Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results

Showing 1 through 25 of 47 matching records.

1 | 2 > >>

Series	Number	Title Publications	Status	Release Date	Relevance*
IR	8286 Rev. 1	Integrating Cybersecurity and Enterprise Risk Management (ERM) IR 8286 Rev. 1 (Initial Public Draft) Integrating Cybersecurity and Enterprise Risk Management (ERM) 2/26/2025 Status: Draft	Draft	2/26/2025	100%
IR	8286A Rev. 1	Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management IR 8286A Rev. 1 (Initial Public Draft) Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management 2/26/2025 Status: Draft	Draft	2/26/2025	100%
IR	8286C Rev. 1	Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight IR 8286C Rev. 1 (Initial Public Draft) Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight 2/26/2025 Status: Draft	Draft	2/26/2025	100%
CSWP	32	NIST Cybersecurity Framework 2.0: A Guide to Creating Community Profiles CSWP 32 (Initial Public Draft) NIST Cybersecurity Framework 2.0: A Guide to Creating Community Profiles 2/26/2024 Status: Draft	Draft	2/26/2024	100%
SP	800-81 Rev. 3	Secure Domain Name System (DNS) Deployment Guide SP 800-81 Rev. 3 (Initial Public Draft) Secure Domain Name System (DNS) Deployment Guide 4/10/2025 Status: Draft	Draft	4/10/2025	94%
SP	1308	NIST Cybersecurity Framework 2.0: Cybersecurity, Enterprise Risk Management, and Workforce Management Quick Start Guide SP 1308 (Initial Public Draft) NIST Cybersecurity Framework 2.0: Cybersecurity, Enterprise Risk Management, and Workforce Management Quick Start Guide 3/12/2025 Status: Draft	Draft	3/12/2025	94%
SP	800-46 Rev. 3	PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security SP 800-46 Rev. 3 (Initial Preliminary Draft) PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security 9/10/2020 Status: Draft	Draft	9/10/2020	94%
SP	800-100 Rev. 1	PRE-DRAFT Call for Comments \| Information Security Handbook: A Guide for Managers SP 800-100 Rev. 1 (Initial Preliminary Draft) PRE-DRAFT Call for Comments \| Information Security Handbook: A Guide for Managers 1/09/2024 Status: Draft	Draft	1/09/2024	87%
SP	1800-37	Addressing Visibility Challenges with TLS 1.3 within the Enterprise SP 1800-37 (2nd Preliminary Draft) Addressing Visibility Challenges with TLS 1.3 within the Enterprise 1/30/2024 Status: Draft	Draft	1/30/2024	74%
IR	8496	Data Classification Concepts and Considerations for Improving Data Protection IR 8496 (Initial Public Draft) Data Classification Concepts and Considerations for Improving Data Protection 11/15/2023 Status: Draft	Draft	11/15/2023	74%
SP	1800-39	Implementing Data Classification Practices SP 1800-39 (Initial Preliminary Draft) Implementing Data Classification Practices 4/25/2023 Status: Draft	Draft	4/25/2023	74%
IR	8286D	Using Business Impact Analysis to Inform Risk Prioritization and Response IR 8286D (Final) Using Business Impact Analysis to Inform Risk Prioritization and Response 2/26/2025 Status: Final	Final	2/26/2025	70%
SP	800-221	Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio SP 800-221 (Final) Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio 11/17/2023 Status: Final	Final	11/17/2023	70%
SP	800-221A	Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio SP 800-221A (Final) Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio 11/17/2023 Status: Final	Final	11/17/2023	70%
IR	8286	Integrating Cybersecurity and Enterprise Risk Management (ERM) IR 8286 (Final) Integrating Cybersecurity and Enterprise Risk Management (ERM) 10/13/2020 Status: Final	Final	10/13/2020	70%
IR	8286B	Prioritizing Cybersecurity Risk for Enterprise Risk Management IR 8286B (Final) Prioritizing Cybersecurity Risk for Enterprise Risk Management 2/26/2025 Status: Final	Final	2/26/2025	57%
SP	1303	NIST Cybersecurity Framework 2.0: Enterprise Risk Management Quick-Start Guide SP 1303 (Final) NIST Cybersecurity Framework 2.0: Enterprise Risk Management Quick-Start Guide 10/21/2024 Status: Final	Final	10/21/2024	57%
SP	1314	NIST Risk Management Framework (RMF) Small Enterprise Quick Start Guide: A Comprehensive, Flexible, Risk-Based Approach to Managing Information Security and Privacy Risk SP 1314 (Final) NIST Risk Management Framework (RMF) Small Enterprise Quick Start Guide: A Comprehensive, Flexible, Risk-Based Approach to Managing Information Security and Privacy Risk 7/23/2024 Status: Final	Final	7/23/2024	57%
IR	8286C	Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight IR 8286C (Final) Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight 3/06/2024 Status: Final	Final	3/06/2024	57%
Other	2309.00724	From Compliance to Impact: Tracing the Transformation of an Organizational Security Awareness Program Other 2309.00724 (Final) From Compliance to Impact: Tracing the Transformation of an Organizational Security Awareness Program 9/14/2023 Status: Final	Final	9/14/2023	57%
IR	8420B	The Federal Cybersecurity Awareness Workforce: Professional Backgrounds, Knowledge, Skills, and Development Activities IR 8420B (Final) The Federal Cybersecurity Awareness Workforce: Professional Backgrounds, Knowledge, Skills, and Development Activities 3/25/2022 Status: Final	Final	3/25/2022	57%
IR	8286A	Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management IR 8286A (Final) Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management 11/12/2021 Status: Final	Final	11/12/2021	57%
SP	1271	Getting Started with the NIST Cybersecurity Framework: A Quick Start Guide SP 1271 (Final) Getting Started with the NIST Cybersecurity Framework: A Quick Start Guide 8/06/2021 Status: Final	Final	8/06/2021	57%
SP	1800-21	Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) SP 1800-21 (Final) Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) 9/15/2020 Status: Final	Final	9/15/2020	57%
Journal Article		Categorizing Human Phishing Detection Difficulty: A Phish Scale Journal Article (Final) Categorizing Human Phishing Detection Difficulty: A Phish Scale 9/14/2020 Status: Final	Final	9/14/2020	57%

1 2 next > last >>

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs