Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results

Showing 1 through 25 of 93 matching records.

1 | 2 | 3 | 4 > >>

Series	Number	Title Publications	Status	Release Date	Relevance*
CSWP	53	Charting the Course for NIST OSCAL CSWP 53 (Initial Public Draft) Charting the Course for NIST OSCAL 12/02/2025 Status: Draft	Draft	12/02/2025	100%
IR	8320C	Hardware-Enabled Security: Machine Identity Management and Protection IR 8320C (Initial Public Draft) Hardware-Enabled Security: Machine Identity Management and Protection 4/20/2022 Status: Draft	Draft	4/20/2022	100%
SP	800-92 Rev. 1	Cybersecurity Log Management Planning Guide SP 800-92 Rev. 1 (Initial Public Draft) Cybersecurity Log Management Planning Guide 10/11/2023 Status: Draft	Draft	10/11/2023	89%
Project Description		Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector Project Description (Initial Public Draft) Privileged Account Management: Securing Privileged Accounts for the Financial Services Sector 10/12/2017 Status: Draft	Draft	10/12/2017	89%
SP	800-126A Rev. 4	SCAP 1.4 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 4 SP 800-126A Rev. 4 (Initial Public Draft) SCAP 1.4 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 4 12/11/2025 Status: Draft	Draft	12/11/2025	84%
SP	800-126 Rev. 4	Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.4 SP 800-126 Rev. 4 (Initial Public Draft) Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.4 12/11/2025 Status: Draft	Draft	12/11/2025	78%
SP	800-70 Rev. 5	National Checklist Program for IT Products: Guidelines for Checklist Users and Developers SP 800-70 Rev. 5 (Initial Public Draft) National Checklist Program for IT Products: Guidelines for Checklist Users and Developers 12/09/2025 Status: Draft	Draft	12/09/2025	78%
ITL Bulletin		Audit Trails ITL Bulletin (Final) Audit Trails 3/01/1997 Status: Final	Final	3/01/1997	61%
IR	4378	Automated Information System Security Accreditation Guidelines IR 4378 (Final) Automated Information System Security Accreditation Guidelines 8/01/1990 Status: Final	Final	8/01/1990	61%
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 (Final) Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 4/20/2022 Status: Final	Final	4/20/2022	50%
IR	7275	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1 IR 7275 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1 11/01/2006 Status: Final	Final	11/01/2006	50%
IR	4518	National Aeronautics and Space Administration's (NASA) Automated Information Security Handbook IR 4518 (Final) National Aeronautics and Space Administration's (NASA) Automated Information Security Handbook 3/01/1991 Status: Final	Final	3/01/1991	50%
IR	4451	U.S. Department of Commerce: Methodology for Certifying Sensitive Computer Applications IR 4451 (Final) U.S. Department of Commerce: Methodology for Certifying Sensitive Computer Applications 11/01/1990 Status: Final	Final	11/01/1990	50%
IR	4387	U.S. Department of Justice Simplified Risk Analysis Guidelines IR 4387 (Final) U.S. Department of Justice Simplified Risk Analysis Guidelines 8/01/1990 Status: Final	Final	8/01/1990	50%
Other		Auditing Password Usage Other (Final) Auditing Password Usage 9/01/1988 Status: Final	Final	9/01/1988	50%
SP	500-109	Overview of Computer Security Certification and Accreditation SP 500-109 (Final) Overview of Computer Security Certification and Accreditation 4/01/1984 Status: Final	Final	4/01/1984	50%
Conference Paper		Security Auditing of Internet of Things Devices in a Smart Home Conference Paper (Final) Security Auditing of Internet of Things Devices in a Smart Home 10/15/2021 Status: Final	Final	10/15/2021	45%
IR	7188	Specification for the Extensible Configuration Checklist Description Format (XCCDF) IR 7188 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) 1/01/2005 Status: Final	Final	1/01/2005	45%
ITL Bulletin		ASSET: Security Assessment Tool for Federal Agencies ITL Bulletin (Final) ASSET: Security Assessment Tool for Federal Agencies 6/01/2003 Status: Final	Final	6/01/2003	45%
Journal Article		Reflections on Ten Years of Computer Security Journal Article (Final) Reflections on Ten Years of Computer Security 11/01/1982 Status: Final	Final	11/01/1982	45%
SP	800-55 Vol. 2	Measurement Guide for Information Security: Volume 2 — Developing an Information Security Measurement Program SP 800-55 Vol. 2 (Final) Measurement Guide for Information Security: Volume 2 — Developing an Information Security Measurement Program 12/04/2024 Status: Final	Final	12/04/2024	39%
CSWP	30	Automation Support for Control Assessments: Project Update and Vision CSWP 30 (Final) Automation Support for Control Assessments: Project Update and Vision 12/06/2023 Status: Final	Final	12/06/2023	39%
IR	8246	Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers IR 8246 (Final) Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers 12/15/2020 Status: Final	Final	12/15/2020	39%
IR	7275 Rev. 4	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 IR 7275 Rev. 4 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 3/01/2012 Status: Final	Final	3/01/2012	39%
IR	7694	Specification for Asset Reporting Format 1.1 IR 7694 (Final) Specification for Asset Reporting Format 1.1 6/21/2011 Status: Final	Final	6/21/2011	39%

1 2 3 4 next > last >>

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs