Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( Dot gov ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results

Showing 1 through 25 of 27 matching records.

1 | 2 > >>

Series	Number	Title Publications	Status	Release Date	Relevance*
NISTIR	8286C	Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight NISTIR 8286C (Draft) Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight 1/26/2022 Status: Draft Download: NISTIR 8286C (Draft) (DOI); Local Download; See NISTIR 8286 Supplemental Material	Draft	1/26/2022	100%
SP	800-46 Rev. 3	PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security SP 800-46 Rev. 3 (Draft) PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security 9/10/2020 Status: Draft Download: None available	Draft	9/10/2020	93%
SP	800-219	Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) SP 800-219 (Draft) Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) 2/17/2022 Status: Draft Download: SP 800-219 (Draft) (DOI); Local Download; Comment template; mSCP GitHub site; mSCP project documentation	Draft	2/17/2022	79%
SP	1800-22	Mobile Device Security: Bring Your Own Device (BYOD) SP 1800-22 (Draft) Mobile Device Security: Bring Your Own Device (BYOD) 3/18/2021 Status: Draft Download: Draft SP 1800-22; Project homepage	Draft	3/18/2021	79%
SP	800-155	BIOS Integrity Measurement Guidelines SP 800-155 (Draft) BIOS Integrity Measurement Guidelines 12/08/2011 Status: Draft Download: Draft SP 800-155	Draft	12/08/2011	79%
NISTIR	8286	Integrating Cybersecurity and Enterprise Risk Management (ERM) NISTIR 8286 Integrating Cybersecurity and Enterprise Risk Management (ERM) 10/13/2020 Status: Final Download: NISTIR 8286 (DOI); Local Download; Risk Register Schema (JSON); Risk Detail Record Schema (JSON); Risk Detail Record Example (JSON); OLIR Mapping NISTIR 8286 to Cybersecurity Framework v1.1; Playbook: Enterprise Risk Management for the U.S. Federal Government; Association for Federal Enterprise Risk Management (AFERM); RMA - GCOR Conference	Final	10/13/2020	76%
SP	800-124 Rev. 2	Guidelines for Managing the Security of Mobile Devices in the Enterprise SP 800-124 Rev. 2 (Draft) Guidelines for Managing the Security of Mobile Devices in the Enterprise 3/24/2020 Status: Draft Download: SP 800-124 Rev. 2 (Draft) (DOI); Local Download	Draft	3/24/2020	68%
NISTIR	8286B	Prioritizing Cybersecurity Risk for Enterprise Risk Management NISTIR 8286B Prioritizing Cybersecurity Risk for Enterprise Risk Management 2/10/2022 Status: Final Download: NISTIR 8286B (DOI); Local Download; See NISTIR 8286 Supplemental Material	Final	2/10/2022	62%
NISTIR	8286A	Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management NISTIR 8286A Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management 11/12/2021 Status: Final Download: NISTIR 8286A (DOI); Local Download; Risk Register Schema (JSON); Risk Detail Record Schema (JSON); Risk Detail Record Example (JSON)	Final	11/12/2021	62%
SP	1271	Getting Started with the NIST Cybersecurity Framework: A Quick Start Guide SP 1271 Getting Started with the NIST Cybersecurity Framework: A Quick Start Guide 8/06/2021 Status: Final Download: SP 1271 (DOI); Local Download; Translations of NIST SP 1271	Final	8/06/2021	62%
SP	1800-21	Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) SP 1800-21 Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) 9/15/2020 Status: Final Download: SP 1800-21 (DOI); Local Download; SP 1800-21 files; Project homepage	Final	9/15/2020	62%
ITL Bulletin		NIST Privacy Framework: An Overview ITL Bulletin NIST Privacy Framework: An Overview 6/24/2020 Status: Final Download: June 2020 ITL Bulletin	Final	6/24/2020	62%
White Paper	NIST CSWP 10	NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management, Version 1.0 White Paper NIST CSWP 10 NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management, Version 1.0 1/16/2020 Status: Final Download: White Paper (DOI); Local Download; Privacy Framework and Core; Translations of the PF 1.0	Final	1/16/2020	62%
SP	1800-11	Data Integrity: Recovering from Ransomware and Other Destructive Events SP 1800-11 Data Integrity: Recovering from Ransomware and Other Destructive Events 9/22/2020 Status: Final Download: SP 1800-11 (DOI); Local Download; SP 1800-11 files; Project homepage	Final	9/22/2020	55%
SP	800-207	Zero Trust Architecture SP 800-207 Zero Trust Architecture 8/11/2020 Status: Final Download: SP 800-207 (DOI); Local Download; ZTA project at NCCoE; Japanese translation (unofficial--from PwC Consulting LLC for IPA, Japan)	Final	8/11/2020	55%
ITL Bulletin		Security for Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Solutions ITL Bulletin Security for Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Solutions 3/18/2020 Status: Final Download: March 2020 ITL Bulletin	Final	3/18/2020	55%
Conference Proceedings		Automatic Recognition of Advanced Persistent Threat Tactics for Enterprise Security Conference Proceedings Automatic Recognition of Advanced Persistent Threat Tactics for Enterprise Security 3/16/2020 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	3/16/2020	55%
NISTIR	7788	Security Risk Analysis of Enterprise Networks Using Probabilistic Attack Graphs NISTIR 7788 Security Risk Analysis of Enterprise Networks Using Probabilistic Attack Graphs 8/01/2011 Status: Final Download: NISTIR 7788 (DOI); Local Download	Final	8/01/2011	55%
White Paper	NIST CSWP 20	Planning for a Zero Trust Architecture: A Planning Guide for Federal Administrators White Paper NIST CSWP 20 Planning for a Zero Trust Architecture: A Planning Guide for Federal Administrators 5/06/2022 Status: Final Download: White Paper (DOI); Local Download	Final	5/06/2022	48%
SP	1800-31	Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways SP 1800-31 Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways 4/06/2022 Status: Final Download: SP 1800-31 (DOI); Local Download; Project homepage	Final	4/06/2022	41%
SP	800-40 Rev. 4	Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology SP 800-40 Rev. 4 Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology 4/06/2022 Status: Final Download: SP 800-40 Rev. 4 (DOI); Local Download	Final	4/06/2022	41%
NISTIR	8170	Approaches for Federal Agencies to Use the Cybersecurity Framework NISTIR 8170 Approaches for Federal Agencies to Use the Cybersecurity Framework 8/17/2021 Status: Final Download: NISTIR 8170 (DOI); Local Download; Cybersecurity Framework homepage	Final	8/17/2021	41%
White Paper		[Project Description] Addressing Visibility Challenges with TLS 1.3 White Paper [Project Description] Addressing Visibility Challenges with TLS 1.3 5/26/2021 Status: Final Download: Project Description; Project homepage	Final	5/26/2021	41%
SP	800-39	Managing Information Security Risk: Organization, Mission, and Information System View SP 800-39 Managing Information Security Risk: Organization, Mission, and Information System View 3/01/2011 Status: Final Download: SP 800-39 (DOI); Local Download; Press Release	Final	3/01/2011	41%
SP	800-209	Security Guidelines for Storage Infrastructure SP 800-209 Security Guidelines for Storage Infrastructure 10/26/2020 Status: Final Download: SP 800-209 (DOI); Local Download	Final	10/26/2020	34%

1 2 next > last >>

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Current Publications

Search Results

Current Publications