Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results

Showing 1 through 25 of 32 matching records.

1 | 2 > >>

Series	Number	Title Publications	Status	Release Date	Relevance*
CSWP	11C	Case Studies in Cyber Supply Chain Risk Management: Anonymous Renewable Energy Company CSWP 11C (Final) Case Studies in Cyber Supply Chain Risk Management: Anonymous Renewable Energy Company 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11A	Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Electronics Company CSWP 11A (Final) Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Electronics Company 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11	Case Studies in Cyber Supply Chain Risk Management: Summary of Findings and Recommendations CSWP 11 (Final) Case Studies in Cyber Supply Chain Risk Management: Summary of Findings and Recommendations 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11D	Case Studies in Cyber Supply Chain Risk Management: Mayo Clinic CSWP 11D (Final) Case Studies in Cyber Supply Chain Risk Management: Mayo Clinic 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11E	Case Studies in Cyber Supply Chain Risk Management: Palo Alto Networks, Inc. CSWP 11E (Final) Case Studies in Cyber Supply Chain Risk Management: Palo Alto Networks, Inc. 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11B	Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Goods Company CSWP 11B (Final) Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Goods Company 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11F	Case Studies in Cyber Supply Chain Risk Management: Seagate Technology CSWP 11F (Final) Case Studies in Cyber Supply Chain Risk Management: Seagate Technology 2/04/2020 Status: Final	Final	2/04/2020	100%
IR	8536	Supply Chain Traceability: Manufacturing Meta-Framework IR 8536 (Initial Public Draft) Supply Chain Traceability: Manufacturing Meta-Framework 9/27/2024 Status: Draft	Draft	9/27/2024	85%
SP	1305	NIST Cybersecurity Framework 2.0: Quick-Start Guide for Cybersecurity Supply Chain Risk Management (C-SCRM) SP 1305 (Initial Public Draft) NIST Cybersecurity Framework 2.0: Quick-Start Guide for Cybersecurity Supply Chain Risk Management (C-SCRM) 2/26/2024 Status: Draft	Draft	2/26/2024	85%
IR	8532	Workshop on Enhancing Security of Devices and Components Across the Supply Chain IR 8532 (Initial Public Draft) Workshop on Enhancing Security of Devices and Components Across the Supply Chain 8/14/2024 Status: Draft	Draft	8/14/2024	73%
Other		Internet of Things (IoT) Trust Concerns Other (Initial Public Draft) Internet of Things (IoT) Trust Concerns 10/17/2018 Status: Draft	Draft	10/17/2018	67%
IR	8276	Key Practices in Cyber Supply Chain Risk Management: Observations from Industry IR 8276 (Final) Key Practices in Cyber Supply Chain Risk Management: Observations from Industry 2/11/2021 Status: Final	Final	2/11/2021	64%
Journal Article		Electronics Supply Chain Integrity Enabled by Blockchain Journal Article (Final) Electronics Supply Chain Integrity Enabled by Blockchain 6/01/2019 Status: Final	Final	6/01/2019	64%
Other		Software Security in Supply Chains Other (Final) Software Security in Supply Chains 5/05/2022 Status: Final	Final	5/05/2022	52%
Other		Software Supply Chain Security Guidance Under Executive Order (EO) 14028 Section 4e Other (Final) Software Supply Chain Security Guidance Under Executive Order (EO) 14028 Section 4e 2/04/2022 Status: Final	Final	2/04/2022	52%
Other		Proof of Concept for an ICT SCRM Enterprise Assessment Package Other (Final) Proof of Concept for an ICT SCRM Enterprise Assessment Package 12/01/2012 Status: Final	Final	12/01/2012	52%
ITL Bulletin		Practices for Managing Supply Chain Risks to Protect Federal Information Systems ITL Bulletin (Final) Practices for Managing Supply Chain Risks to Protect Federal Information Systems 11/27/2012 Status: Final	Final	11/27/2012	52%
IR	7622	Notional Supply Chain Risk Management Practices for Federal Information Systems IR 7622 (Final) Notional Supply Chain Risk Management Practices for Federal Information Systems 10/16/2012 Status: Final	Final	10/16/2012	52%
Other		The ICT SCRM Community Framework Development Project: Final Report Other (Final) The ICT SCRM Community Framework Development Project: Final Report 12/01/2011 Status: Final	Final	12/01/2011	52%
Other		Assessing SCRM Capabilities and Perspectives of the IT Vendor Community: Toward a Cyber-Supply Chain Code of Practice Other (Final) Assessing SCRM Capabilities and Perspectives of the IT Vendor Community: Toward a Cyber-Supply Chain Code of Practice 4/01/2011 Status: Final	Final	4/01/2011	52%
SP	800-204D	Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines SP 800-204D (Final) Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines 2/12/2024 Status: Final	Final	2/12/2024	46%
SP	800-161 Rev. 1	Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations SP 800-161 Rev. 1 (Final) Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations 5/05/2022 Status: Final	Final	5/05/2022	46%
CSWP	29	The NIST Cybersecurity Framework (CSF) 2.0 CSWP 29 (Final) The NIST Cybersecurity Framework (CSF) 2.0 2/26/2024 Status: Final	Final	2/26/2024	40%
SP	800-218	Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities SP 800-218 (Final) Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities 2/03/2022 Status: Final	Final	2/03/2022	40%
Other		Final Report: Leveraging the Cyber Risk Portal as A Teaching & Education Tool Other (Final) Final Report: Leveraging the Cyber Risk Portal as A Teaching & Education Tool 6/10/2015 Status: Final	Final	6/10/2015	40%

1 2 next > last >>

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs