Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results

Showing 26 through 50 of 360 matching records.

<< < 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 > >>

Series	Number	Title Publications	Status	Release Date	Relevance*
IR	8286D	Using Business Impact Analysis to Inform Risk Prioritization and Response IR 8286D (Final) Using Business Impact Analysis to Inform Risk Prioritization and Response 2/26/2025 Status: Final	Final	2/26/2025	37%
IR	8517	Hardware Security Failure Scenarios: Potential Hardware Weaknesses IR 8517 (Final) Hardware Security Failure Scenarios: Potential Hardware Weaknesses 11/13/2024 Status: Final	Final	11/13/2024	37%
SP	800-221	Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio SP 800-221 (Final) Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio 11/17/2023 Status: Final	Final	11/17/2023	37%
SP	800-221A	Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio SP 800-221A (Final) Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio 11/17/2023 Status: Final	Final	11/17/2023	37%
Book Section		Managing Risk in the Cloud Book Section (Final) Managing Risk in the Cloud 9/09/2016 Status: Final	Final	9/09/2016	37%
Book Section		Cloud Computing Security Essentials and Architecture Book Section (Final) Cloud Computing Security Essentials and Architecture 9/09/2016 Status: Final	Final	9/09/2016	37%
ITL Bulletin		Management of Risks in Information Systems: Practices of Successful Organizations ITL Bulletin (Final) Management of Risks in Information Systems: Practices of Successful Organizations 3/19/1998 Status: Final	Final	3/19/1998	37%
ITL Bulletin		The World Wide Web: Managing Security Risks ITL Bulletin (Final) The World Wide Web: Managing Security Risks 5/01/1996 Status: Final	Final	5/01/1996	37%
ITL Bulletin		Reducing the Risks of Internet Connection and Use ITL Bulletin (Final) Reducing the Risks of Internet Connection and Use 5/01/1994 Status: Final	Final	5/01/1994	37%
ITL Bulletin		Threats to Computer Systems: An Overview ITL Bulletin (Final) Threats to Computer Systems: An Overview 3/01/1994 Status: Final	Final	3/01/1994	37%
IR	4939	Threat Assessment of Malicious Code and External Attacks IR 4939 (Final) Threat Assessment of Malicious Code and External Attacks 10/01/1992 Status: Final	Final	10/01/1992	37%
IR	4325	U.S. Department of Energy Risk Assessment Methodology IR 4325 (Final) U.S. Department of Energy Risk Assessment Methodology 5/01/1990 Status: Final	Final	5/01/1990	37%
SP	1347	NIST Cybersecurity Framework 2.0: Informative References Quick-Start Guide SP 1347 (Final) NIST Cybersecurity Framework 2.0: Informative References Quick-Start Guide 8/25/2026 Status: Final	Final	8/25/2026	31%
CSWP	39upd1	Considerations for Achieving Crypto Agility: Strategies and Practices CSWP 39upd1 (Final) Considerations for Achieving Crypto Agility: Strategies and Practices 6/29/2026 Status: Final	Final	6/29/2026	31%
IR	8618	Workshop Summary Report for “Cybersecurity for IoT Workshop: Future Directions” IR 8618 (Final) Workshop Summary Report for “Cybersecurity for IoT Workshop: Future Directions” 6/17/2026 Status: Final	Final	6/17/2026	31%
IR	8286C Rev. 1	Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight IR 8286C Rev. 1 (Final) Staging Cybersecurity Risks for Enterprise Risk Management and Governance Oversight 12/18/2025 Status: Final	Final	12/18/2025	31%
IR	8286 Rev. 1	Integrating Cybersecurity and Enterprise Risk Management (ERM) IR 8286 Rev. 1 (Final) Integrating Cybersecurity and Enterprise Risk Management (ERM) 12/18/2025 Status: Final	Final	12/18/2025	31%
IR	8286A Rev. 1	Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management IR 8286A Rev. 1 (Final) Identifying and Estimating Cybersecurity Risk for Enterprise Risk Management 12/18/2025 Status: Final	Final	12/18/2025	31%
SP	1334	Reducing the Cybersecurity Risks of Portable Storage Media in OT Environments SP 1334 (Final) Reducing the Cybersecurity Risks of Portable Storage Media in OT Environments 9/30/2025 Status: Final	Final	9/30/2025	31%
SP	1318	Protecting Controlled Unclassified Information (CUI): NIST Special Publication 800-171, Revision 3. Small Business Primer SP 1318 (Final) Protecting Controlled Unclassified Information (CUI): NIST Special Publication 800-171, Revision 3. Small Business Primer 8/18/2025 Status: Final	Final	8/18/2025	31%
IR	8286B	Prioritizing Cybersecurity Risk for Enterprise Risk Management IR 8286B (Final) Prioritizing Cybersecurity Risk for Enterprise Risk Management 2/26/2025 Status: Final	Final	2/26/2025	31%
SP	1302	NIST Cybersecurity Framework 2.0: Quick-Start Guide for Using the CSF Tiers SP 1302 (Final) NIST Cybersecurity Framework 2.0: Quick-Start Guide for Using the CSF Tiers 10/21/2024 Status: Final	Final	10/21/2024	31%
SP	1303	NIST Cybersecurity Framework 2.0: Enterprise Risk Management Quick-Start Guide SP 1303 (Final) NIST Cybersecurity Framework 2.0: Enterprise Risk Management Quick-Start Guide 10/21/2024 Status: Final	Final	10/21/2024	31%
SP	800-233	Service Mesh Proxy Models for Cloud-Native Applications SP 800-233 (Final) Service Mesh Proxy Models for Cloud-Native Applications 10/16/2024 Status: Final	Final	10/16/2024	31%
SP	800-218A	Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile SP 800-218A (Final) Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile 7/26/2024 Status: Final	Final	7/26/2024	31%

<< first < previous 1 2 3 4 5 6 7 8 9 10 next > last >>

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs