Search | CSRC

You are viewing this page in an unauthorized frame window.

This is a potential security issue, you are being redirected to https://csrc.nist.gov.

An official website of the United States government

Here’s how you know

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

CSRC MENU

Projects
Publications Expand or Collapse

Drafts for Public Comment

All Public Drafts

Final Pubs

FIPS (standards)

Special Publications (SPs)

IR (interagency/internal reports)

CSWP (cybersecurity white papers)

ITL Bulletins

Project Descriptions

Journal Articles

Conference Papers

Books
Topics Expand or Collapse

Security & Privacy

Applications

Technologies

Sectors

Laws & Regulations

Activities & Products
News & Updates
Events
Glossary
About CSRC Expand or Collapse
Computer Security Division
Applied Cybersecurity Division
Contact Us

Information Technology Laboratory

Computer Security Resource Center

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs

Final: Current list of all published NIST cybersecurity documents. Does not include "Withdrawn" documents. Includes FIPS, Special Publications, NISTIRs, ITL Bulletins, and NIST Cybersecurity White Papers.

Public Drafts: Current list of all draft NIST cybersecurity documents--they are typically posted for public comment. "Current" public drafts are the latest draft versions that have not yet been published as "Final." FIPS: Current Federal Information Processing Standard Publications (FIPS). Includes current (Final and Draft) FIPS.

SP 800 Series: Current NIST Special Publication (SP) 800 series publications, which focus on Computer/Information Security. Includes current (Final and Draft) SP 800 pubs.

All SP Series: Current NIST Special Publications (SP), including SP 800 (Computer/Information Security) and SP 1800 (Cybersecurity Practice Guides) pubs. Also includes SP 500 (Computer Systems Technology) pubs related to cybersecurity and privacy. Includes current (Final and Draft) NIST Special Publications.

NISTIRs: Current list of NIST Interagency or Internal Reports (NISTIR) related to cybersecurity and privacy. Includes current (Final and Draft) NISTIRs.

ITL Bulletins: Current list of NIST Information Technology Laboratory (ITL) Bulletins. White Papers: Consists of NIST Cybersecurity White Papers; NCCoE Project Descriptions, Building Blocks and Use Cases; and other NIST-authored papers that are not part of a formal series. Includes current (Final and Draft) papers.

Journal Articles: NIST-authored articles published in external journals and in the NIST Journal of Research (JRES).

Conference Papers: NIST-authored conference papers related to cybersecurity and privacy.

Books: NIST-authored books, book sections, and encyclopedia entries related to cybersecurity and privacy.

Search Search publication record data
(not a full text search)

Sort By

Results View

Items Per Page

Date

Status

Final
Public Draft
Withdrawn

Series

FIPS
SP
IR
CSWP
TN
VTS
AI
GCR
Project Description
ITL Bulletin
Journal Article
Conference Paper
Book
Book Section
Other

Topics

Security and Privacy

cryptography
cybersecurity supply chain risk management
general security & privacy
identity & access management
privacy
- personally identifiable information
- privacy engineering
risk management
security & behavior
security measurement
security programs & operations
systems security engineering
- trustworthiness
zero trust

Technologies

artificial intelligence
big data
biometrics
blockchain
cloud & virtualization
combinatorial testing
complexity
hardware
mobile
networks
quantum information science
servers
smart cards
software & firmware
storage

Applications

communications & wireless
cyber-physical systems
cybersecurity education
cybersecurity framework
cybersecurity workforce
enterprise
forensics
Internet of Things
mathematics
operational technology
positioning navigation & timing
small & medium business
smart grid
telework
voting

Laws and Regulations

executive documents
laws
regulations
- Controlled Unclassified Information
- Federal Acquisition Regulation

Activities and Products

annual reports
conferences & workshops
groups
quick-start guides
reference materials
standards development

Sectors

aerospace
energy
financial services
healthcare
hospitality
manufacturing
public safety
retail
telecommunications
transportation

Match ANY: Match ALL:

Control Family (800-53)

Control Families

AC - Access Control
AT - Awareness and Training
AU - Audit and Accountability
CA - Assessment, Authorization and Monitoring
CM - Configuration Management
CP - Contingency Planning
IA - Identification and Authentication
IR - Incident Response
MA - Maintenance
MP - Media Protection
PE - Physical and Environmental Protection
PL - Planning
PM - Program Management
PS - Personnel Security
PT - PII Processing and Transparency
RA - Risk Assessment
SA - System and Services Acquisition
SC - System and Communications Protection
SI - System and Information Integrity
SR - Supply Chain Risk Management

Match ANY: Match ALL:

Please fix the following:

Final: Published documents.

Public Draft: Documents have been posted as Public Drafts, typically with a public comment period.

Withdrawn: Documents that have been withdrawn, and are no longer current. This includes:
- Final publications that have been withdrawn;
- Public drafts that have been obsoleted by a subsequent draft or final publication;
- Public drafts that have been retired—further development was discontinued.

Search Results

Search Search publication record data
(not a full text search)

Sort By

Results View

Items Per Page

Advanced Search

Date

Status

Final
Public Draft
Withdrawn

Series

FIPS
SP
IR
CSWP
TN
VTS
AI
GCR
Project Description
ITL Bulletin
Journal Article
Conference Paper
Book
Book Section
Other

Topics

Security and Privacy

cryptography
cybersecurity supply chain risk management
general security & privacy
identity & access management
privacy
- personally identifiable information
- privacy engineering
risk management
security & behavior
security measurement
security programs & operations
systems security engineering
- trustworthiness
zero trust

Technologies

artificial intelligence
big data
biometrics
blockchain
cloud & virtualization
combinatorial testing
complexity
hardware
mobile
networks
quantum information science
servers
smart cards
software & firmware
storage

Applications

communications & wireless
cyber-physical systems
cybersecurity education
cybersecurity framework
cybersecurity workforce
enterprise
forensics
Internet of Things
mathematics
operational technology
positioning navigation & timing
small & medium business
smart grid
telework
voting

Laws and Regulations

executive documents
laws
regulations
- Controlled Unclassified Information
- Federal Acquisition Regulation

Activities and Products

annual reports
conferences & workshops
groups
quick-start guides
reference materials
standards development

Sectors

aerospace
energy
financial services
healthcare
hospitality
manufacturing
public safety
retail
telecommunications
transportation

Match ANY: Match ALL:

Control Family (800-53)

Control Families

AC - Access Control
AT - Awareness and Training
AU - Audit and Accountability
CA - Assessment, Authorization and Monitoring
CM - Configuration Management
CP - Contingency Planning
IA - Identification and Authentication
IR - Incident Response
MA - Maintenance
MP - Media Protection
PE - Physical and Environmental Protection
PL - Planning
PM - Program Management
PS - Personnel Security
PT - PII Processing and Transparency
RA - Risk Assessment
SA - System and Services Acquisition
SC - System and Communications Protection
SI - System and Information Integrity
SR - Supply Chain Risk Management

Match ANY: Match ALL:

Please fix the following:

Final: Published documents.

Public Draft: Documents have been posted as Public Drafts, typically with a public comment period.

Showing 5 matching records.

Series	Number	Title Publications	Status	Release Date
SP	800-204D	Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines SP 800-204D (Final) Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines 2/12/2024 Status: Final	Final	2/12/2024
SP	800-204C	Implementation of DevSecOps for a Microservices-based Application with Service Mesh SP 800-204C (Final) Implementation of DevSecOps for a Microservices-based Application with Service Mesh 3/08/2022 Status: Final	Final	3/08/2022
SP	800-204B	Attribute-based Access Control for Microservices-based Applications using a Service Mesh SP 800-204B (Final) Attribute-based Access Control for Microservices-based Applications using a Service Mesh 8/06/2021 Status: Final	Final	8/06/2021
SP	800-204A	Building Secure Microservices-based Applications Using Service-Mesh Architecture SP 800-204A (Final) Building Secure Microservices-based Applications Using Service-Mesh Architecture 5/27/2020 Status: Final	Final	5/27/2020
SP	800-204	Security Strategies for Microservices-based Application Systems SP 800-204 (Final) Security Strategies for Microservices-based Application Systems 8/07/2019 Status: Final	Final	8/07/2019

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs

HEADQUARTERS
100 Bureau Drive
Gaithersburg, MD 20899

(link is external)
(link is external)
(link is external)
(link is external)
(link is external)
(link is external)

Want updates about CSRC and our publications? Subscribe

Send inquiries to [email protected]

Site Privacy
Accessibility
Privacy Program
Copyrights
Vulnerability Disclosure
No Fear Act Policy
FOIA
Environmental Policy
Scientific Integrity
Information Quality Standards
Commerce.gov
Science.gov
USA.gov
Vote.gov