You are viewing this page in an unauthorized frame window.

This is a potential security issue, you are being redirected to https://csrc.nist.gov.

An official website of the United States government Here's how you know

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( Dot gov ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

CSRC MENU

Projects
Publications Expand or Collapse

Drafts for Public Comment

All Public Drafts

Final Pubs

FIPS

Special Publications (SPs)

NISTIRs

ITL Bulletins

White Papers

Journal Articles

Conference Papers

Books
Topics Expand or Collapse

Security & Privacy

Applications

Technologies

Sectors

Laws & Regulations

Activities & Products
News & Updates
Events
Glossary
About CSRC Expand or Collapse
Computer Security Division
Applied Cybersecurity Division
Contact Us

Information Technology Laboratory

Computer Security Resource Center

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs

Final: Current list of all published NIST cybersecurity documents. Does not include "Withdrawn" documents. Includes FIPS, Special Publications, NISTIRs, ITL Bulletins, and NIST Cybersecurity White Papers.

Public Drafts: Current list of all draft NIST cybersecurity documents--they are typically posted for public comment. "Current" public drafts are the latest draft versions that have not yet been published as "Final." FIPS: Current Federal Information Processing Standard Publications (FIPS). Includes current (Final and Draft) FIPS.

SP 800 Series: Current NIST Special Publication (SP) 800 series publications, which focus on Computer/Information Security. Includes current (Final and Draft) SP 800 pubs.

All SP Series: Current NIST Special Publications (SP), including SP 800 (Computer/Information Security) and SP 1800 (Cybersecurity Practice Guides) pubs. Also includes SP 500 (Computer Systems Technology) pubs related to cybersecurity and privacy. Includes current (Final and Draft) NIST Special Publications.

NISTIRs: Current list of NIST Interagency or Internal Reports (NISTIR) related to cybersecurity and privacy. Includes current (Final and Draft) NISTIRs.

ITL Bulletins: Current list of NIST Information Technology Laboratory (ITL) Bulletins. White Papers: Consists of NIST Cybersecurity White Papers; NCCoE Project Descriptions, Building Blocks and Use Cases; and other NIST-authored papers that are not part of a formal series. Includes current (Final and Draft) papers.

Journal Articles: NIST-authored articles published in external journals and in the NIST Journal of Research (JRES).

Conference Papers: NIST-authored conference papers related to cybersecurity and privacy.

Books: NIST-authored books, book sections, and encyclopedia entries related to cybersecurity and privacy.

Search Search publication record data
(not a full text search)

Sort By

Results View

Items Per Page

Date

Status

Final
Public Draft
Withdrawn

Series

FIPS
SP
NISTIR
ITL Bulletin
White Paper
Building Block
Use Case
Journal Article
Conference Paper
Book

Topics

Security and Privacy

cryptography
cyber supply chain risk management
general security & privacy
identity & access management
privacy
- personally identifiable information
- privacy engineering
risk management
security & behavior
security measurement
security programs & operations
systems security engineering
- trustworthiness
zero trust

Technologies

artificial intelligence
big data
biometrics
blockchain
cloud & virtualization
combinatorial testing
complexity
hardware
mobile
networks
quantum information science
servers
smart cards
software & firmware
storage

Applications

communications & wireless
cyber-physical systems
cybersecurity education
cybersecurity framework
cybersecurity workforce
enterprise
forensics
industrial control systems
Internet of Things
positioning navigation & timing
small & medium business
telework
voting

Laws and Regulations

executive documents
laws
regulations
- Federal Acquisition Regulation

Activities and Products

annual reports
conferences & workshops
reference materials
standards development

Sectors

aerospace
energy
- smart grid
financial services
healthcare
hospitality
manufacturing
public safety
retail
telecommunications
transportation

Match ANY: Match ALL:

Control Family (800-53)

Control Families

AC - Access Control
AT - Awareness and Training
AU - Audit and Accountability
CA - Assessment, Authorization and Monitoring
CM - Configuration Management
CP - Contingency Planning
IA - Identification and Authentication
IR - Incident Response
MA - Maintenance
MP - Media Protection
PE - Physical and Environmental Protection
PL - Planning
PM - Program Management
PS - Personnel Security
PT - PII Processing and Transparency
RA - Risk Assessment
SA - System and Services Acquisition
SC - System and Communications Protection
SI - System and Information Integrity
SR - Supply Chain Risk Management

Match ANY: Match ALL:

Please fix the following:

Final: Published documents.

Public Draft: Documents have been posted as Public Drafts, typically with a public comment period.

Withdrawn: Documents that have been withdrawn, and are no longer current. This includes:
- Final publications that have been withdrawn;
- Public drafts that have been obsoleted by a subsequent draft or final publication;
- Public drafts that have been retired—further development was discontinued.

Search Results

Search Search publication record data
(not a full text search)

Sort By

Results View

Items Per Page

Advanced Search

Date

Status

Final
Public Draft
Withdrawn

Series

FIPS
SP
NISTIR
ITL Bulletin
White Paper
Building Block
Use Case
Journal Article
Conference Paper
Book

Topics

Security and Privacy

cryptography
cyber supply chain risk management
general security & privacy
identity & access management
privacy
- personally identifiable information
- privacy engineering
risk management
security & behavior
security measurement
security programs & operations
systems security engineering
- trustworthiness
zero trust

Technologies

artificial intelligence
big data
biometrics
blockchain
cloud & virtualization
combinatorial testing
complexity
hardware
mobile
networks
quantum information science
servers
smart cards
software & firmware
storage

Applications

communications & wireless
cyber-physical systems
cybersecurity education
cybersecurity framework
cybersecurity workforce
enterprise
forensics
industrial control systems
Internet of Things
positioning navigation & timing
small & medium business
telework
voting

Laws and Regulations

executive documents
laws
regulations
- Federal Acquisition Regulation

Activities and Products

annual reports
conferences & workshops
reference materials
standards development

Sectors

aerospace
energy
- smart grid
financial services
healthcare
hospitality
manufacturing
public safety
retail
telecommunications
transportation

Match ANY: Match ALL:

Control Family (800-53)

Control Families

AC - Access Control
AT - Awareness and Training
AU - Audit and Accountability
CA - Assessment, Authorization and Monitoring
CM - Configuration Management
CP - Contingency Planning
IA - Identification and Authentication
IR - Incident Response
MA - Maintenance
MP - Media Protection
PE - Physical and Environmental Protection
PL - Planning
PM - Program Management
PS - Personnel Security
PT - PII Processing and Transparency
RA - Risk Assessment
SA - System and Services Acquisition
SC - System and Communications Protection
SI - System and Information Integrity
SR - Supply Chain Risk Management

Match ANY: Match ALL:

Please fix the following:

Final: Published documents.

Public Draft: Documents have been posted as Public Drafts, typically with a public comment period.

Showing 4 matching records.

Series	Number	Title Publications	Status	Release Date	Relevance*
SP	800-172A	Assessing Enhanced Security Requirements for Controlled Unclassified Information SP 800-172A (Draft) Assessing Enhanced Security Requirements for Controlled Unclassified Information 4/27/2021 Status: Draft Download: SP 800-172A (Draft) (DOI); Local Download; Comment template	Draft	4/27/2021	100%
ITL Bulletin		Assessing Implementation of Controlled Unclassified Information (CUI) Security Requirements ITL Bulletin Assessing Implementation of Controlled Unclassified Information (CUI) Security Requirements 7/26/2018 Status: Final Download: July 2018 ITL Bulletin	Final	7/26/2018	67%
NISTIR	8011 Vol. 4	Automation Support for Security Control Assessments: Software Vulnerability Management NISTIR 8011 Vol. 4 Automation Support for Security Control Assessments: Software Vulnerability Management 4/28/2020 Status: Final Download: NISTIR 8011 Vol. 4 (DOI); Local Download	Final	4/28/2020	55%
NISTIR	8011 Vol. 3	Automation Support for Security Control Assessments: Software Asset Management NISTIR 8011 Vol. 3 Automation Support for Security Control Assessments: Software Asset Management 12/06/2018 Status: Final Download: NISTIR 8011 Vol. 3 (DOI); Local Download	Final	12/06/2018	49%

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs

HEADQUARTERS
100 Bureau Drive
Gaithersburg, MD 20899

(link is external)
(link is external)
(link is external)
(link is external)
(link is external)
(link is external)

Want updates about CSRC and our publications? Subscribe

Webmaster | Contact Us | Our Other Offices

Contact CSRC Webmaster: webmaster-csrc@nist.gov