Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results

Showing 1 through 25 of 49 matching records.

1 | 2 > >>

Series	Number	Title Publications	Status	Release Date	Relevance*
SP	1331	Quick-Start Guide for Using CSF 2.0 to Improve Management of Emerging Cybersecurity Risks SP 1331 (Initial Public Draft) Quick-Start Guide for Using CSF 2.0 to Improve Management of Emerging Cybersecurity Risks 8/21/2025 Status: Draft	Draft	8/21/2025	100%
CSWP	32	NIST Cybersecurity Framework 2.0: A Guide to Creating Community Profiles CSWP 32 (Initial Public Draft) NIST Cybersecurity Framework 2.0: A Guide to Creating Community Profiles 2/26/2024 Status: Draft	Draft	2/26/2024	100%
SP	1308	NIST Cybersecurity Framework 2.0: Cybersecurity, Enterprise Risk Management, and Workforce Management Quick-Start Guide SP 1308 (2nd Public Draft) NIST Cybersecurity Framework 2.0: Cybersecurity, Enterprise Risk Management, and Workforce Management Quick-Start Guide 11/24/2025 Status: Draft	Draft	11/24/2025	94%
SP	800-81 Rev. 3	Secure Domain Name System (DNS) Deployment Guide SP 800-81 Rev. 3 (Initial Public Draft) Secure Domain Name System (DNS) Deployment Guide 4/10/2025 Status: Draft	Draft	4/10/2025	94%
SP	800-46 Rev. 3	PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security SP 800-46 Rev. 3 (Initial Preliminary Draft) PRE-DRAFT Call for Comments: Guide to Enterprise Telework Security 9/10/2020 Status: Draft	Draft	9/10/2020	94%
SP	800-100 Rev. 1	PRE-DRAFT Call for Comments \| Information Security Handbook: A Guide for Managers SP 800-100 Rev. 1 (Initial Preliminary Draft) PRE-DRAFT Call for Comments \| Information Security Handbook: A Guide for Managers 1/09/2024 Status: Draft	Draft	1/09/2024	87%
SP	1800-39	Implementing Data Classification Practices SP 1800-39 (Initial Preliminary Draft) Implementing Data Classification Practices 4/25/2023 Status: Draft	Draft	4/25/2023	75%
SP	1800-44	Secure Software Development, Security, and Operations (DevSecOps) Practices SP 1800-44 (Initial Public Draft) Secure Software Development, Security, and Operations (DevSecOps) Practices 7/30/2025 Status: Draft	Draft	7/30/2025	72%
IR	8286D	Using Business Impact Analysis to Inform Risk Prioritization and Response IR 8286D (Final) Using Business Impact Analysis to Inform Risk Prioritization and Response 2/26/2025 Status: Final	Final	2/26/2025	69%
SP	800-221	Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio SP 800-221 (Final) Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio 11/17/2023 Status: Final	Final	11/17/2023	69%
SP	800-221A	Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio SP 800-221A (Final) Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio 11/17/2023 Status: Final	Final	11/17/2023	69%
IR	8286 Rev. 1	Integrating Cybersecurity and Enterprise Risk Management (ERM) IR 8286 Rev. 1 (Final) Integrating Cybersecurity and Enterprise Risk Management (ERM) 12/18/2025 Status: Final	Final	12/18/2025	56%
IR	8286C Rev. 1	Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight IR 8286C Rev. 1 (Final) Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight 12/18/2025 Status: Final	Final	12/18/2025	56%
IR	8286A Rev. 1	Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management IR 8286A Rev. 1 (Final) Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management 12/18/2025 Status: Final	Final	12/18/2025	56%
Conference Paper		Combinatorial Methods for Enhancing the Resilience of Production Facilities Conference Paper (Final) Combinatorial Methods for Enhancing the Resilience of Production Facilities 4/16/2025 Status: Final	Final	4/16/2025	56%
IR	8286B	Prioritizing Cybersecurity Risk for Enterprise Risk Management IR 8286B (Final) Prioritizing Cybersecurity Risk for Enterprise Risk Management 2/26/2025 Status: Final	Final	2/26/2025	56%
SP	1303	NIST Cybersecurity Framework 2.0: Enterprise Risk Management Quick-Start Guide SP 1303 (Final) NIST Cybersecurity Framework 2.0: Enterprise Risk Management Quick-Start Guide 10/21/2024 Status: Final	Final	10/21/2024	56%
SP	1314	NIST Risk Management Framework (RMF) Small Enterprise Quick Start Guide: A Comprehensive, Flexible, Risk-Based Approach to Managing Information Security and Privacy Risk SP 1314 (Final) NIST Risk Management Framework (RMF) Small Enterprise Quick Start Guide: A Comprehensive, Flexible, Risk-Based Approach to Managing Information Security and Privacy Risk 7/23/2024 Status: Final	Final	7/23/2024	56%
Other	2309.00724	From Compliance to Impact: Tracing the Transformation of an Organizational Security Awareness Program Other 2309.00724 (Final) From Compliance to Impact: Tracing the Transformation of an Organizational Security Awareness Program 9/14/2023 Status: Final	Final	9/14/2023	56%
IR	8420B	The Federal Cybersecurity Awareness Workforce: Professional Backgrounds, Knowledge, Skills, and Development Activities IR 8420B (Final) The Federal Cybersecurity Awareness Workforce: Professional Backgrounds, Knowledge, Skills, and Development Activities 3/25/2022 Status: Final	Final	3/25/2022	56%
SP	1271	Getting Started with the NIST Cybersecurity Framework: A Quick Start Guide SP 1271 (Final) Getting Started with the NIST Cybersecurity Framework: A Quick Start Guide 8/06/2021 Status: Final	Final	8/06/2021	56%
SP	1800-21	Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) SP 1800-21 (Final) Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) 9/15/2020 Status: Final	Final	9/15/2020	56%
Journal Article		Categorizing Human Phishing Detection Difficulty: A Phish Scale Journal Article (Final) Categorizing Human Phishing Detection Difficulty: A Phish Scale 9/14/2020 Status: Final	Final	9/14/2020	56%
ITL Bulletin		NIST Privacy Framework: An Overview ITL Bulletin (Final) NIST Privacy Framework: An Overview 6/24/2020 Status: Final	Final	6/24/2020	56%
CSWP	10	NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management, Version 1.0 CSWP 10 (Final) NIST Privacy Framework: A Tool for Improving Privacy Through Enterprise Risk Management, Version 1.0 1/16/2020 Status: Final	Final	1/16/2020	56%

1 2 next > last >>

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs