Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results

Showing 1 through 25 of 80 matching records.

1 | 2 | 3 | 4 > >>

Series	Number	Title Publications	Status	Release Date	Relevance*
CSWP	53	Charting the Course for NIST OSCAL CSWP 53 (Initial Public Draft) Charting the Course for NIST OSCAL 12/02/2025 Status: Draft	Draft	12/02/2025	100%
CSWP	37B	Automation of the NIST Cryptographic Module Validation Program: April 2025 Status Report CSWP 37B (Initial Public Draft) Automation of the NIST Cryptographic Module Validation Program: April 2025 Status Report 9/10/2025 Status: Draft	Draft	9/10/2025	100%
IR	8011 Vol. 1 Rev. 1	Testable Controls and Security Capabilities for Continuous Monitoring: Volume 1 — Overview and Methodology IR 8011 Vol. 1 Rev. 1 (Initial Public Draft) Testable Controls and Security Capabilities for Continuous Monitoring: Volume 1 — Overview and Methodology 2/20/2025 Status: Draft	Draft	2/20/2025	100%
SP	1800-40	Automation of the NIST Cryptographic Module Validation Program SP 1800-40 (Initial Preliminary Draft) Automation of the NIST Cryptographic Module Validation Program 6/07/2023 Status: Draft	Draft	6/07/2023	100%
CSWP	37	Automation of the NIST Cryptographic Module Validation Program: September 2024 Status Report CSWP 37 (Initial Public Draft) Automation of the NIST Cryptographic Module Validation Program: September 2024 Status Report 10/31/2024 Status: Draft	Draft	10/31/2024	88%
SP	800-126A Rev. 4	SCAP 1.4 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 4 SP 800-126A Rev. 4 (Initial Public Draft) SCAP 1.4 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 4 12/11/2025 Status: Draft	Draft	12/11/2025	82%
SP	800-126 Rev. 4	Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.4 SP 800-126 Rev. 4 (Initial Public Draft) Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.4 12/11/2025 Status: Draft	Draft	12/11/2025	76%
SP	800-70 Rev. 5	National Checklist Program for IT Products: Guidelines for Checklist Users and Developers SP 800-70 Rev. 5 (Initial Public Draft) National Checklist Program for IT Products: Guidelines for Checklist Users and Developers 12/09/2025 Status: Draft	Draft	12/09/2025	76%
Project Description		Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses Project Description (Initial Public Draft) Continuous Monitoring for IT Infrastructure: Techniques for auditing user activity and detecting irregular activity events within small and medium-size businesses 6/17/2019 Status: Draft	Draft	6/17/2019	76%
SP	1800-44	Secure Software Development, Security, and Operations (DevSecOps) Practices SP 1800-44 (Initial Public Draft) Secure Software Development, Security, and Operations (DevSecOps) Practices 7/30/2025 Status: Draft	Draft	7/30/2025	73%
ITL Bulletin		Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements ITL Bulletin (Final) Security Content Automation Protocol (SCAP) Version 1.2 Validation Program Test Requirements 4/10/2013 Status: Final	Final	4/10/2013	66%
Book		Security Automation Essentials: Streamlined Enterprise Security Management & Monitoring with SCAP (1st ed.) Book (Final) Security Automation Essentials: Streamlined Enterprise Security Management & Monitoring with SCAP (1st ed.) 7/24/2012 Status: Final	Final	7/24/2012	66%
ITL Bulletin		Advancing Security Automation and Standardization: Revised Technical Specifications Issued for the Security Content Automation Protocol (SCAP) ITL Bulletin (Final) Advancing Security Automation and Standardization: Revised Technical Specifications Issued for the Security Content Automation Protocol (SCAP) 1/24/2012 Status: Final	Final	1/24/2012	66%
ITL Bulletin		Managing the Configuration of Information Systems with a Focus on Security ITL Bulletin (Final) Managing the Configuration of Information Systems with a Focus on Security 9/26/2011 Status: Final	Final	9/26/2011	66%
ITL Bulletin		Security Content Automation Protocol (SCAP): Helping Organizations Maintain and Verify the Security of Their Information Systems ITL Bulletin (Final) Security Content Automation Protocol (SCAP): Helping Organizations Maintain and Verify the Security of Their Information Systems 9/27/2010 Status: Final	Final	9/27/2010	66%
IR	7275 Rev. 2	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.3 IR 7275 Rev. 2 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1.3 4/30/2007 Status: Final	Final	4/30/2007	66%
Journal Article		Measuring the Exploitation of Weaknesses in the Wild Journal Article (Final) Measuring the Exploitation of Weaknesses in the Wild 6/26/2024 Status: Final	Final	6/26/2024	54%
Conference Paper		The Open Security Controls Assessment Language (OSCAL): Schema and Metaschema Conference Paper (Final) The Open Security Controls Assessment Language (OSCAL): Schema and Metaschema 7/30/2019 Status: Final	Final	7/30/2019	54%
Conference Paper		Cloud Security Automation Framework Conference Paper (Final) Cloud Security Automation Framework 9/18/2017 Status: Final	Final	9/18/2017	54%
ITL Bulletin		Federal Desktop Core Configuration (FDCC): Improving Security for Windows Desktop Operating Systems ITL Bulletin (Final) Federal Desktop Core Configuration (FDCC): Improving Security for Windows Desktop Operating Systems 2/27/2008 Status: Final	Final	2/27/2008	54%
IR	7275	Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1 IR 7275 (Final) Specification for the Extensible Configuration Checklist Description Format (XCCDF) Version 1.1 11/01/2006 Status: Final	Final	11/01/2006	54%
IR	5308	General Procedures for Registering Computer Security Objects IR 5308 (Final) General Procedures for Registering Computer Security Objects 12/01/1993 Status: Final	Final	12/01/1993	54%
Project Description		Automation of the Cryptographic Module Validation Program (CMVP) Project Description (Final) Automation of the Cryptographic Module Validation Program (CMVP) 7/01/2021 Status: Final	Final	7/01/2021	48%
Conference Paper		A Historical and Statistical Study of the Software Vulnerability Landscape Conference Paper (Final) A Historical and Statistical Study of the Software Vulnerability Landscape 4/18/2021 Status: Final	Final	4/18/2021	48%
Project Description		TLS Server Certificate Management Project Description (Final) TLS Server Certificate Management 11/09/2017 Status: Final	Final	11/09/2017	48%

1 2 3 4 next > last >>

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs