Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results

Showing 26 through 50 of 356 matching records.

<< < 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 > >>

Series	Number	Title Publications	Status	Release Date	Relevance*
CSWP	34	Mitigating Cybersecurity and Privacy Risks in Telehealth Smart Home Integration: Healthcare and Public Health Sector Risk Management Approaches CSWP 34 (Initial Public Draft) Mitigating Cybersecurity and Privacy Risks in Telehealth Smart Home Integration: Healthcare and Public Health Sector Risk Management Approaches 11/06/2024 Status: Draft	Draft	11/06/2024	83%
SP	1800-39	Implementing Data Classification Practices SP 1800-39 (Initial Preliminary Draft) Implementing Data Classification Practices 4/25/2023 Status: Draft	Draft	4/25/2023	83%
IR	8349	Methodology for Characterizing Network Behavior of Internet of Things Devices IR 8349 (Initial Public Draft) Methodology for Characterizing Network Behavior of Internet of Things Devices 1/11/2022 Status: Draft	Draft	1/11/2022	83%
Project Description		Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses Project Description (Initial Public Draft) Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses 6/17/2019 Status: Draft	Draft	6/17/2019	83%
Book Section		A Framework for Computer Security Risk Management Book Section (Final) A Framework for Computer Security Risk Management 1/01/1991 Status: Final	Final	1/01/1991	55%
IR	8286D	Using Business Impact Analysis to Inform Risk Prioritization and Response IR 8286D (Final) Using Business Impact Analysis to Inform Risk Prioritization and Response 2/26/2025 Status: Final	Final	2/26/2025	37%
IR	8517	Hardware Security Failure Scenarios: Potential Hardware Weaknesses IR 8517 (Final) Hardware Security Failure Scenarios: Potential Hardware Weaknesses 11/13/2024 Status: Final	Final	11/13/2024	37%
SP	800-221	Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio SP 800-221 (Final) Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio 11/17/2023 Status: Final	Final	11/17/2023	37%
SP	800-221A	Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio SP 800-221A (Final) Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio 11/17/2023 Status: Final	Final	11/17/2023	37%
IR	8286	Integrating Cybersecurity and Enterprise Risk Management (ERM) IR 8286 (Final) Integrating Cybersecurity and Enterprise Risk Management (ERM) 10/13/2020 Status: Final	Final	10/13/2020	37%
Book Section		Managing Risk in the Cloud Book Section (Final) Managing Risk in the Cloud 9/09/2016 Status: Final	Final	9/09/2016	37%
Book Section		Cloud Computing Security Essentials and Architecture Book Section (Final) Cloud Computing Security Essentials and Architecture 9/09/2016 Status: Final	Final	9/09/2016	37%
ITL Bulletin		Management of Risks in Information Systems: Practices of Successful Organizations ITL Bulletin (Final) Management of Risks in Information Systems: Practices of Successful Organizations 3/19/1998 Status: Final	Final	3/19/1998	37%
ITL Bulletin		The World Wide Web: Managing Security Risks ITL Bulletin (Final) The World Wide Web: Managing Security Risks 5/01/1996 Status: Final	Final	5/01/1996	37%
ITL Bulletin		Reducing the Risks of Internet Connection and Use ITL Bulletin (Final) Reducing the Risks of Internet Connection and Use 5/01/1994 Status: Final	Final	5/01/1994	37%
ITL Bulletin		Threats to Computer Systems: An Overview ITL Bulletin (Final) Threats to Computer Systems: An Overview 3/01/1994 Status: Final	Final	3/01/1994	37%
IR	4939	Threat Assessment of Malicious Code and External Attacks IR 4939 (Final) Threat Assessment of Malicious Code and External Attacks 10/01/1992 Status: Final	Final	10/01/1992	37%
IR	4325	U.S. Department of Energy Risk Assessment Methodology IR 4325 (Final) U.S. Department of Energy Risk Assessment Methodology 5/01/1990 Status: Final	Final	5/01/1990	37%
IR	8286B	Prioritizing Cybersecurity Risk for Enterprise Risk Management IR 8286B (Final) Prioritizing Cybersecurity Risk for Enterprise Risk Management 2/26/2025 Status: Final	Final	2/26/2025	32%
SP	1302	NIST Cybersecurity Framework 2.0: Quick-Start Guide for Using the CSF Tiers SP 1302 (Final) NIST Cybersecurity Framework 2.0: Quick-Start Guide for Using the CSF Tiers 10/21/2024 Status: Final	Final	10/21/2024	32%
SP	1303	NIST Cybersecurity Framework 2.0: Enterprise Risk Management Quick-Start Guide SP 1303 (Final) NIST Cybersecurity Framework 2.0: Enterprise Risk Management Quick-Start Guide 10/21/2024 Status: Final	Final	10/21/2024	32%
SP	800-233	Service Mesh Proxy Models for Cloud-Native Applications SP 800-233 (Final) Service Mesh Proxy Models for Cloud-Native Applications 10/16/2024 Status: Final	Final	10/16/2024	32%
SP	800-218A	Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile SP 800-218A (Final) Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile 7/26/2024 Status: Final	Final	7/26/2024	32%
SP	1314	NIST Risk Management Framework (RMF) Small Enterprise Quick Start Guide: A Comprehensive, Flexible, Risk-Based Approach to Managing Information Security and Privacy Risk SP 1314 (Final) NIST Risk Management Framework (RMF) Small Enterprise Quick Start Guide: A Comprehensive, Flexible, Risk-Based Approach to Managing Information Security and Privacy Risk 7/23/2024 Status: Final	Final	7/23/2024	32%
Conference Paper		Terms of Deception: Exposing Obscured Financial Obligations in Online Agreements with Deep Learning Conference Paper (Final) Terms of Deception: Exposing Obscured Financial Obligations in Online Agreements with Deep Learning 5/23/2024 Status: Final	Final	5/23/2024	32%

<< first < previous 1 2 3 4 5 6 7 8 9 10 next > last >>

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs