Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results

Showing 26 through 50 of 361 matching records.

<< < 1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 > >>

Series	Number	Title Publications	Status	Release Date	Relevance*
SP	800-154	Guide to Data-Centric System Threat Modeling SP 800-154 (Initial Public Draft) Guide to Data-Centric System Threat Modeling 3/14/2016 Status: Draft	Draft	3/14/2016	85%
SP	800-126 Rev. 4	Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.4 SP 800-126 Rev. 4 (Initial Public Draft) Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.4 12/11/2025 Status: Draft	Draft	12/11/2025	83%
SP	800-70 Rev. 5	National Checklist Program for IT Products: Guidelines for Checklist Users and Developers SP 800-70 Rev. 5 (Initial Public Draft) National Checklist Program for IT Products: Guidelines for Checklist Users and Developers 12/09/2025 Status: Draft	Draft	12/09/2025	83%
CSWP	34	Mitigating Cybersecurity and Privacy Risks in Telehealth Smart Home Integration: Healthcare and Public Health Sector Risk Management Approaches CSWP 34 (Initial Public Draft) Mitigating Cybersecurity and Privacy Risks in Telehealth Smart Home Integration: Healthcare and Public Health Sector Risk Management Approaches 11/06/2024 Status: Draft	Draft	11/06/2024	83%
SP	1800-39	Implementing Data Classification Practices SP 1800-39 (Initial Preliminary Draft) Implementing Data Classification Practices 4/25/2023 Status: Draft	Draft	4/25/2023	83%
Project Description		Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses Project Description (Initial Public Draft) Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses 6/17/2019 Status: Draft	Draft	6/17/2019	83%
Book Section		A Framework for Computer Security Risk Management Book Section (Final) A Framework for Computer Security Risk Management 1/01/1991 Status: Final	Final	1/01/1991	55%
IR	8286D	Using Business Impact Analysis to Inform Risk Prioritization and Response IR 8286D (Final) Using Business Impact Analysis to Inform Risk Prioritization and Response 2/26/2025 Status: Final	Final	2/26/2025	38%
IR	8517	Hardware Security Failure Scenarios: Potential Hardware Weaknesses IR 8517 (Final) Hardware Security Failure Scenarios: Potential Hardware Weaknesses 11/13/2024 Status: Final	Final	11/13/2024	38%
SP	800-221	Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio SP 800-221 (Final) Enterprise Impact of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio 11/17/2023 Status: Final	Final	11/17/2023	38%
SP	800-221A	Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio SP 800-221A (Final) Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio 11/17/2023 Status: Final	Final	11/17/2023	38%
IR	8286	Integrating Cybersecurity and Enterprise Risk Management (ERM) IR 8286 (Final) Integrating Cybersecurity and Enterprise Risk Management (ERM) 10/13/2020 Status: Final	Final	10/13/2020	38%
Book Section		Managing Risk in the Cloud Book Section (Final) Managing Risk in the Cloud 9/09/2016 Status: Final	Final	9/09/2016	38%
Book Section		Cloud Computing Security Essentials and Architecture Book Section (Final) Cloud Computing Security Essentials and Architecture 9/09/2016 Status: Final	Final	9/09/2016	38%
ITL Bulletin		Management of Risks in Information Systems: Practices of Successful Organizations ITL Bulletin (Final) Management of Risks in Information Systems: Practices of Successful Organizations 3/19/1998 Status: Final	Final	3/19/1998	38%
ITL Bulletin		The World Wide Web: Managing Security Risks ITL Bulletin (Final) The World Wide Web: Managing Security Risks 5/01/1996 Status: Final	Final	5/01/1996	38%
ITL Bulletin		Reducing the Risks of Internet Connection and Use ITL Bulletin (Final) Reducing the Risks of Internet Connection and Use 5/01/1994 Status: Final	Final	5/01/1994	38%
ITL Bulletin		Threats to Computer Systems: An Overview ITL Bulletin (Final) Threats to Computer Systems: An Overview 3/01/1994 Status: Final	Final	3/01/1994	38%
IR	4939	Threat Assessment of Malicious Code and External Attacks IR 4939 (Final) Threat Assessment of Malicious Code and External Attacks 10/01/1992 Status: Final	Final	10/01/1992	38%
IR	4325	U.S. Department of Energy Risk Assessment Methodology IR 4325 (Final) U.S. Department of Energy Risk Assessment Methodology 5/01/1990 Status: Final	Final	5/01/1990	38%
SP	1334	Reducing the Cybersecurity Risks of Portable Storage Media in OT Environments SP 1334 (Final) Reducing the Cybersecurity Risks of Portable Storage Media in OT Environments 9/30/2025 Status: Final	Final	9/30/2025	32%
SP	1318	Protecting Controlled Unclassified Information (CUI): NIST Special Publication 800-171, Revision 3. Small Business Primer SP 1318 (Final) Protecting Controlled Unclassified Information (CUI): NIST Special Publication 800-171, Revision 3. Small Business Primer 8/18/2025 Status: Final	Final	8/18/2025	32%
IR	8286B	Prioritizing Cybersecurity Risk for Enterprise Risk Management IR 8286B (Final) Prioritizing Cybersecurity Risk for Enterprise Risk Management 2/26/2025 Status: Final	Final	2/26/2025	32%
SP	1302	NIST Cybersecurity Framework 2.0: Quick-Start Guide for Using the CSF Tiers SP 1302 (Final) NIST Cybersecurity Framework 2.0: Quick-Start Guide for Using the CSF Tiers 10/21/2024 Status: Final	Final	10/21/2024	32%
SP	1303	NIST Cybersecurity Framework 2.0: Enterprise Risk Management Quick-Start Guide SP 1303 (Final) NIST Cybersecurity Framework 2.0: Enterprise Risk Management Quick-Start Guide 10/21/2024 Status: Final	Final	10/21/2024	32%

<< first < previous 1 2 3 4 5 6 7 8 9 10 next > last >>

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs