Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( Dot gov ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results

Showing 1 through 25 of 28 matching records.

1 | 2 > >>

Series	Number	Title Publications	Status	Release Date	Relevance*
NISTIR	7924	Reference Certificate Policy (2nd Draft) NISTIR 7924 (Draft) Reference Certificate Policy (2nd Draft) 5/29/2014 Status: Draft Download: Second Draft NISTIR 7924; Comment Template	Draft	5/29/2014	100%
SP	800-172A	Assessing Enhanced Security Requirements for Controlled Unclassified Information SP 800-172A (Draft) Assessing Enhanced Security Requirements for Controlled Unclassified Information 4/27/2021 Status: Draft Download: SP 800-172A (Draft) (DOI); Local Download; Comment template	Draft	4/27/2021	92%
White Paper		[Project Description] Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses White Paper (Draft) [Project Description] Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses 6/17/2019 Status: Draft Download: Project Description; Submit Comments; Project homepage	Draft	6/17/2019	84%
SP	1800-18	Privileged Account Management for the Financial Services Sector SP 1800-18 (Draft) Privileged Account Management for the Financial Services Sector 9/28/2018 Status: Draft Download: Draft SP 1800-18 volumes and Project Homepage; Submit Comments	Draft	9/28/2018	84%
Conference Proceedings		The Open Security Controls Assessment Language (OSCAL): Schema and Metaschema Conference Proceedings The Open Security Controls Assessment Language (OSCAL): Schema and Metaschema 7/30/2019 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	7/30/2019	71%
Conference Proceedings		Systems security assurance as (micro) publishing: Declarative markup for systems description and assessment Conference Proceedings Systems security assurance as (micro) publishing: Declarative markup for systems description and assessment 7/27/2020 Status: Final Download: Conference Proceedings (DOI); Preprint	Final	7/27/2020	63%
Journal Article		Baseline Tailor Journal Article Baseline Tailor 6/26/2018 Status: Final Download: Journal Article (DOI); Local Download; Baseline Tailor software tool	Final	6/26/2018	63%
NISTIR	8183 Rev. 1	Cybersecurity Framework Version 1.1 Manufacturing Profile NISTIR 8183 Rev. 1 Cybersecurity Framework Version 1.1 Manufacturing Profile 10/07/2020 Status: Final Download: NISTIR 8183 Rev. 1 (DOI); Local Download; NIST Cybersecurity Framework	Final	10/07/2020	55%
SP	800-53B	Control Baselines for Information Systems and Organizations SP 800-53B Control Baselines for Information Systems and Organizations 12/10/2020 Status: Final Download: SP 800-53B (DOI); Local Download; Control Baselines spreadsheet; Security Control Overlay Repository (SCOR); OSCAL [an OSCAL version of 800-53B is in development]; NIST news article	Final	12/10/2020	47%
NISTIR	8278A	National Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers NISTIR 8278A National Online Informative References (OLIR) Program: Submission Guidance for OLIR Developers 11/20/2020 Status: Final Download: NISTIR 8278A (DOI); Local Download; OLIR homepage; Focal Document Templates; OLIR Validation Tool; OLIR catalog	Final	11/20/2020	47%
NISTIR	8278	National Online Informative References (OLIR) Program: Program Overview and OLIR Uses NISTIR 8278 National Online Informative References (OLIR) Program: Program Overview and OLIR Uses 11/20/2020 Status: Final Download: NISTIR 8278 (DOI); Local Download; OLIR homepage; OLIR catalog	Final	11/20/2020	47%
NISTIR	8170	Approaches for Federal Agencies to Use the Cybersecurity Framework NISTIR 8170 Approaches for Federal Agencies to Use the Cybersecurity Framework 3/19/2020 Status: Final Download: NISTIR 8170 (DOI); Local Download; Cybersecurity Framework homepage	Final	3/19/2020	47%
Journal Article		Network Attack Surface: Lifting the Attack Surface Concept to Network Level for Evaluating the Resilience against Zero-Day Attacks Journal Article Network Attack Surface: Lifting the Attack Surface Concept to Network Level for Evaluating the Resilience against Zero-Day Attacks 12/21/2018 Status: Final Download: Journal Article (DOI); Preprint	Final	12/21/2018	47%
ITL Bulletin		Assessing Implementation of Controlled Unclassified Information (CUI) Security Requirements ITL Bulletin Assessing Implementation of Controlled Unclassified Information (CUI) Security Requirements 7/26/2018 Status: Final Download: July 2018 ITL Bulletin	Final	7/26/2018	47%
SP	800-171A	Assessing Security Requirements for Controlled Unclassified Information SP 800-171A Assessing Security Requirements for Controlled Unclassified Information 6/13/2018 Status: Final Download: SP 800-171A (DOI); Local Download; CUI SSP template **[see Planning Note]; CUI Plan of Action template	Final	6/13/2018	47%
NISTIR	8011 Vol. 1	Automation Support for Security Control Assessments: Volume 1: Overview NISTIR 8011 Vol. 1 Automation Support for Security Control Assessments: Volume 1: Overview 6/06/2017 Status: Final Download: NISTIR 8011 Vol. 1 (DOI); Local Download	Final	6/06/2017	47%
White Paper		Summary of NIST SP 800-53, Revision 4: Security and Privacy Controls for Federal Information Systems and Organizations White Paper Summary of NIST SP 800-53, Revision 4: Security and Privacy Controls for Federal Information Systems and Organizations 2/19/2014 Status: Final Download: White Paper (DOI); Local Download	Final	2/19/2014	47%
SP	1800-15	Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) SP 1800-15 Securing Small-Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) 5/26/2021 Status: Final Download: SP 1800-15 (DOI); Local Download; Project Homepage	Final	5/26/2021	39%
SP	800-171 Rev. 2	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 2 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 1/28/2021 Status: Final Download: SP 800-171 Rev. 2 (DOI); Local Download; CUI Plan of Action template; CUI SSP template **[see Planning Note]; Mapping: Cybersecurity Framework v.1.0 to SP 800-171 Rev. 2	Final	1/28/2021	39%
SP	800-53 Rev. 5	Security and Privacy Controls for Information Systems and Organizations SP 800-53 Rev. 5 Security and Privacy Controls for Information Systems and Organizations 12/10/2020 Status: Final Download: SP 800-53 Rev. 5 (DOI); Local Download; Control Catalog (spreadsheet); Analysis of updates between 800-53 Rev. 5 and Rev. 4, by MITRE Corp. for ODNI; Mapping: Appendix J Privacy Controls (Rev. 4) to Rev. 5; Mappings: Cybersecurity Framework and Privacy Framework to Rev. 5; Mapping: Rev. 5 to ISO/IEC 27001; OSCAL Version of Rev. 5 controls; Control Collaboration Index Template; Control Collaboration Index Template; Blog post	Final	12/10/2020	39%
SP	800-210	General Access Control Guidance for Cloud Systems SP 800-210 General Access Control Guidance for Cloud Systems 7/31/2020 Status: Final Download: SP 800-210 (DOI); Local Download	Final	7/31/2020	39%
NISTIR	8011 Vol. 4	Automation Support for Security Control Assessments: Software Vulnerability Management NISTIR 8011 Vol. 4 Automation Support for Security Control Assessments: Software Vulnerability Management 4/28/2020 Status: Final Download: NISTIR 8011 Vol. 4 (DOI); Local Download	Final	4/28/2020	39%
White Paper		[Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches White Paper [Project Description] Data Confidentiality: Detect, Respond to, and Recover from Data Breaches 12/05/2019 Status: Final Download: Project Description; Project homepage	Final	12/05/2019	39%
SP	1800-17	Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers SP 1800-17 Multifactor Authentication for E-Commerce: Risk-Based, FIDO Universal Second Factor Implementations for Purchasers 7/30/2019 Status: Final Download: SP 1800-17 (DOI); Local Download; Web version; Project Homepage	Final	7/30/2019	39%
ITL Bulletin		The Next Generation Risk Management Framework (RMF 2.0): A Holistic Methodology to Manage Information Security, Privacy and Supply Chain Risk ITL Bulletin The Next Generation Risk Management Framework (RMF 2.0): A Holistic Methodology to Manage Information Security, Privacy and Supply Chain Risk 2/28/2019 Status: Final Download: February 2019 ITL Bulletin	Final	2/28/2019	39%

1 2 next > last >>

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Current Publications

Search Results

Current Publications