Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results

Showing 1 through 25 of 56 matching records.

1 | 2 | 3 > >>

Series	Number	Title Publications	Status	Release Date	Relevance*
SP	800-126A Rev. 4	SCAP 1.4 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 4 SP 800-126A Rev. 4 (Initial Public Draft) SCAP 1.4 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 4 12/11/2025 Status: Draft	Draft	12/11/2025	100%
SP	800-126 Rev. 4	Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.4 SP 800-126 Rev. 4 (Initial Public Draft) Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.4 12/11/2025 Status: Draft	Draft	12/11/2025	92%
IR	7275	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1 IR 7275 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1 11/01/2006 Status: Final	Final	11/01/2006	68%
ITL Bulletin		Securing Microsoft Windows XP Systems: NIST Recommendations for Using a Security Configuration Checklist ITL Bulletin (Final) Securing Microsoft Windows XP Systems: NIST Recommendations for Using a Security Configuration Checklist 11/30/2005 Status: Final	Final	11/30/2005	68%
ITL Bulletin		Securing Voice Over Internet Protocol (IP) Networks ITL Bulletin (Final) Securing Voice Over Internet Protocol (IP) Networks 10/01/2004 Status: Final	Final	10/01/2004	68%
IR	6462	CSPP - Guidance for COTS Security Protection Profiles (Formerly: CS2 - Protection Profile Guidance for Near-Term COTS) Version 1.0 IR 6462 (Final) CSPP - Guidance for COTS Security Protection Profiles (Formerly: CS2 - Protection Profile Guidance for Near-Term COTS) Version 1.0 12/01/1999 Status: Final	Final	12/01/1999	68%
ITL Bulletin		National Vulnerability Database (NVD): Helping Information Technology System Users and Developers Find Current Information About Cyber Security Vulnerabilities ITL Bulletin (Final) National Vulnerability Database (NVD): Helping Information Technology System Users and Developers Find Current Information About Cyber Security Vulnerabilities 10/27/2005 Status: Final	Final	10/27/2005	60%
IR	7188	Specification for the Extensible Configuration Checklist Description Format (XCCDF) IR 7188 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) 1/01/2005 Status: Final	Final	1/01/2005	60%
SP	800-55 Vol. 2	Measurement Guide for Information Security: Volume 2 — Developing an Information Security Measurement Program SP 800-55 Vol. 2 (Final) Measurement Guide for Information Security: Volume 2 — Developing an Information Security Measurement Program 12/04/2024 Status: Final	Final	12/04/2024	53%
IR	8246	Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers IR 8246 (Final) Collaborative Vulnerability Metadata Acceptance Process (CVMAP) for CVE Numbering Authorities (CNAs) and Authorized Data Publishers 12/15/2020 Status: Final	Final	12/15/2020	53%
Project Description		Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry Project Description (Final) Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry 3/01/2018 Status: Final	Final	3/01/2018	53%
IR	7275 Rev. 4	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 IR 7275 Rev. 4 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.2 3/01/2012 Status: Final	Final	3/01/2012	53%
IR	7275 Rev. 3	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.4 IR 7275 Rev. 3 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.4 1/01/2008 Status: Final	Final	1/01/2008	53%
ITL Bulletin		Preventing and Handling Malware Incidents: How to Protect Information Technology Systems from Malicious Code and Software ITL Bulletin (Final) Preventing and Handling Malware Incidents: How to Protect Information Technology Systems from Malicious Code and Software 12/22/2005 Status: Final	Final	12/22/2005	53%
IR	6985	COTS Security Protection Profile - Operating Systems (CSPP-OS) (Worked Example Applying Guidance of NISTIR-6462, CSPP) Version 1.0 IR 6985 (Final) COTS Security Protection Profile - Operating Systems (CSPP-OS) (Worked Example Applying Guidance of NISTIR-6462, CSPP) Version 1.0 4/01/2003 Status: Final	Final	4/01/2003	53%
SP	800-88 Rev. 2	Guidelines for Media Sanitization SP 800-88 Rev. 2 (Final) Guidelines for Media Sanitization 9/26/2025 Status: Final	Final	9/26/2025	45%
IR	8356	Security and Trust Considerations for Digital Twin Technology IR 8356 (Final) Security and Trust Considerations for Digital Twin Technology 2/14/2025 Status: Final	Final	2/14/2025	45%
SP	800-55 Vol. 1	Measurement Guide for Information Security: Volume 1 — Identifying and Selecting Measures SP 800-55 Vol. 1 (Final) Measurement Guide for Information Security: Volume 1 — Identifying and Selecting Measures 12/04/2024 Status: Final	Final	12/04/2024	45%
IR	7823	Advanced Metering Infrastructure Smart Meter Upgradeability Test Framework IR 7823 (Final) Advanced Metering Infrastructure Smart Meter Upgradeability Test Framework 3/02/2015 Status: Final	Final	3/02/2015	45%
ITL Bulletin		The National Vulnerability Database (NVD): Overview ITL Bulletin (Final) The National Vulnerability Database (NVD): Overview 12/18/2013 Status: Final	Final	12/18/2013	45%
ITL Bulletin		ITL Publishes Guidance on Enterprise Patch Management Technologies ITL Bulletin (Final) ITL Publishes Guidance on Enterprise Patch Management Technologies 8/08/2013 Status: Final	Final	8/08/2013	45%
SP	800-84	Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities SP 800-84 (Final) Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities 9/21/2006 Status: Final	Final	9/21/2006	45%
ITL Bulletin		Protecting Sensitive Information Processed and Stored in Information Technology (IT) Systems ITL Bulletin (Final) Protecting Sensitive Information Processed and Stored in Information Technology (IT) Systems 8/30/2006 Status: Final	Final	8/30/2006	45%
ITL Bulletin		Creating a Program to Manage Security Patches and Vulnerabilities: NIST Recommendations for Improving System Security ITL Bulletin (Final) Creating a Program to Manage Security Patches and Vulnerabilities: NIST Recommendations for Improving System Security 2/15/2006 Status: Final	Final	2/15/2006	45%
ITL Bulletin		Securing Wireless Infusion Pumps ITL Bulletin (Final) Securing Wireless Infusion Pumps 12/19/2018 Status: Final	Final	12/19/2018	38%

1 2 3 next > last >>

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs