Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results

Showing 1 through 25 of 37 matching records.

1 | 2 > >>

Series	Number	Title Publications	Status	Release Date	Relevance*
CSWP	11C	Case Studies in Cyber Supply Chain Risk Management: Anonymous Renewable Energy Company CSWP 11C (Final) Case Studies in Cyber Supply Chain Risk Management: Anonymous Renewable Energy Company 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11A	Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Electronics Company CSWP 11A (Final) Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Electronics Company 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11	Case Studies in Cyber Supply Chain Risk Management: Summary of Findings and Recommendations CSWP 11 (Final) Case Studies in Cyber Supply Chain Risk Management: Summary of Findings and Recommendations 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11D	Case Studies in Cyber Supply Chain Risk Management: Mayo Clinic CSWP 11D (Final) Case Studies in Cyber Supply Chain Risk Management: Mayo Clinic 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11E	Case Studies in Cyber Supply Chain Risk Management: Palo Alto Networks, Inc. CSWP 11E (Final) Case Studies in Cyber Supply Chain Risk Management: Palo Alto Networks, Inc. 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11B	Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Goods Company CSWP 11B (Final) Case Studies in Cyber Supply Chain Risk Management: Anonymous Consumer Goods Company 2/04/2020 Status: Final	Final	2/04/2020	100%
CSWP	11F	Case Studies in Cyber Supply Chain Risk Management: Seagate Technology CSWP 11F (Final) Case Studies in Cyber Supply Chain Risk Management: Seagate Technology 2/04/2020 Status: Final	Final	2/04/2020	100%
IR	8536	Supply Chain Traceability: Manufacturing Meta-Framework IR 8536 (2nd Public Draft) Supply Chain Traceability: Manufacturing Meta-Framework 7/31/2025 Status: Draft	Draft	7/31/2025	85%
SP	800-218 Rev. 1	Secure Software Development Framework (SSDF) Version 1.2: Recommendations for Mitigating the Risk of Software Vulnerabilities SP 800-218 Rev. 1 (Initial Public Draft) Secure Software Development Framework (SSDF) Version 1.2: Recommendations for Mitigating the Risk of Software Vulnerabilities 12/17/2025 Status: Draft	Draft	12/17/2025	79%
SP	1326	NIST Cybersecurity Supply Chain Risk Management: Due Diligence Assessment Quick-Start Guide SP 1326 (Initial Public Draft) NIST Cybersecurity Supply Chain Risk Management: Due Diligence Assessment Quick-Start Guide 10/30/2024 Status: Draft	Draft	10/30/2024	79%
SP	800-18 Rev. 2	Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems SP 800-18 Rev. 2 (Initial Public Draft) Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems 6/04/2025 Status: Draft	Draft	6/04/2025	67%
Other		Internet of Things (IoT) Trust Concerns Other (Initial Public Draft) Internet of Things (IoT) Trust Concerns 10/17/2018 Status: Draft	Draft	10/17/2018	67%
IR	8276	Key Practices in Cyber Supply Chain Risk Management: Observations from Industry IR 8276 (Final) Key Practices in Cyber Supply Chain Risk Management: Observations from Industry 2/11/2021 Status: Final	Final	2/11/2021	64%
Journal Article		Electronics Supply Chain Integrity Enabled by Blockchain Journal Article (Final) Electronics Supply Chain Integrity Enabled by Blockchain 6/01/2019 Status: Final	Final	6/01/2019	64%
SP	1800-44	Secure Software Development, Security, and Operations (DevSecOps) Practices SP 1800-44 (Initial Public Draft) Secure Software Development, Security, and Operations (DevSecOps) Practices 7/30/2025 Status: Draft	Draft	7/30/2025	58%
CSWP	46	Analyzing Collusion Threats in the Semiconductor Supply Chain CSWP 46 (Final) Analyzing Collusion Threats in the Semiconductor Supply Chain 6/30/2025 Status: Final	Final	6/30/2025	52%
SP	1305	NIST Cybersecurity Framework 2.0: Quick-Start Guide for Cybersecurity Supply Chain Risk Management (C-SCRM) SP 1305 (Final) NIST Cybersecurity Framework 2.0: Quick-Start Guide for Cybersecurity Supply Chain Risk Management (C-SCRM) 10/21/2024 Status: Final	Final	10/21/2024	52%
Other		Software Security in Supply Chains Other (Final) Software Security in Supply Chains 5/05/2022 Status: Final	Final	5/05/2022	52%
Other		Software Supply Chain Security Guidance Under Executive Order (EO) 14028 Section 4e Other (Final) Software Supply Chain Security Guidance Under Executive Order (EO) 14028 Section 4e 2/04/2022 Status: Final	Final	2/04/2022	52%
Other		Proof of Concept for an ICT SCRM Enterprise Assessment Package Other (Final) Proof of Concept for an ICT SCRM Enterprise Assessment Package 12/01/2012 Status: Final	Final	12/01/2012	52%
ITL Bulletin		Practices for Managing Supply Chain Risks to Protect Federal Information Systems ITL Bulletin (Final) Practices for Managing Supply Chain Risks to Protect Federal Information Systems 11/27/2012 Status: Final	Final	11/27/2012	52%
IR	7622	Notional Supply Chain Risk Management Practices for Federal Information Systems IR 7622 (Final) Notional Supply Chain Risk Management Practices for Federal Information Systems 10/16/2012 Status: Final	Final	10/16/2012	52%
Other		The ICT SCRM Community Framework Development Project: Final Report Other (Final) The ICT SCRM Community Framework Development Project: Final Report 12/01/2011 Status: Final	Final	12/01/2011	52%
Other		Assessing SCRM Capabilities and Perspectives of the IT Vendor Community: Toward a Cyber-Supply Chain Code of Practice Other (Final) Assessing SCRM Capabilities and Perspectives of the IT Vendor Community: Toward a Cyber-Supply Chain Code of Practice 4/01/2011 Status: Final	Final	4/01/2011	52%
SP	800-161 Rev. 1	Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations SP 800-161 Rev. 1 (Final) Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations 11/01/2024 Status: Final	Final	11/01/2024	46%

1 2 next > last >>

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs