Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( Dot gov ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results

Showing 1 through 25 of 27 matching records.

1 | 2 > >>

Series	Number	Title Publications	Status	Release Date	Relevance*
CSWP	11C	Case Studies in Cyber Supply Chain Risk Management: Anonymous Renewable Energy Company CSWP 11C (Final) Case Studies in Cyber Supply Chain Risk Management: Anonymous Renewable Energy Company 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11A	Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Electronics Company CSWP 11A (Final) Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Electronics Company 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11	Case Studies in Cyber Supply Chain Risk Management: Summary of Findings and Recommendations CSWP 11 (Final) Case Studies in Cyber Supply Chain Risk Management: Summary of Findings and Recommendations 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11D	Case Studies in Cyber Supply Chain Risk Management: Mayo Clinic CSWP 11D (Final) Case Studies in Cyber Supply Chain Risk Management: Mayo Clinic 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11E	Case Studies in Cyber Supply Chain Risk Management: Palo Alto Networks, Inc. CSWP 11E (Final) Case Studies in Cyber Supply Chain Risk Management: Palo Alto Networks, Inc. 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11B	Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Goods Company CSWP 11B (Final) Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Goods Company 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11F	Case Studies in Cyber Supply Chain Risk Management: Seagate Technology CSWP 11F (Final) Case Studies in Cyber Supply Chain Risk Management: Seagate Technology 2/04/2020 Status: Final	Final	2/04/2020	100%
SP	800-204D	Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD pipelines SP 800-204D (Initial Public Draft) Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD pipelines 8/30/2023 Status: Draft	Draft	8/30/2023	77%
Other		Internet of Things (IoT) Trust Concerns Other (Initial Public Draft) Internet of Things (IoT) Trust Concerns 10/17/2018 Status: Draft	Draft	10/17/2018	65%
IR	8276	Key Practices in Cyber Supply Chain Risk Management: Observations from Industry IR 8276 (Final) Key Practices in Cyber Supply Chain Risk Management: Observations from Industry 2/11/2021 Status: Final	Final	2/11/2021	64%
Journal Article		Electronics Supply Chain Integrity Enabled by Blockchain Journal Article (Final) Electronics Supply Chain Integrity Enabled by Blockchain 6/01/2019 Status: Final	Final	6/01/2019	64%
Other		Software Supply Chain Security Guidance Under Executive Order (EO) 14028 Section 4e Other (Final) Software Supply Chain Security Guidance Under Executive Order (EO) 14028 Section 4e 2/04/2022 Status: Final	Final	2/04/2022	52%
Other		Proof of Concept for an ICT SCRM Enterprise Assessment Package Other (Final) Proof of Concept for an ICT SCRM Enterprise Assessment Package 12/01/2012 Status: Final	Final	12/01/2012	52%
ITL Bulletin		Practices for Managing Supply Chain Risks to Protect Federal Information Systems ITL Bulletin (Final) Practices for Managing Supply Chain Risks to Protect Federal Information Systems 11/27/2012 Status: Final	Final	11/27/2012	52%
IR	7622	Notional Supply Chain Risk Management Practices for Federal Information Systems IR 7622 (Final) Notional Supply Chain Risk Management Practices for Federal Information Systems 10/16/2012 Status: Final	Final	10/16/2012	52%
Other		The ICT SCRM Community Framework Development Project: Final Report Other (Final) The ICT SCRM Community Framework Development Project: Final Report 12/01/2011 Status: Final	Final	12/01/2011	52%
Other		Assessing SCRM Capabilities and Perspectives of the IT Vendor Community: Toward a Cyber-Supply Chain Code of Practice Other (Final) Assessing SCRM Capabilities and Perspectives of the IT Vendor Community: Toward a Cyber-Supply Chain Code of Practice 4/01/2011 Status: Final	Final	4/01/2011	52%
SP	800-161 Rev. 1	Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations SP 800-161 Rev. 1 (Final) Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations 5/05/2022 Status: Final	Final	5/05/2022	46%
SP	800-218	Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities SP 800-218 (Final) Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities 2/03/2022 Status: Final	Final	2/03/2022	40%
Other		Final Report: Leveraging the Cyber Risk Portal as A Teaching & Education Tool Other (Final) Final Report: Leveraging the Cyber Risk Portal as A Teaching & Education Tool 6/10/2015 Status: Final	Final	6/10/2015	40%
Project Description		Software Supply Chain and DevOps Security Practices: Implementing a Risk-Based Approach to DevSecOps Project Description (Final) Software Supply Chain and DevOps Security Practices: Implementing a Risk-Based Approach to DevSecOps 11/09/2022 Status: Final	Final	11/09/2022	34%
IR	8419	Blockchain and Related Technologies to Support Manufacturing Supply Chain Traceability: Needs and Industry Perspectives IR 8419 (Final) Blockchain and Related Technologies to Support Manufacturing Supply Chain Traceability: Needs and Industry Perspectives 4/07/2022 Status: Final	Final	4/07/2022	34%
SP	800-53B	Control Baselines for Information Systems and Organizations SP 800-53B (Final) Control Baselines for Information Systems and Organizations 12/10/2020 Status: Final	Final	12/10/2020	34%
Project Description		Validating the Integrity of Computing Devices: Supply Chain Assurance Project Description (Final) Validating the Integrity of Computing Devices: Supply Chain Assurance 3/26/2020 Status: Final	Final	3/26/2020	34%
SP	1800-34	Validating the Integrity of Computing Devices SP 1800-34 (Final) Validating the Integrity of Computing Devices 12/09/2022 Status: Final	Final	12/09/2022	28%

1 2 next > last >>

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs