Search | CSRC

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( Dot gov ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Results

Showing 7 matching records.

Series	Number	Title Publications	Status	Release Date	Relevance*
White Paper		Software Supply Chain Security Guidance Under Executive Order (EO) 14028 Section 4e White Paper Software Supply Chain Security Guidance Under Executive Order (EO) 14028 Section 4e 2/04/2022 Status: Final Download: Paper; Software Supply Chain Security page	Final	2/04/2022	100%
White Paper	NIST CSWP 23	Recommended Criteria for Cybersecurity Labeling of Consumer Software White Paper NIST CSWP 23 Recommended Criteria for Cybersecurity Labeling of Consumer Software 2/04/2022 Status: Final Download: White Paper (DOI); Local Download; Consumer Software Criteria page	Final	2/04/2022	100%
SP	800-161 Rev. 1	Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations SP 800-161 Rev. 1 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations 5/05/2022 Status: Final Download: SP 800-161 Rev. 1 (DOI); Local Download; EO 14028: Software Security in Supply Chains; NIST’s Cyber Supply Chain Risk Management Program; NIST news article	Final	5/05/2022	88%
White Paper	NIST CSWP 24	Recommended Criteria for Cybersecurity Labeling for Consumer Internet of Things (IoT) Products White Paper NIST CSWP 24 Recommended Criteria for Cybersecurity Labeling for Consumer Internet of Things (IoT) Products 2/04/2022 Status: Final Download: White Paper (DOI); Local Download; IoT Product Criteria page	Final	2/04/2022	88%
SP	800-218	Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities SP 800-218 Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities 2/03/2022 Status: Final Download: SP 800-218 (DOI); Local Download; Potential updates; SP 800-218 Table in Excel; Delta from April 2020 paper; Delta from September 2021 public draft; SSDF Project homepage; Executive Order 14028, Improving the Nation's Cybersecurity	Final	2/03/2022	76%
SP	1800-31	Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways SP 1800-31 Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways 4/06/2022 Status: Final Download: SP 1800-31 (DOI); Local Download; Project homepage	Final	4/06/2022	65%
SP	800-40 Rev. 4	Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology SP 800-40 Rev. 4 Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology 4/06/2022 Status: Final Download: SP 800-40 Rev. 4 (DOI); Local Download	Final	4/06/2022	65%

* "Relevance" merely indicates the search engine's score for a document. It is based on the search parameters and information in the document's detailed record.

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- All Public Drafts
- View By Series
Other Pubs