2019 Status: Final	Final	5/23/2019
IR	8227	Manufacturing Profile Implementation Methodology for a Robotic Workcell IR 8227 (Final) Manufacturing Profile Implementation Methodology for a Robotic Workcell 5/22/2019 Status: Final	Final	5/22/2019
IR	8177	Metrics and Key Performance Indicators for Robotic Cybersecurity Performance Analysis IR 8177 (Final) Metrics and Key Performance Indicators for Robotic Cybersecurity Performance Analysis 5/21/2019 Status: Final	Final	5/21/2019
IR	8183	Cybersecurity Framework Manufacturing Profile IR 8183 (Final) Cybersecurity Framework Manufacturing Profile 5/20/2019 Status: Final	Final	5/20/2019
Project Description		Securing Telehealth Remote Patient Monitoring Ecosystem: Cybersecurity for the Healthcare Sector Project Description (Final) Securing Telehealth Remote Patient Monitoring Ecosystem: Cybersecurity for the Healthcare Sector 5/13/2019 Status: Final	Final	5/13/2019
CSWP	8	BowTie – A deep learning feedforward neural network for sentiment analysis CSWP 8 (Final) BowTie – A deep learning feedforward neural network for sentiment analysis 4/22/2019 Status: Final	Final	4/22/2019
SP	800-163 Rev. 1	Vetting the Security of Mobile Applications SP 800-163 Rev. 1 (Final) Vetting the Security of Mobile Applications 4/19/2019 Status: Final	Final	4/19/2019
FIPS	140-3	Security Requirements for Cryptographic Modules FIPS 140-3 (Final) Security Requirements for Cryptographic Modules 3/22/2019 Status: Final	Final	3/22/2019
SP	800-131A Rev. 2	Transitioning the Use of Cryptographic Algorithms and Key Lengths SP 800-131A Rev. 2 (Final) Transitioning the Use of Cryptographic Algorithms and Key Lengths 3/21/2019 Status: Final	Final	3/21/2019
SP	800-56B Rev. 2	Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography SP 800-56B Rev. 2 (Final) Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography 3/21/2019 Status: Final	Final	3/21/2019
IR	8214	Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography IR 8214 (Final) Threshold Schemes for Cryptographic Primitives: Challenges and Opportunities in Standardization and Validation of Threshold Cryptography 3/01/2019 Status: Final	Final	3/01/2019
SP	800-177 Rev. 1	Trustworthy Email SP 800-177 Rev. 1 (Final) Trustworthy Email 2/26/2019 Status: Final	Final	2/26/2019
SP	1800-4	Mobile Device Security: Cloud and Hybrid Builds SP 1800-4 (Final) Mobile Device Security: Cloud and Hybrid Builds 2/21/2019 Status: Final	Final	2/21/2019
IR	8240	Status Report on the First Round of the NIST Post-Quantum Cryptography Standardization Process IR 8240 (Final) Status Report on the First Round of the NIST Post-Quantum Cryptography Standardization Process 1/31/2019 Status: Final	Final	1/31/2019
SP	800-37 Rev. 2	Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy SP 800-37 Rev. 2 (Final) Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy 12/20/2018 Status: Final	Final	12/20/2018
IR	8241	Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs IR 8241 (Final) Organizational Views of NIST Cryptographic Standards and Testing and Validation Programs 12/17/2018 Status: Final	Final	12/17/2018
IR	8011 Vol. 3	Automation Support for Security Control Assessments: Software Asset Management IR 8011 Vol. 3 (Final) Automation Support for Security Control Assessments: Software Asset Management 12/06/2018 Status: Final	Final	12/06/2018
IR	8200	Interagency Report on the Status of International Cybersecurity Standardization for the Internet of Things (IoT) IR 8200 (Final) Interagency Report on the Status of International Cybersecurity Standardization for the Internet of Things (IoT) 11/29/2018 Status: Final	Final	11/29/2018
IR	8202	Blockchain Technology Overview IR 8202 (Final) Blockchain Technology Overview 10/03/2018 Status: Final	Final	10/03/2018
CSWP	7	Transitioning to the Security Content Automation Protocol (SCAP) Version 2 CSWP 7 (Final) Transitioning to the Security Content Automation Protocol (SCAP) Version 2 9/10/2018 Status: Final	Final	9/10/2018
GCR	18-017	The Economic Impacts of the Advanced Encryption Standard, 1996-2017 GCR 18-017 (Final) The Economic Impacts of the Advanced Encryption Standard, 1996-2017 9/07/2018 Status: Final	Final	9/07/2018
SP	1800-5	IT Asset Management SP 1800-5 (Final) IT Asset Management 9/07/2018 Status: Final	Final	9/07/2018
SP	1800-8	Securing Wireless Infusion Pumps in Healthcare Delivery Organizations SP 1800-8 (Final) Securing Wireless Infusion Pumps in Healthcare Delivery Organizations 8/17/2018 Status: Final	Final	8/17/2018
SP	1800-1	Securing Electronic Health Records on Mobile Devices SP 1800-1 (Final) Securing Electronic Health Records on Mobile Devices 7/27/2018 Status: Final	Final	7/27/2018
SP	1800-2	Identity and Access Management for Electric Utilities SP 1800-2 (Final) Identity and Access Management for Electric Utilities 7/13/2018 Status: Final	Final	7/13/2018
SP	800-203	2017 NIST/ITL Cybersecurity Program Annual Report SP 800-203 (Final) 2017 NIST/ITL Cybersecurity Program Annual Report 7/02/2018 Status: Final	Final	7/02/2018
SP	800-116 Rev. 1	Guidelines for the Use of PIV Credentials in Facility Access SP 800-116 Rev. 1 (Final) Guidelines for the Use of PIV Credentials in Facility Access 6/29/2018 Status: Final	Final	6/29/2018
SP	800-125A Rev. 1	Security Recommendations for Server-based Hypervisor Platforms SP 800-125A Rev. 1 (Final) Security Recommendations for Server-based Hypervisor Platforms 6/07/2018 Status: Final	Final	6/07/2018
SP	800-202	Quick Start Guide for Populating Mobile Test Devices SP 800-202 (Final) Quick Start Guide for Populating Mobile Test Devices 5/10/2018 Status: Final	Final	5/10/2018
SP	800-193	Platform Firmware Resiliency Guidelines SP 800-193 (Final) Platform Firmware Resiliency Guidelines 5/04/2018 Status: Final	Final	5/04/2018
IR	7511 Rev. 5	Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements IR 7511 Rev. 5 (Final) Security Content Automation Protocol (SCAP) Version 1.3 Validation Program Test Requirements 4/20/2018 Status: Final	Final	4/20/2018
SP	800-87 Rev. 2	Codes for Identification of Federal and Federally-Assisted Organizations SP 800-87 Rev. 2 (Final) Codes for Identification of Federal and Federally-Assisted Organizations 4/19/2018 Status: Final	Final	4/19/2018
SP	800-56A Rev. 3	Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography SP 800-56A Rev. 3 (Final) Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography 4/16/2018 Status: Final	Final	4/16/2018
CSWP	6	Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1 CSWP 6 (Final) Framework for Improving Critical Infrastructure Cybersecurity, Version 1.1 4/16/2018 Status: Final	Final	4/16/2018
IR	8179	Criticality Analysis Process Model: Prioritizing Systems and Components IR 8179 (Final) Criticality Analysis Process Model: Prioritizing Systems and Components 4/09/2018 Status: Final	Final	4/09/2018
SP	500-325	Fog Computing Conceptual Model SP 500-325 (Final) Fog Computing Conceptual Model 3/14/2018 Status: Final	Final	3/14/2018
Project Description		Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry Project Description (Final) Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry 3/01/2018 Status: Final	Final	3/01/2018
SP	800-70 Rev. 4	National Checklist Program for IT Products: Guidelines for Checklist Users and Developers SP 800-70 Rev. 4 (Final) National Checklist Program for IT Products: Guidelines for Checklist Users and Developers 2/15/2018 Status: Final	Final	2/15/2018
SP	800-126 Rev. 3	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 SP 800-126 Rev. 3 (Final) The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 2/14/2018 Status: Final	Final	2/14/2018
SP	800-126A	SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 SP 800-126A (Final) SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 2/14/2018 Status: Final	Final	2/14/2018
Project Description		Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events Project Description (Final) Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events 2/07/2018 Status: Final	Final	2/07/2018
Project Description		Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events Project Description (Final) Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events 2/07/2018 Status: Final	Final	2/07/2018
CSWP	5	Security Considerations for Code Signing CSWP 5 (Final) Security Considerations for Code Signing 1/26/2018 Status: Final	Final	1/26/2018
Project Description		Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector Project Description (Final) Securing Picture Archiving and Communication System (PACS): Cybersecurity for the Healthcare Sector 1/23/2018 Status: Final	Final	1/23/2018
SP	1800-6	Domain Name System-Based Electronic Mail Security SP 1800-6 (Final) Domain Name System-Based Electronic Mail Security 1/19/2018 Status: Final	Final	1/19/2018
IR	8149	Developing Trust Frameworks to Support Identity Federations IR 8149 (Final) Developing Trust Frameworks to Support Identity Federations 1/12/2018 Status: Final	Final	1/12/2018
IR	8112	Attribute Metadata: A Proposed Schema for Evaluating Federated Attributes IR 8112 (Final) Attribute Metadata: A Proposed Schema for Evaluating Federated Attributes 1/12/2018 Status: Final	Final	1/12/2018
SP	800-90B	Recommendation for the Entropy Sources Used for Random Bit Generation SP 800-90B (Final) Recommendation for the Entropy Sources Used for Random Bit Generation 1/10/2018 Status: Final	Final	1/10/2018
IR	8201	Internet of Things (IoT) Cybersecurity Colloquium: A NIST Workshop Proceedings IR 8201 (Final) Internet of Things (IoT) Cybersecurity Colloquium: A NIST Workshop Proceedings 12/22/2017 Status: Final	Final	12/22/2017
SP	800-187	Guide to LTE Security SP 800-187 (Final) Guide to LTE Security 12/21/2017 Status: Final	Final	12/21/2017
Project Description		Mitigating IoT-based Distributed Denial of Service (DDOS) Project Description (Final) Mitigating IoT-based Distributed Denial of Service (DDOS) 12/14/2017 Status: Final	Final	12/14/2017
Project Description		TLS Server Certificate Management Project Description (Final) TLS Server Certificate Management 11/09/2017 Status: Final	Final	11/09/2017
IR	8176	Security Assurance Requirements for Linux Application Container Deployments IR 8176 (Final) Security Assurance Requirements for Linux Application Container Deployments 10/11/2017 Status: Final	Final	10/11/2017
IR	8194	Exploratory Lens Model of Decision-Making in a Potential Phishing Attack Scenario IR 8194 (Final) Exploratory Lens Model of Decision-Making in a Potential Phishing Attack Scenario 10/10/2017 Status: Final	Final	10/10/2017
SP	800-195	2016 NIST/ITL Cybersecurity Program Annual Report SP 800-195 (Final) 2016 NIST/ITL Cybersecurity Program Annual Report 9/28/2017 Status: Final	Final	9/28/2017
SP	800-190	Application Container Security Guide SP 800-190 (Final) Application Container Security Guide 9/25/2017 Status: Final	Final	9/25/2017
IR	8192	Enhancing Resilience of the Internet and Communications Ecosystem: A NIST Workshop Proceedings IR 8192 (Final) Enhancing Resilience of the Internet and Communications Ecosystem: A NIST Workshop Proceedings 9/18/2017 Status: Final	Final	9/18/2017
Project Description		Securing Property Management Systems: Cybersecurity for the Hospitality Sector Project Description (Final) Securing Property Management Systems: Cybersecurity for the Hospitality Sector 9/13/2017 Status: Final	Final	9/13/2017
IR	8188	Key Performance Indicators for Process Control System Cybersecurity Performance Analysis IR 8188 (Final) Key Performance Indicators for Process Control System Cybersecurity Performance Analysis 8/03/2017 Status: Final	Final	8/03/2017
Project Description		Secure Inter-Domain Routing--Part 1: Route Hijacks Project Description (Final) Secure Inter-Domain Routing--Part 1: Route Hijacks 7/06/2017 Status: Final	Final	7/06/2017
SP	800-192	Verification and Test Methods for Access Control Policies/Models SP 800-192 (Final) Verification and Test Methods for Access Control Policies/Models 6/27/2017 Status: Final	Final	6/27/2017
SP	800-12 Rev. 1	An Introduction to Information Security SP 800-12 Rev. 1 (Final) An Introduction to Information Security 6/22/2017 Status: Final	Final	6/22/2017
IR	8011 Vol. 1	Automation Support for Security Control Assessments: Volume 1: Overview IR 8011 Vol. 1 (Final) Automation Support for Security Control Assessments: Volume 1: Overview 6/06/2017 Status: Final	Final	6/06/2017
IR	8011 Vol. 2	Automation Support for Security Control Assessments: Volume 2: Hardware Asset Management IR 8011 Vol. 2 (Final) Automation Support for Security Control Assessments: Volume 2: Hardware Asset Management 6/06/2017 Status: Final	Final	6/06/2017
IR	8114	Report on Lightweight Cryptography IR 8114 (Final) Report on Lightweight Cryptography 3/28/2017 Status: Final	Final	3/28/2017
Project Description		Capabilities Assessment for Securing Manufacturing Industrial Control Systems Project Description (Final) Capabilities Assessment for Securing Manufacturing Industrial Control Systems 3/09/2017 Status: Final	Final	3/09/2017
IR	8165	Impact of Code Complexity on Software Analysis IR 8165 (Final) Impact of Code Complexity on Software Analysis 2/09/2017 Status: Final	Final	2/09/2017
IR	8136	An Overview of Mobile Application Vetting Services for Public Safety IR 8136 (Final) An Overview of Mobile Application Vetting Services for Public Safety 1/27/2017 Status: Final	Final	1/27/2017
IR	8062	An Introduction to Privacy Engineering and Risk Management in Federal Systems IR 8062 (Final) An Introduction to Privacy Engineering and Risk Management in Federal Systems 1/04/2017 Status: Final	Final	1/04/2017
SP	800-184	Guide for Cybersecurity Event Recovery SP 800-184 (Final) Guide for Cybersecurity Event Recovery 12/22/2016 Status: Final	Final	12/22/2016
SP	800-185	SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash SP 800-185 (Final) SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash 12/22/2016 Status: Final	Final	12/22/2016
IR	8151	Dramatically Reducing Software Vulnerabilities: Report to the White House Office of Science and Technology Policy IR 8151 (Final) Dramatically Reducing Software Vulnerabilities: Report to the White House Office of Science and Technology Policy 11/30/2016 Status: Final	Final	11/30/2016
Project Description		Mobile Application Single Sign-On: for Public Safety and First Responders Project Description (Final) Mobile Application Single Sign-On: for Public Safety and First Responders 11/28/2016 Status: Final	Final	11/28/2016
GCR	16-010	Survey and New Directions for Physics-Based Attack Detection in Control Systems GCR 16-010 (Final) Survey and New Directions for Physics-Based Attack Detection in Control Systems 11/21/2016 Status: Final	Final	11/21/2016
SP	500-320	Report of the Workshop on Software Measures and Metrics to Reduce Security Vulnerabilities (SwMM-RSV) SP 500-320 (Final) Report of the Workshop on Software Measures and Metrics to Reduce Security Vulnerabilities (SwMM-RSV) 11/10/2016 Status: Final	Final	11/10/2016
IR	7621 Rev. 1	Small Business Information Security: The Fundamentals IR 7621 Rev. 1 (Final) Small Business Information Security: The Fundamentals 11/03/2016 Status: Final	Final	11/03/2016
SP	800-38B	Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication SP 800-38B (Final) Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication 10/06/2016 Status: Final	Final	10/06/2016
SP	800-150	Guide to Cyber Threat Information Sharing SP 800-150 (Final) Guide to Cyber Threat Information Sharing 10/04/2016 Status: Final	Final	10/04/2016
SP	800-178	A Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) SP 800-178 (Final) A Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) 10/03/2016 Status: Final	Final	10/03/2016
Project Description		Multifactor Authentication for e-Commerce: Online Authentication for the Retail Sector Project Description (Final) Multifactor Authentication for e-Commerce: Online Authentication for the Retail Sector 9/20/2016 Status: Final	Final	9/20/2016
IR	8103	Advanced Identity Workshop on Applying Measurement Science in the Identity Ecosystem: Summary and Next Steps IR 8103 (Final) Advanced Identity Workshop on Applying Measurement Science in the Identity Ecosystem: Summary and Next Steps 9/19/2016 Status: Final	Final	9/19/2016
SP	800-175A	Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies SP 800-175A (Final) Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies 8/22/2016 Status: Final	Final	8/22/2016
SP	800-182	Computer Security Division 2015 Annual Report SP 800-182 (Final) Computer Security Division 2015 Annual Report 8/10/2016 Status: Final	Final	8/10/2016
SP	800-38G	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G (Final) Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 8/04/2016 Status: Final	Final	8/04/2016
SP	800-46 Rev. 2	Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security SP 800-46 Rev. 2 (Final) Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security 7/29/2016 Status: Final	Final	7/29/2016
SP	800-114 Rev. 1	User's Guide to Telework and Bring Your Own Device (BYOD) Security SP 800-114 Rev. 1 (Final) User's Guide to Telework and Bring Your Own Device (BYOD) Security 7/29/2016 Status: Final	Final	7/29/2016
SP	800-183	Networks of 'Things' SP 800-183 (Final) Networks of 'Things' 7/28/2016 Status: Final	Final	7/28/2016
IR	8080	Usability and Security Considerations for Public Safety Mobile Authentication IR 8080 (Final) Usability and Security Considerations for Public Safety Mobile Authentication 7/27/2016 Status: Final	Final	7/27/2016
SP	800-166	Derived PIV Application and Data Model Test Guidelines SP 800-166 (Final) Derived PIV Application and Data Model Test Guidelines 6/06/2016 Status: Final	Final	6/06/2016
IR	8135	Identifying and Categorizing Data Types for Public Safety Mobile Applications: Workshop Report IR 8135 (Final) Identifying and Categorizing Data Types for Public Safety Mobile Applications: Workshop Report 6/01/2016 Status: Final	Final	6/01/2016
SP	800-156	Representation of PIV Chain-of-Trust for Import and Export SP 800-156 (Final) Representation of PIV Chain-of-Trust for Import and Export 5/20/2016 Status: Final	Final	5/20/2016
Project Description		Data Integrity: Recovering from a destructive malware attack Project Description (Final) Data Integrity: Recovering from a destructive malware attack 5/09/2016 Status: Final	Final	5/09/2016
IR	8105	Report on Post-Quantum Cryptography IR 8105 (Final) Report on Post-Quantum Cryptography 4/28/2016 Status: Final	Final	4/28/2016
IR	8040	Measuring the Usability and Security of Permuted Passwords on Mobile Platforms IR 8040 (Final) Measuring the Usability and Security of Permuted Passwords on Mobile Platforms 4/25/2016 Status: Final	Final	4/25/2016
IR	8060	Guidelines for the Creation of Interoperable Software Identification (SWID) Tags IR 8060 (Final) Guidelines for the Creation of Interoperable Software Identification (SWID) Tags 4/22/2016 Status: Final	Final	4/22/2016
CSWP	4	Best Practices for Privileged User PIV Authentication CSWP 4 (Final) Best Practices for Privileged User PIV Authentication 4/21/2016 Status: Final	Final	4/21/2016
SP	800-85A-4	PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 Compliance) SP 800-85A-4 (Final) PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 Compliance) 4/13/2016 Status: Final	Final	4/13/2016
IR	7977	NIST Cryptographic Standards and Guidelines Development Process IR 7977 (Final) NIST Cryptographic Standards and Guidelines Development Process 3/31/2016 Status: Final	Final	3/31/2016
IR	8054	NSTIC Pilots: Catalyzing the Identity Ecosystem IR 8054 (Final) NSTIC Pilots: Catalyzing the Identity Ecosystem 3/15/2016 Status: Final	Final	3/15/2016
SP	800-125B	Secure Virtual Network Configuration for Virtual Machine (VM) Protection SP 800-125B (Final) Secure Virtual Network Configuration for Virtual Machine (VM) Protection 3/07/2016 Status: Final	Final	3/07/2016
Project Description		Domain Name System-Based Security for Electronic Mail Project Description (Final) Domain Name System-Based Security for Electronic Mail 3/04/2016 Status: Final	Final	3/04/2016
IR	7511 Rev. 4	Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements IR 7511 Rev. 4 (Final) Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements 1/28/2016 Status: Final	Final	1/28/2016
IR	8055	Derived Personal Identity Verification (PIV) Credentials (DPC) Proof of Concept Research IR 8055 (Final) Derived Personal Identity Verification (PIV) Credentials (DPC) Proof of Concept Research 1/20/2016 Status: Final	Final	1/20/2016
IR	8074 Vol. 2	Supplemental Information for the Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity IR 8074 Vol. 2 (Final) Supplemental Information for the Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity 12/23/2015 Status: Final	Final	12/23/2015
IR	8074 Vol. 1	Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity IR 8074 Vol. 1 (Final) Interagency Report on Strategic U.S. Government Engagement in International Standardization to Achieve U.S. Objectives for Cybersecurity 12/23/2015 Status: Final	Final	12/23/2015
IR	7904	Trusted Geolocation in the Cloud: Proof of Concept Implementation IR 7904 (Final) Trusted Geolocation in the Cloud: Proof of Concept Implementation 12/10/2015 Status: Final	Final	12/10/2015
IR	8089	An Industrial Control System Cybersecurity Performance Testbed IR 8089 (Final) An Industrial Control System Cybersecurity Performance Testbed 12/10/2015 Status: Final	Final	12/10/2015
Project Description		Wireless Medical Infusion Pumps: Medical Device Security Project Description (Final) Wireless Medical Infusion Pumps: Medical Device Security 12/01/2015 Status: Final	Final	12/01/2015
SP	800-152	A Profile for U.S. Federal Cryptographic Key Management Systems (CKMS) SP 800-152 (Final) A Profile for U.S. Federal Cryptographic Key Management Systems (CKMS) 10/28/2015 Status: Final	Final	10/28/2015
SP	800-167	Guide to Application Whitelisting SP 800-167 (Final) Guide to Application Whitelisting 10/28/2015 Status: Final	Final	10/28/2015
IR	7987 Rev. 1	Policy Machine: Features, Architecture, and Specification IR 7987 Rev. 1 (Final) Policy Machine: Features, Architecture, and Specification 10/27/2015 Status: Final	Final	10/27/2015
IR	8053	De-Identification of Personal Information IR 8053 (Final) De-Identification of Personal Information 10/22/2015 Status: Final	Final	10/22/2015
IR	7966	Security of Interactive and Automated Access Management Using Secure Shell (SSH) IR 7966 (Final) Security of Interactive and Automated Access Management Using Secure Shell (SSH) 10/15/2015 Status: Final	Final	10/15/2015
Project Description		Software Asset Management: Continuous Monitoring Project Description (Final) Software Asset Management: Continuous Monitoring 9/16/2015 Status: Final	Final	9/16/2015
SP	800-176	Computer Security Division 2014 Annual Report SP 800-176 (Final) Computer Security Division 2014 Annual Report 8/20/2015 Status: Final	Final	8/20/2015
FIPS	180-4	Secure Hash Standard (SHS) FIPS 180-4 (Final) Secure Hash Standard (SHS) 8/04/2015 Status: Final	Final	8/04/2015
FIPS	202	SHA-3 Standard: Permutation-Based Hash and Extendable-Output Functions FIPS 202 (Final) SHA-3 Standard: Permutation-Based Hash and Extendable-Output Functions 8/04/2015 Status: Final	Final	8/04/2015
SP	800-79-2	Guidelines for the Authorization of Personal Identity Verification Card Issuers (PCI) and Derived PIV Credential Issuers (DPCI) SP 800-79-2 (Final) Guidelines for the Authorization of Personal Identity Verification Card Issuers (PCI) and Derived PIV Credential Issuers (DPCI) 7/30/2015 Status: Final	Final	7/30/2015
SP	800-90A Rev. 1	Recommendation for Random Number Generation Using Deterministic Random Bit Generators SP 800-90A Rev. 1 (Final) Recommendation for Random Number Generation Using Deterministic Random Bit Generators 6/24/2015 Status: Final	Final	6/24/2015
SP	500-304	Conformance Testing Methodology Framework for ANSI/NIST-ITL 1-2011 Update: 2013, Data Format for the Interchange of Fingerprint, Facial & Other Biometric Information SP 500-304 (Final) Conformance Testing Methodology Framework for ANSI/NIST-ITL 1-2011 Update: 2013, Data Format for the Interchange of Fingerprint, Facial & Other Biometric Information 6/24/2015 Status: Final	Final	6/24/2015
IR	7863	Cardholder Authentication for the PIV Digital Signature Key IR 7863 (Final) Cardholder Authentication for the PIV Digital Signature Key 6/18/2015 Status: Final	Final	6/18/2015
IR	8041	Proceedings of the Cybersecurity for Direct Digital Manufacturing (DDM) Symposium IR 8041 (Final) Proceedings of the Cybersecurity for Direct Digital Manufacturing (DDM) Symposium 4/10/2015 Status: Final	Final	4/10/2015
Project Description		Attribute Based Access Control Project Description (Final) Attribute Based Access Control 4/01/2015 Status: Final	Final	4/01/2015
IR	8014	Considerations for Identity Management in Public Safety Mobile Networks IR 8014 (Final) Considerations for Identity Management in Public Safety Mobile Networks 3/30/2015 Status: Final	Final	3/30/2015
IR	7823	Advanced Metering Infrastructure Smart Meter Upgradeability Test Framework IR 7823 (Final) Advanced Metering Infrastructure Smart Meter Upgradeability Test Framework 3/02/2015 Status: Final	Final	3/02/2015
IR	8023	Risk Management for Replication Devices IR 8023 (Final) Risk Management for Replication Devices 2/23/2015 Status: Final	Final	2/23/2015
IR	8018	Public Safety Mobile Application Security Requirements Workshop Summary IR 8018 (Final) Public Safety Mobile Application Security Requirements Workshop Summary 1/22/2015 Status: Final	Final	1/22/2015
SP	800-57 Part 3 Rev. 1	Recommendation for Key Management, Part 3: Application-Specific Key Management Guidance SP 800-57 Part 3 Rev. 1 (Final) Recommendation for Key Management, Part 3: Application-Specific Key Management Guidance 1/22/2015 Status: Final	Final	1/22/2015
SP	800-157	Guidelines for Derived Personal Identity Verification (PIV) Credentials SP 800-157 (Final) Guidelines for Derived Personal Identity Verification (PIV) Credentials 12/19/2014 Status: Final	Final	12/19/2014
SP	800-88 Rev. 1	Guidelines for Media Sanitization SP 800-88 Rev. 1 (Final) Guidelines for Media Sanitization 12/17/2014 Status: Final	Final	12/17/2014
IR	7628 Rev. 1	Guidelines for Smart Grid Cybersecurity IR 7628 Rev. 1 (Final) Guidelines for Smart Grid Cybersecurity 9/25/2014 Status: Final	Final	9/25/2014
Project Description		Mobile Device Security for Enterprises Project Description (Final) Mobile Device Security for Enterprises 9/12/2014 Status: Final	Final	9/12/2014
SP	800-170	Computer Security Division 2013 Annual Report SP 800-170 (Final) Computer Security Division 2013 Annual Report 9/04/2014 Status: Final	Final	9/04/2014
SP	800-147B	BIOS Protection Guidelines for Servers SP 800-147B (Final) BIOS Protection Guidelines for Servers 8/28/2014 Status: Final	Final	8/28/2014
SP	800-168	Approximate Matching: Definition and Terminology SP 800-168 (Final) Approximate Matching: Definition and Terminology 7/02/2014 Status: Final	Final	7/02/2014
SP	800-101 Rev. 1	Guidelines on Mobile Device Forensics SP 800-101 Rev. 1 (Final) Guidelines on Mobile Device Forensics 5/15/2014 Status: Final	Final	5/15/2014
IR	7946	CVSS Implementation Guidance IR 7946 (Final) CVSS Implementation Guidance 4/28/2014 Status: Final	Final	4/28/2014
IR	7991	United States Federal Employees' Password Management Behaviors – A Department of Commerce Case Study IR 7991 (Final) United States Federal Employees' Password Management Behaviors – A Department of Commerce Case Study 4/08/2014 Status: Final	Final	4/08/2014
IR	7849	A Methodology for Developing Authentication Assurance Level Taxonomy for Smart Card-based Identity Verification IR 7849 (Final) A Methodology for Developing Authentication Assurance Level Taxonomy for Smart Card-based Identity Verification 3/05/2014 Status: Final	Final	3/05/2014
CSWP	2	Summary of NIST SP 800-53, Revision 4: Security and Privacy Controls for Federal Information Systems and Organizations CSWP 2 (Final) Summary of NIST SP 800-53, Revision 4: Security and Privacy Controls for Federal Information Systems and Organizations 2/19/2014 Status: Final	Final	2/19/2014
CSWP	1	Framework for Improving Critical Infrastructure Cybersecurity, Version 1.0 CSWP 1 (Final) Framework for Improving Critical Infrastructure Cybersecurity, Version 1.0 2/12/2014 Status: Final	Final	2/12/2014
IR	7983	Report: Authentication Diary Study IR 7983 (Final) Report: Authentication Diary Study 2/04/2014 Status: Final	Final	2/04/2014
IR	7970	Taxonomic Rules for Password Policies: Translating the Informal to the Formal Language IR 7970 (Final) Taxonomic Rules for Password Policies: Translating the Informal to the Formal Language 12/09/2013 Status: Final	Final	12/09/2013
Project Description		Identity and Access Management: Securing Networked Infrastructure for the Energy Sector Project Description (Final) Identity and Access Management: Securing Networked Infrastructure for the Energy Sector 11/05/2013 Status: Final	Final	11/05/2013
IR	7956	Cryptographic Key Management Issues & Challenges in Cloud Services IR 7956 (Final) Cryptographic Key Management Issues & Challenges in Cloud Services 9/18/2013 Status: Final	Final	9/18/2013
IR	7957	Conformance Test Architecture and Test Suite for ANSI/NIST-ITL 1-2011 NIEM XML Encoded Transactions IR 7957 (Final) Conformance Test Architecture and Test Suite for ANSI/NIST-ITL 1-2011 NIEM XML Encoded Transactions 9/18/2013 Status: Final	Final	9/18/2013
SP	800-81-2	Secure Domain Name System (DNS) Deployment Guide SP 800-81-2 (Final) Secure Domain Name System (DNS) Deployment Guide 9/18/2013 Status: Final	Final	9/18/2013
SP	800-130	A Framework for Designing Cryptographic Key Management Systems SP 800-130 (Final) A Framework for Designing Cryptographic Key Management Systems 8/15/2013 Status: Final	Final	8/15/2013
SP	800-83 Rev. 1	Guide to Malware Incident Prevention and Handling for Desktops and Laptops SP 800-83 Rev. 1 (Final) Guide to Malware Incident Prevention and Handling for Desktops and Laptops 7/22/2013 Status: Final	Final	7/22/2013
SP	800-165	Computer Security Division 2012 Annual Report SP 800-165 (Final) Computer Security Division 2012 Annual Report 7/22/2013 Status: Final	Final	7/22/2013
SP	800-76-2	Biometric Specifications for Personal Identity Verification SP 800-76-2 (Final) Biometric Specifications for Personal Identity Verification 7/11/2013 Status: Final	Final	7/11/2013
IR	7933	Requirements and Conformance Test Assertions for ANSI/NIST-ITL 1-2011 Record Type 18 - DNA Record IR 7933 (Final) Requirements and Conformance Test Assertions for ANSI/NIST-ITL 1-2011 Record Type 18 - DNA Record 6/21/2013 Status: Final	Final	6/21/2013
IR	7916	Proceedings of the Cybersecurity in Cyber-Physical Systems Workshop, April 23-24, 2012 IR 7916 (Final) Proceedings of the Cybersecurity in Cyber-Physical Systems Workshop, April 23-24, 2012 2/15/2013 Status: Final	Final	2/15/2013
SP	800-38F	Recommendation for Block Cipher Modes of Operation: Methods for Key Wrapping SP 800-38F (Final) Recommendation for Block Cipher Modes of Operation: Methods for Key Wrapping 12/13/2012 Status: Final	Final	12/13/2012
IR	7817	A Credential Reliability and Revocation Model for Federated Identities IR 7817 (Final) A Credential Reliability and Revocation Model for Federated Identities 11/29/2012 Status: Final	Final	11/29/2012
IR	7896	Third-Round Report of the SHA-3 Cryptographic Hash Algorithm Competition IR 7896 (Final) Third-Round Report of the SHA-3 Cryptographic Hash Algorithm Competition 11/15/2012 Status: Final	Final	11/15/2012
IR	7878	Combinatorial Coverage Measurement IR 7878 (Final) Combinatorial Coverage Measurement 10/26/2012 Status: Final	Final	10/26/2012
IR	7622	Notional Supply Chain Risk Management Practices for Federal Information Systems IR 7622 (Final) Notional Supply Chain Risk Management Practices for Federal Information Systems 10/16/2012 Status: Final	Final	10/16/2012
SP	800-30 Rev. 1	Guide for Conducting Risk Assessments SP 800-30 Rev. 1 (Final) Guide for Conducting Risk Assessments 9/17/2012 Status: Final	Final	9/17/2012
IR	7877	BioCTS 2012: Advanced Conformance Test Architectures and Test Suites for Biometric Data Interchange Formats and Biometric Information Records IR 7877 (Final) BioCTS 2012: Advanced Conformance Test Architectures and Test Suites for Biometric Data Interchange Formats and Biometric Information Records 9/14/2012 Status: Final	Final	9/14/2012
IR	7874	Guidelines for Access Control System Evaluation Metrics IR 7874 (Final) Guidelines for Access Control System Evaluation Metrics 9/14/2012 Status: Final	Final	9/14/2012
SP	800-107 Rev. 1	Recommendation for Applications Using Approved Hash Algorithms SP 800-107 Rev. 1 (Final) Recommendation for Applications Using Approved Hash Algorithms 8/24/2012 Status: Final	Final	8/24/2012
SP	800-61 Rev. 2	Computer Security Incident Handling Guide SP 800-61 Rev. 2 (Final) Computer Security Incident Handling Guide 8/06/2012 Status: Final	Final	8/06/2012
IR	7867 E2012	Usability of PIV Smartcards for Logical Access IR 7867 E2012 (Final) Usability of PIV Smartcards for Logical Access 8/01/2012 Status: Final	Final	8/01/2012
IR	7870	NIST Test Personal Identity Verification (PIV) Cards IR 7870 (Final) NIST Test Personal Identity Verification (PIV) Cards 7/12/2012 Status: Final	Final	7/12/2012
IR	7864	The Common Misuse Scoring System (CMSS): Metrics for Software Feature Misuse Vulnerabilities IR 7864 (Final) The Common Misuse Scoring System (CMSS): Metrics for Software Feature Misuse Vulnerabilities 7/10/2012 Status: Final	Final	7/10/2012
SP	800-146	Cloud Computing Synopsis and Recommendations SP 800-146 (Final) Cloud Computing Synopsis and Recommendations 5/29/2012 Status: Final	Final	5/29/2012
IR	7816	Computer Security Division 2011 Annual Report IR 7816 (Final) Computer Security Division 2011 Annual Report 5/08/2012 Status: Final	Final	5/08/2012
SP	800-126 Rev. 2	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2 SP 800-126 Rev. 2 (Final) The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2 3/19/2012 Status: Final	Final	3/19/2012
IR	7275 Rev. 4	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 IR 7275 Rev. 4 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 3/01/2012 Status: Final	Final	3/01/2012
SP	800-153	Guidelines for Securing Wireless Local Area Networks (WLANs) SP 800-153 (Final) Guidelines for Securing Wireless Local Area Networks (WLANs) 2/21/2012 Status: Final	Final	2/21/2012
SP	800-135 Rev. 1	Recommendation for Existing Application-Specific Key Derivation Functions SP 800-135 Rev. 1 (Final) Recommendation for Existing Application-Specific Key Derivation Functions 12/23/2011 Status: Final	Final	12/23/2011
SP	800-144	Guidelines on Security and Privacy in Public Cloud Computing SP 800-144 (Final) Guidelines on Security and Privacy in Public Cloud Computing 12/09/2011 Status: Final	Final	12/09/2011
SP	800-137	Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations SP 800-137 (Final) Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations 9/30/2011 Status: Final	Final	9/30/2011
SP	800-145	The NIST Definition of Cloud Computing SP 800-145 (Final) The NIST Definition of Cloud Computing 9/28/2011 Status: Final	Final	9/28/2011
IR	7802	Trust Model for Security Automation Data 1.0 (TMSAD) IR 7802 (Final) Trust Model for Security Automation Data 1.0 (TMSAD) 9/20/2011 Status: Final	Final	9/20/2011
IR	7806	ANSI/NIST-ITL 1-2011 Requirements and Conformance Test Assertions IR 7806 (Final) ANSI/NIST-ITL 1-2011 Requirements and Conformance Test Assertions 9/16/2011 Status: Final	Final	9/16/2011
IR	7682	Information System Security Best Practices for UOCAVA-Supporting Systems IR 7682 (Final) Information System Security Best Practices for UOCAVA-Supporting Systems 9/15/2011 Status: Final	Final	9/15/2011
IR	7711	Security Best Practices for the Electronic Transmission of Election Materials for UOCAVA Voters IR 7711 (Final) Security Best Practices for the Electronic Transmission of Election Materials for UOCAVA Voters 9/15/2011 Status: Final	Final	9/15/2011
IR	7697	Common Platform Enumeration: Dictionary Specification Version 2.3 IR 7697 (Final) Common Platform Enumeration: Dictionary Specification Version 2.3 8/19/2011 Status: Final	Final	8/19/2011
IR	7695	Common Platform Enumeration: Naming Specification Version 2.3 IR 7695 (Final) Common Platform Enumeration: Naming Specification Version 2.3 8/19/2011 Status: Final	Final	8/19/2011
IR	7698	Common Platform Enumeration: Applicability Language Specification Version 2.3 IR 7698 (Final) Common Platform Enumeration: Applicability Language Specification Version 2.3 8/19/2011 Status: Final	Final	8/19/2011
IR	7696	Common Platform Enumeration: Name Matching Specification Version 2.3 IR 7696 (Final) Common Platform Enumeration: Name Matching Specification Version 2.3 8/19/2011 Status: Final	Final	8/19/2011
IR	7788	Security Risk Analysis of Enterprise Networks Using Probabilistic Attack Graphs IR 7788 (Final) Security Risk Analysis of Enterprise Networks Using Probabilistic Attack Graphs 8/01/2011 Status: Final	Final	8/01/2011
IR	7815	Access Control for SAR Systems IR 7815 (Final) Access Control for SAR Systems 7/01/2011 Status: Final	Final	7/01/2011
IR	7791	Conformance Test Architecture and Test Suite for ANSI/NIST-ITL 1-2007 IR 7791 (Final) Conformance Test Architecture and Test Suite for ANSI/NIST-ITL 1-2007 6/22/2011 Status: Final	Final	6/22/2011
IR	7694	Specification for Asset Reporting Format 1.1 IR 7694 (Final) Specification for Asset Reporting Format 1.1 6/21/2011 Status: Final	Final	6/21/2011
IR	7693	Specification for Asset Identification 1.1 IR 7693 (Final) Specification for Asset Identification 1.1 6/17/2011 Status: Final	Final	6/17/2011
IR	7751	Computer Security Division 2010 Annual Report IR 7751 (Final) Computer Security Division 2010 Annual Report 5/31/2011 Status: Final	Final	5/31/2011
SP	800-147	BIOS Protection Guidelines SP 800-147 (Final) BIOS Protection Guidelines 4/29/2011 Status: Final	Final	4/29/2011
IR	7692	Specification for the Open Checklist Interactive Language (OCIL) Version 2.0 IR 7692 (Final) Specification for the Open Checklist Interactive Language (OCIL) Version 2.0 4/07/2011 Status: Final	Final	4/07/2011
SP	800-39	Managing Information Security Risk: Organization, Mission, and Information System View SP 800-39 (Final) Managing Information Security Risk: Organization, Mission, and Information System View 3/01/2011 Status: Final	Final	3/01/2011
IR	7771	Conformance Test Architecture for Biometric Data Interchange Formats - Version Beta 2.0 IR 7771 (Final) Conformance Test Architecture for Biometric Data Interchange Formats - Version Beta 2.0 2/28/2011 Status: Final	Final	2/28/2011
SP	800-126 Rev. 1	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.1 SP 800-126 Rev. 1 (Final) The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.1 2/25/2011 Status: Final	Final	2/25/2011
SP	800-51 Rev. 1	Guide to Using Vulnerability Naming Schemes SP 800-51 Rev. 1 (Final) Guide to Using Vulnerability Naming Schemes 2/25/2011 Status: Final	Final	2/25/2011
IR	7764	Status Report on the Second Round of the SHA-3 Cryptographic Hash Algorithm Competition IR 7764 (Final) Status Report on the Second Round of the SHA-3 Cryptographic Hash Algorithm Competition 2/23/2011 Status: Final	Final	2/23/2011
IR	7770	Security Considerations for Remote Electronic UOCAVA Voting IR 7770 (Final) Security Considerations for Remote Electronic UOCAVA Voting 2/21/2011 Status: Final	Final	2/21/2011
SP	800-125	Guide to Security for Full Virtualization Technologies SP 800-125 (Final) Guide to Security for Full Virtualization Technologies 1/28/2011 Status: Final	Final	1/28/2011
SP	800-119	Guidelines for the Secure Deployment of IPv6 SP 800-119 (Final) Guidelines for the Secure Deployment of IPv6 12/29/2010 Status: Final	Final	12/29/2010
IR	7502	The Common Configuration Scoring System (CCSS): Metrics for Software Security Configuration Vulnerabilities IR 7502 (Final) The Common Configuration Scoring System (CCSS): Metrics for Software Security Configuration Vulnerabilities 12/27/2010 Status: Final	Final	12/27/2010
SP	800-132	Recommendation for Password-Based Key Derivation: Part 1: Storage Applications SP 800-132 (Final) Recommendation for Password-Based Key Derivation: Part 1: Storage Applications 12/22/2010 Status: Final	Final	12/22/2010
SP	800-34 Rev. 1	Contingency Planning Guide for Federal Information Systems SP 800-34 Rev. 1 (Final) Contingency Planning Guide for Federal Information Systems 11/11/2010 Status: Final	Final	11/11/2010
IR	7773	An Application of Combinatorial Methods to Conformance Testing for Document Object Model Events IR 7773 (Final) An Application of Combinatorial Methods to Conformance Testing for Document Object Model Events 11/01/2010 Status: Final	Final	11/01/2010
SP	800-38A	Recommendation for Block Cipher Modes of Operation: Three Variants of Ciphertext Stealing for CBC Mode SP 800-38A (Final) Recommendation for Block Cipher Modes of Operation: Three Variants of Ciphertext Stealing for CBC Mode 10/21/2010 Status: Final	Final	10/21/2010
SP	800-142	Practical Combinatorial Testing SP 800-142 (Final) Practical Combinatorial Testing 10/07/2010 Status: Final	Final	10/07/2010
IR	7497	Security Architecture Design Process for Health Information Exchanges (HIEs) IR 7497 (Final) Security Architecture Design Process for Health Information Exchanges (HIEs) 9/30/2010 Status: Final	Final	9/30/2010
IR	7601	Framework for Emergency Response Officials (ERO): Authentication and Authorization Infrastructure IR 7601 (Final) Framework for Emergency Response Officials (ERO): Authentication and Authorization Infrastructure 8/31/2010 Status: Final	Final	8/31/2010
IR	7559	Forensics Web Services (FWS) IR 7559 (Final) Forensics Web Services (FWS) 6/30/2010 Status: Final	Final	6/30/2010
IR	7676	Maintaining and Using Key History on Personal Identity Verification (PIV) Cards IR 7676 (Final) Maintaining and Using Key History on Personal Identity Verification (PIV) Cards 6/18/2010 Status: Final	Final	6/18/2010
SP	800-22 Rev. 1	A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications SP 800-22 Rev. 1 (Final) A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications 4/30/2010 Status: Final	Final	4/30/2010
SP	800-122	Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) SP 800-122 (Final) Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) 4/06/2010 Status: Final	Final	4/06/2010
IR	7657	A Report on the Privilege (Access) Management Workshop IR 7657 (Final) A Report on the Privilege (Access) Management Workshop 3/30/2010 Status: Final	Final	3/30/2010
IR	7653	Computer Security Division 2009 Annual Report IR 7653 (Final) Computer Security Division 2009 Annual Report 3/23/2010 Status: Final	Final	3/23/2010
IR	7658	Guide to SIMfill Use and Development IR 7658 (Final) Guide to SIMfill Use and Development 2/24/2010 Status: Final	Final	2/24/2010
SP	800-38E	Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices SP 800-38E (Final) Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices 1/18/2010 Status: Final	Final	1/18/2010
IR	7609	Cryptographic Key Management Workshop Summary -- June 8-9, 2009 IR 7609 (Final) Cryptographic Key Management Workshop Summary -- June 8-9, 2009 1/08/2010 Status: Final	Final	1/08/2010
IR	7665	Proceedings of the Privilege Management Workshop, September 1-3, 2009 IR 7665 (Final) Proceedings of the Privilege Management Workshop, September 1-3, 2009 1/01/2010 Status: Final	Final	1/01/2010
IR	7617	Mobile Forensic Reference Materials: a Methodology and Reification IR 7617 (Final) Mobile Forensic Reference Materials: a Methodology and Reification 10/14/2009 Status: Final	Final	10/14/2009
IR	7581	System and Network Security Acronyms and Abbreviations IR 7581 (Final) System and Network Security Acronyms and Abbreviations 9/30/2009 Status: Final	Final	9/30/2009
SP	800-41 Rev. 1	Guidelines on Firewalls and Firewall Policy SP 800-41 Rev. 1 (Final) Guidelines on Firewalls and Firewall Policy 9/28/2009 Status: Final	Final	9/28/2009
IR	7620	Status Report on the First Round of the SHA-3 Cryptographic Hash Algorithm Competition IR 7620 (Final) Status Report on the First Round of the SHA-3 Cryptographic Hash Algorithm Competition 9/23/2009 Status: Final	Final	9/23/2009
SP	800-102	Recommendation for Digital Signature Timeliness SP 800-102 (Final) Recommendation for Digital Signature Timeliness 9/23/2009 Status: Final	Final	9/23/2009
IR	7611	Use of ISO/IEC 24727 IR 7611 (Final) Use of ISO/IEC 24727 8/14/2009 Status: Final	Final	8/14/2009
IR	7564	Directions in Security Metrics Research IR 7564 (Final) Directions in Security Metrics Research 4/30/2009 Status: Final	Final	4/30/2009
IR	7536	Computer Security Division 2008 Annual Report IR 7536 (Final) Computer Security Division 2008 Annual Report 3/16/2009 Status: Final	Final	3/16/2009
IR	7539	Symmetric Key Injection onto Smart Cards IR 7539 (Final) Symmetric Key Injection onto Smart Cards 12/22/2008 Status: Final	Final	12/22/2008
IR	7551	A Threat Analysis on UOCAVA Voting Systems IR 7551 (Final) A Threat Analysis on UOCAVA Voting Systems 12/19/2008 Status: Final	Final	12/19/2008
SP	800-115	Technical Guide to Information Security Testing and Assessment SP 800-115 (Final) Technical Guide to Information Security Testing and Assessment 9/30/2008 Status: Final	Final	9/30/2008
IR	7516	Forensic Filtering of Cell Phone Protocols IR 7516 (Final) Forensic Filtering of Cell Phone Protocols 8/27/2008 Status: Final	Final	8/27/2008
SP	800-60 Vol. 1 Rev. 1	Guide for Mapping Types of Information and Information Systems to Security Categories SP 800-60 Vol. 1 Rev. 1 (Final) Guide for Mapping Types of Information and Information Systems to Security Categories 8/01/2008 Status: Final	Final	8/01/2008
SP	800-60 Vol. 2 Rev. 1	Guide for Mapping Types of Information and Information Systems to Security Categories: Appendices SP 800-60 Vol. 2 Rev. 1 (Final) Guide for Mapping Types of Information and Information Systems to Security Categories: Appendices 8/01/2008 Status: Final	Final	8/01/2008
SP	800-123	Guide to General Server Security SP 800-123 (Final) Guide to General Server Security 7/25/2008 Status: Final	Final	7/25/2008
FIPS	198-1	The Keyed-Hash Message Authentication Code (HMAC) FIPS 198-1 (Final) The Keyed-Hash Message Authentication Code (HMAC) 7/16/2008 Status: Final	Final	7/16/2008
SP	800-55 Rev. 1	Performance Measurement Guide for Information Security SP 800-55 Rev. 1 (Final) Performance Measurement Guide for Information Security 7/16/2008 Status: Final	Final	7/16/2008
SP	800-113	Guide to SSL VPNs SP 800-113 (Final) Guide to SSL VPNs 7/01/2008 Status: Final	Final	7/01/2008
IR	7442	Computer Security Division 2007 Annual Report IR 7442 (Final) Computer Security Division 2007 Annual Report 4/01/2008 Status: Final	Final	4/01/2008
SP	800-28 Version 2	Guidelines on Active Content and Mobile Code SP 800-28 Version 2 (Final) Guidelines on Active Content and Mobile Code 3/07/2008 Status: Final	Final	3/07/2008
IR	7275 Rev. 3	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.4 IR 7275 Rev. 3 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.4 1/01/2008 Status: Final	Final	1/01/2008
IR	7452	Secure Biometric Match-on-Card Feasibility Report IR 7452 (Final) Secure Biometric Match-on-Card Feasibility Report 11/30/2007 Status: Final	Final	11/30/2007
SP	800-38D	Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC SP 800-38D (Final) Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC 11/28/2007 Status: Final	Final	11/28/2007
SP	800-111	Guide to Storage Encryption Technologies for End User Devices SP 800-111 (Final) Guide to Storage Encryption Technologies for End User Devices 11/15/2007 Status: Final	Final	11/15/2007
SP	800-44 Version 2	Guidelines on Securing Public Web Servers SP 800-44 Version 2 (Final) Guidelines on Securing Public Web Servers 10/09/2007 Status: Final	Final	10/09/2007
IR	7427	6th Annual PKI R&D Workshop "Applications-Driven PKI" Proceedings IR 7427 (Final) 6th Annual PKI R&D Workshop "Applications-Driven PKI" Proceedings 9/13/2007 Status: Final	Final	9/13/2007
IR	7435	The Common Vulnerability Scoring System (CVSS) and its Applicability to Federal Agency Systems IR 7435 (Final) The Common Vulnerability Scoring System (CVSS) and its Applicability to Federal Agency Systems 8/30/2007 Status: Final	Final	8/30/2007
SP	800-95	Guide to Secure Web Services SP 800-95 (Final) Guide to Secure Web Services 8/29/2007 Status: Final	Final	8/29/2007
SP	800-38C	Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality SP 800-38C (Final) Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality 7/20/2007 Status: Final	Final	7/20/2007
IR	7275 Rev. 2	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.3 IR 7275 Rev. 2 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.3 4/30/2007 Status: Final	Final	4/30/2007
SP	800-98	Guidelines for Securing Radio Frequency Identification (RFID) Systems SP 800-98 (Final) Guidelines for Securing Radio Frequency Identification (RFID) Systems 4/06/2007 Status: Final	Final	4/06/2007
IR	7387	Cell Phone Forensic Tools: an Overview and Analysis Update IR 7387 (Final) Cell Phone Forensic Tools: an Overview and Analysis Update 3/21/2007 Status: Final	Final	3/21/2007
IR	7399	Computer Security Division 2006 Annual Report IR 7399 (Final) Computer Security Division 2006 Annual Report 3/21/2007 Status: Final	Final	3/21/2007
SP	800-100	Information Security Handbook: A Guide for Managers SP 800-100 (Final) Information Security Handbook: A Guide for Managers 3/07/2007 Status: Final	Final	3/07/2007
SP	800-45 Version 2	Guidelines on Electronic Mail Security SP 800-45 Version 2 (Final) Guidelines on Electronic Mail Security 2/20/2007 Status: Final	Final	2/20/2007
SP	800-94	Guide to Intrusion Detection and Prevention Systems (IDPS) SP 800-94 (Final) Guide to Intrusion Detection and Prevention Systems (IDPS) 2/20/2007 Status: Final	Final	2/20/2007
SP	800-97	Establishing Wireless Robust Security Networks: A Guide to IEEE 802.11i SP 800-97 (Final) Establishing Wireless Robust Security Networks: A Guide to IEEE 802.11i 2/07/2007 Status: Final	Final	2/07/2007
IR	7359	Information Security Guide for Government Executives IR 7359 (Final) Information Security Guide for Government Executives 1/01/2007 Status: Final	Final	1/01/2007
IR	7358	Program Review for Information Security Management Assistance (PRISMA) IR 7358 (Final) Program Review for Information Security Management Assistance (PRISMA) 1/01/2007 Status: Final	Final	1/01/2007
SP	800-96	PIV Card to Reader Interoperability Guidelines SP 800-96 (Final) PIV Card to Reader Interoperability Guidelines 12/29/2006 Status: Final	Final	12/29/2006
SP	800-89	Recommendation for Obtaining Assurances for Digital Signature Applications SP 800-89 (Final) Recommendation for Obtaining Assurances for Digital Signature Applications 11/30/2006 Status: Final	Final	11/30/2006
IR	7275	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1 IR 7275 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1 11/01/2006 Status: Final	Final	11/01/2006
IR	7316	Assessment of Access Control Systems IR 7316 (Final) Assessment of Access Control Systems 9/29/2006 Status: Final	Final	9/29/2006
SP	800-84	Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities SP 800-84 (Final) Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities 9/21/2006 Status: Final	Final	9/21/2006
SP	800-92	Guide to Computer Security Log Management SP 800-92 (Final) Guide to Computer Security Log Management 9/13/2006 Status: Final	Final	9/13/2006
SP	800-86	Guide to Integrating Forensic Techniques into Incident Response SP 800-86 (Final) Guide to Integrating Forensic Techniques into Incident Response 9/01/2006 Status: Final	Final	9/01/2006
IR	7337	Personal Identity Verification Demonstration Summary IR 7337 (Final) Personal Identity Verification Demonstration Summary 8/31/2006 Status: Final	Final	8/31/2006
SP	800-85B	PIV Data Model Test Guidelines SP 800-85B (Final) PIV Data Model Test Guidelines 7/31/2006 Status: Final	Final	7/31/2006
IR	7313	5th Annual PKI R&D Workshop "Making PKI Easy to Use" Proceedings IR 7313 (Final) 5th Annual PKI R&D Workshop "Making PKI Easy to Use" Proceedings 7/18/2006 Status: Final	Final	7/18/2006
IR	7308	An Algorithm for Generating Very Large Covering Arrays IR 7308 (Final) An Algorithm for Generating Very Large Covering Arrays 3/20/2006 Status: Final	Final	3/20/2006
IR	7290	Fingerprint Identification and Mobile Handheld Devices: An Overview and Implementation IR 7290 (Final) Fingerprint Identification and Mobile Handheld Devices: An Overview and Implementation 3/01/2006 Status: Final	Final	3/01/2006
FIPS	200	Minimum Security Requirements for Federal Information and Information Systems FIPS 200 (Final) Minimum Security Requirements for Federal Information and Information Systems 3/01/2006 Status: Final	Final	3/01/2006
SP	800-18 Rev. 1	Guide for Developing Security Plans for Federal Information Systems SP 800-18 Rev. 1 (Final) Guide for Developing Security Plans for Federal Information Systems 2/24/2006 Status: Final	Final	2/24/2006
IR	7285	Computer Security Division 2005 Annual Report IR 7285 (Final) Computer Security Division 2005 Annual Report 2/01/2006 Status: Final	Final	2/01/2006
IR	7284	Personal Identity Verification Card Management Report IR 7284 (Final) Personal Identity Verification Card Management Report 1/06/2006 Status: Final	Final	1/06/2006
IR	7250	Cell Phone Forensic Tools: an Overview and Analysis IR 7250 (Final) Cell Phone Forensic Tools: an Overview and Analysis 10/19/2005 Status: Final	Final	10/19/2005
IR	7219	Computer Security Division 2004 Annual Report IR 7219 (Final) Computer Security Division 2004 Annual Report 8/01/2005 Status: Final	Final	8/01/2005
IR	7224	4th Annual PKI R&D Workshop "Multiple Paths to Trust" Proceedings IR 7224 (Final) 4th Annual PKI R&D Workshop "Multiple Paths to Trust" Proceedings 8/01/2005 Status: Final	Final	8/01/2005
IR	7206	Smart Cards and Mobile Device Authentication: an Overview and Implementation IR 7206 (Final) Smart Cards and Mobile Device Authentication: an Overview and Implementation 7/01/2005 Status: Final	Final	7/01/2005
IR	7200	Proximity Beacons and Mobile Device Authentication: an Overview and Implementation IR 7200 (Final) Proximity Beacons and Mobile Device Authentication: an Overview and Implementation 6/01/2005 Status: Final	Final	6/01/2005
SP	800-58	Security Considerations for Voice Over IP Systems SP 800-58 (Final) Security Considerations for Voice Over IP Systems 1/01/2005 Status: Final	Final	1/01/2005
IR	7188	Specification for the Extensible Configuration Checklist Description Format (XCCDF) IR 7188 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) 1/01/2005 Status: Final	Final	1/01/2005
SP	800-72	Guidelines on PDA Forensics SP 800-72 (Final) Guidelines on PDA Forensics 11/01/2004 Status: Final	Final	11/01/2004
IR	7122	3rd Annual PKI Research Workshop Proceedings IR 7122 (Final) 3rd Annual PKI Research Workshop Proceedings 9/08/2004 Status: Final	Final	9/08/2004
IR	7100	PDA Forensic Tools: an Overview and Analysis IR 7100 (Final) PDA Forensic Tools: an Overview and Analysis 8/01/2004 Status: Final	Final	8/01/2004
IR	7111	Computer Security Division 2003 Annual Report IR 7111 (Final) Computer Security Division 2003 Annual Report 4/30/2004 Status: Final	Final	4/30/2004
IR	6529A	Common Biometric Exchange Formats Framework (CBEFF) IR 6529A (Final) Common Biometric Exchange Formats Framework (CBEFF) 4/05/2004 Status: Final	Final	4/05/2004
IR	7085	2nd Annual PKI Research Workshop Proceedings IR 7085 (Final) 2nd Annual PKI Research Workshop Proceedings 4/01/2004 Status: Final	Final	4/01/2004
IR	7056	Card Technology Developments and Gap Analysis Interagency Report IR 7056 (Final) Card Technology Developments and Gap Analysis Interagency Report 3/01/2004 Status: Final	Final	3/01/2004
FIPS	199	Standards for Security Categorization of Federal Information and Information Systems FIPS 199 (Final) Standards for Security Categorization of Federal Information and Information Systems 2/01/2004 Status: Final	Final	2/01/2004
IR	7059	1st Annual PKI Research Workshop Proceedings IR 7059 (Final) 1st Annual PKI Research Workshop Proceedings 11/12/2003 Status: Final	Final	11/12/2003
SP	800-35	Guide to Information Technology Security Services SP 800-35 (Final) Guide to Information Technology Security Services 10/09/2003 Status: Final	Final	10/09/2003
SP	800-59	Guideline for Identifying an Information System as a National Security System SP 800-59 (Final) Guideline for Identifying an Information System as a National Security System 8/20/2003 Status: Final	Final	8/20/2003
IR	7046	A Framework for Multi-mode Authentication: Overview and Implementation Guide IR 7046 (Final) A Framework for Multi-mode Authentication: Overview and Implementation Guide 8/01/2003 Status: Final	Final	8/01/2003
IR	6887 E2003	Government Smart Card Interoperability Specification, Version 2.1 IR 6887 E2003 (Final) Government Smart Card Interoperability Specification, Version 2.1 7/16/2003 Status: Final	Final	7/16/2003
IR	7007	An Overview of Issues in Testing Intrusion Detection Systems IR 7007 (Final) An Overview of Issues in Testing Intrusion Detection Systems 7/11/2003 Status: Final	Final	7/11/2003
IR	7030	Picture Password: A Visual Login Technique for Mobile Devices IR 7030 (Final) Picture Password: A Visual Login Technique for Mobile Devices 7/01/2003 Status: Final	Final	7/01/2003
IR	6977	Vulnerabilities in Quantum Key Distribution Protocols IR 6977 (Final) Vulnerabilities in Quantum Key Distribution Protocols 5/01/2003 Status: Final	Final	5/01/2003
IR	6985	COTS Security Protection Profile - Operating Systems (CSPP-OS) (Worked Example Applying Guidance of NISTIR-6462, CSPP) Version 1.0 IR 6985 (Final) COTS Security Protection Profile - Operating Systems (CSPP-OS) (Worked Example Applying Guidance of NISTIR-6462, CSPP) Version 1.0 4/01/2003 Status: Final	Final	4/01/2003
IR	6981	Policy Expression and Enforcement for Handheld Devices IR 6981 (Final) Policy Expression and Enforcement for Handheld Devices 4/01/2003 Status: Final	Final	4/01/2003
FIPS	140-2	Security Requirements for Cryptographic Modules FIPS 140-2 (Final) Security Requirements for Cryptographic Modules 12/03/2002 Status: Final	Final	12/03/2002
SP	800-49	Federal S/MIME V3 Client Profile SP 800-49 (Final) Federal S/MIME V3 Client Profile 11/05/2002 Status: Final	Final	11/05/2002
IR	6859	IT Security for Industrial Control Systems IR 6859 (Final) IT Security for Industrial Control Systems 2/28/2002 Status: Final	Final	2/28/2002
SP	800-38A	Recommendation for Block Cipher Modes of Operation: Methods and Techniques SP 800-38A (Final) Recommendation for Block Cipher Modes of Operation: Methods and Techniques 12/01/2001 Status: Final	Final	12/01/2001
IR	6483	Randomness Testing of the Advanced Encryption Standard Finalist Candidates IR 6483 (Final) Randomness Testing of the Advanced Encryption Standard Finalist Candidates 4/01/2000 Status: Final	Final	4/01/2000
IR	6462	CSPP - Guidance for COTS Security Protection Profiles (Formerly: CS2 - Protection Profile Guidance for Near-Term COTS) Version 1.0 IR 6462 (Final) CSPP - Guidance for COTS Security Protection Profiles (Formerly: CS2 - Protection Profile Guidance for Near-Term COTS) Version 1.0 12/01/1999 Status: Final	Final	12/01/1999
IR	6416	Applying Mobile Agents to Intrusion Detection and Response IR 6416 (Final) Applying Mobile Agents to Intrusion Detection and Response 10/01/1999 Status: Final	Final	10/01/1999
IR	6390	Randomness Testing of the Advanced Encryption Standard Candidate Algorithms IR 6390 (Final) Randomness Testing of the Advanced Encryption Standard Candidate Algorithms 9/01/1999 Status: Final	Final	9/01/1999
IR	6192	A Revised Model for Role Based Access Control IR 6192 (Final) A Revised Model for Role Based Access Control 7/09/1998 Status: Final	Final	7/09/1998
IR	6068	Report on the TMACH Experiment IR 6068 (Final) Report on the TMACH Experiment 7/01/1997 Status: Final	Final	7/01/1997
IR	5810	The TMACH Experiment Phase 1 - Preliminary Developmental Evaluation IR 5810 (Final) The TMACH Experiment Phase 1 - Preliminary Developmental Evaluation 6/01/1996 Status: Final	Final	6/01/1996
IR	5820	Distributed Communication Methods and Role-Based Access Control for Use in Health Care Applications IR 5820 (Final) Distributed Communication Methods and Role-Based Access Control for Use in Health Care Applications 4/01/1996 Status: Final	Final	4/01/1996
IR	5788	Public Key Infrastructure Invitational Workshop September 28, 1995, MITRE Corporation, McLean, Virginia IR 5788 (Final) Public Key Infrastructure Invitational Workshop September 28, 1995, MITRE Corporation, McLean, Virginia 11/01/1995 Status: Final	Final	11/01/1995
IR	5731	Validated Products List 1995 no. 4: Programming Languages, Database Language SQL, Graphics, POSIX, Computer Security, Product Data - IGES, OSI IR 5731 (Final) Validated Products List 1995 no. 4: Programming Languages, Database Language SQL, Graphics, POSIX, Computer Security, Product Data - IGES, OSI 10/01/1995 Status: Final	Final	10/01/1995
IR	5540	Multi-Agency Certification and Accreditation (C&A) Process: A Worked Example IR 5540 (Final) Multi-Agency Certification and Accreditation (C&A) Process: A Worked Example 12/01/1994 Status: Final	Final	12/01/1994
IR	5570	An Assessment of the DOD Goal Security Architecture (DGSA) for Non-Military Use IR 5570 (Final) An Assessment of the DOD Goal Security Architecture (DGSA) for Non-Military Use 11/01/1994 Status: Final	Final	11/01/1994
IR	5495	Computer Security Training & Awareness Course Compendium IR 5495 (Final) Computer Security Training & Awareness Course Compendium 9/01/1994 Status: Final	Final	9/01/1994
IR	5472	A Head Start on Assurance: Proceedings of an Invitational Workshop on Information Technology (IT) Assurance and Trustworthiness, March 21-23, 1994 IR 5472 (Final) A Head Start on Assurance: Proceedings of an Invitational Workshop on Information Technology (IT) Assurance and Trustworthiness, March 21-23, 1994 8/01/1994 Status: Final	Final	8/01/1994
IR	5590	Proceedings Report of the International Invitation Workshop on Developmental Assurance IR 5590 (Final) Proceedings Report of the International Invitation Workshop on Developmental Assurance 6/01/1994 Status: Final	Final	6/01/1994
IR	5468	Report of the NIST Workshop on Key Escrow Encryption IR 5468 (Final) Report of the NIST Workshop on Key Escrow Encryption 6/01/1994 Status: Final	Final	6/01/1994
IR	5424	A Study of Federal Agency Needs for Information Technology Security IR 5424 (Final) A Study of Federal Agency Needs for Information Technology Security 5/01/1994 Status: Final	Final	5/01/1994
IR	5395	Preliminary Functional Specifications of a Prototype Electronic Research Notebook for NIST IR 5395 (Final) Preliminary Functional Specifications of a Prototype Electronic Research Notebook for NIST 4/01/1994 Status: Final	Final	4/01/1994
IR	5386	Proceedings of the Workshop of the Federal Criteria for Information Technology Security IR 5386 (Final) Proceedings of the Workshop of the Federal Criteria for Information Technology Security 3/01/1994 Status: Final	Final	3/01/1994
IR	5325	Conformance Assessment of Transport Layer Security Implementations IR 5325 (Final) Conformance Assessment of Transport Layer Security Implementations 12/01/1993 Status: Final	Final	12/01/1993
IR	5308	General Procedures for Registering Computer Security Objects IR 5308 (Final) General Procedures for Registering Computer Security Objects 12/01/1993 Status: Final	Final	12/01/1993
IR	5234	Report of the NIST Workshop on Digital Signature Certificate Management, December 10-11, 1992 IR 5234 (Final) Report of the NIST Workshop on Digital Signature Certificate Management, December 10-11, 1992 10/01/1993 Status: Final	Final	10/01/1993
IR	5283	Security of SQL-Based Implementations of Product Data Exchange Using STEP IR 5283 (Final) Security of SQL-Based Implementations of Product Data Exchange Using STEP 10/01/1993 Status: Final	Final	10/01/1993
IR	5247	Workshop on Security Procedures for the Interchange of Electronic Documents: Selected Papers and Results IR 5247 (Final) Workshop on Security Procedures for the Interchange of Electronic Documents: Selected Papers and Results 8/01/1993 Status: Final	Final	8/01/1993
IR	5232	Report of the NSF/NIST Workshop on NSFNET/NREN Security, July 6-7, 1992 IR 5232 (Final) Report of the NSF/NIST Workshop on NSFNET/NREN Security, July 6-7, 1992 5/01/1993 Status: Final	Final	5/01/1993
IR	5153	Minimum Security Requirements for Multi-User Operating Systems IR 5153 (Final) Minimum Security Requirements for Multi-User Operating Systems 3/01/1993 Status: Final	Final	3/01/1993
IR	4983	A Study of OSI Key Management IR 4983 (Final) A Study of OSI Key Management 11/01/1992 Status: Final	Final	11/01/1992
IR	4976	Assessing Federal and Commercial Information Security Needs IR 4976 (Final) Assessing Federal and Commercial Information Security Needs 11/01/1992 Status: Final	Final	11/01/1992
IR	4939	Threat Assessment of Malicious Code and External Attacks IR 4939 (Final) Threat Assessment of Malicious Code and External Attacks 10/01/1992 Status: Final	Final	10/01/1992
IR	4934	Protocol Implementation Conformance Statement (PICS) Proforma for the SDNS Security Protocol at Layer 4 (SP4) IR 4934 (Final) Protocol Implementation Conformance Statement (PICS) Proforma for the SDNS Security Protocol at Layer 4 (SP4) 10/01/1992 Status: Final	Final	10/01/1992
IR	4933	Computer Security Bulletin Board System: User's Guide IR 4933 (Final) Computer Security Bulletin Board System: User's Guide 9/01/1992 Status: Final	Final	9/01/1992
IR	4846	Computer Security Training & Awareness Course Compendium IR 4846 (Final) Computer Security Training & Awareness Course Compendium 5/01/1992 Status: Final	Final	5/01/1992
IR	4816	PBX Administrator’s Security Standards IR 4816 (Final) PBX Administrator’s Security Standards 4/01/1992 Status: Final	Final	4/01/1992
IR	4792	A Formal Description of the SDNS Security Protocol at Layer 4 (SP4) IR 4792 (Final) A Formal Description of the SDNS Security Protocol at Layer 4 (SP4) 3/01/1992 Status: Final	Final	3/01/1992
IR	4774	A Review of U.S. and European Security Evaluation Criteria IR 4774 (Final) A Review of U.S. and European Security Evaluation Criteria 3/01/1992 Status: Final	Final	3/01/1992
IR	4781	Privacy Protection in the United States: A 1991 Survey of Laws and Regulations Affecting Privacy in the Public and Private Sector Including a List of All Relevant Officials IR 4781 (Final) Privacy Protection in the United States: A 1991 Survey of Laws and Regulations Affecting Privacy in the Public and Private Sector Including a List of All Relevant Officials 2/01/1992 Status: Final	Final	2/01/1992
IR	4734	Foundations of a Security Policy for Use of the National Research and Educational Network IR 4734 (Final) Foundations of a Security Policy for Use of the National Research and Educational Network 2/01/1992 Status: Final	Final	2/01/1992
IR	4749	Sample Statement of Work for Federal Computer Security Services: For use In-House or Contracting Out IR 4749 (Final) Sample Statement of Work for Federal Computer Security Services: For use In-House or Contracting Out 12/01/1991 Status: Final	Final	12/01/1991
IR	4659	Glos

Current Publications

Search Results