Search | CSRC

Search Results

Showing 414 matching records.

Series	Number	Title Publications	Status	Release Date
SP	1800-36	Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security SP 1800-36 (Initial Preliminary Draft) Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security 5/03/2023 Status: Draft (Obsolete)	Draft (Obsolete)	5/03/2023
SP	1800-36	Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security SP 1800-36 (Initial Preliminary Draft) Trusted Internet of Things (IoT) Device Network-Layer Onboarding and Lifecycle Management: Enhancing Internet Protocol-Based IoT Device and Network Security 12/05/2022 Status: Draft (Obsolete)	Draft (Obsolete)	12/05/2022
SP	1800-35	Implementing a Zero Trust Architecture SP 1800-35 (2nd Preliminary Draft) Implementing a Zero Trust Architecture 7/19/2023 Status: Draft (Obsolete)	Draft (Obsolete)	7/19/2023
SP	1800-35	Implementing a Zero Trust Architecture SP 1800-35 (Initial Preliminary Draft) Implementing a Zero Trust Architecture 8/09/2022 Status: Draft (Obsolete)	Draft (Obsolete)	8/09/2022
SP	1800-34	Validating the Integrity of Computing Devices SP 1800-34 (Initial Public Draft) Validating the Integrity of Computing Devices 6/23/2022 Status: Draft (Obsolete)	Draft (Obsolete)	6/23/2022
SP	1800-34	Validating the Integrity of Computing Devices SP 1800-34 (Initial Preliminary Draft) Validating the Integrity of Computing Devices 11/22/2021 Status: Draft (Obsolete)	Draft (Obsolete)	11/22/2021
SP	1800-32	Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources SP 1800-32 (Initial Public Draft) Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources 9/21/2021 Status: Draft (Obsolete)	Draft (Obsolete)	9/21/2021
SP	1800-32	Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources SP 1800-32 (Initial Preliminary Draft) Securing the Industrial Internet of Things: Cybersecurity for Distributed Energy Resources 4/22/2021 Status: Draft (Obsolete)	Draft (Obsolete)	4/22/2021
SP	1800-31	Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways SP 1800-31 (Initial Public Draft) Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways 11/17/2021 Status: Draft (Obsolete)	Draft (Obsolete)	11/17/2021
SP	1800-31	Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways SP 1800-31 (Initial Preliminary Draft) Improving Enterprise Patching for General IT Systems: Utilizing Existing Tools and Performing Processes in Better Ways 9/10/2020 Status: Draft (Obsolete)	Draft (Obsolete)	9/10/2020
SP	1800-30	Securing Telehealth Remote Patient Monitoring Ecosystem SP 1800-30 (2nd Public Draft) Securing Telehealth Remote Patient Monitoring Ecosystem 5/06/2021 Status: Draft (Obsolete)	Draft (Obsolete)	5/06/2021
SP	1800-30	Securing Telehealth Remote Patient Monitoring Ecosystem SP 1800-30 (Initial Public Draft) Securing Telehealth Remote Patient Monitoring Ecosystem 11/16/2020 Status: Draft (Obsolete)	Draft (Obsolete)	11/16/2020
SP	1800-27	Securing Property Management Systems SP 1800-27 (Initial Public Draft) Securing Property Management Systems 9/14/2020 Status: Draft (Obsolete)	Draft (Obsolete)	9/14/2020
SP	1800-26	Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events SP 1800-26 (Initial Public Draft) Data Integrity: Detecting and Responding to Ransomware and Other Destructive Events 1/27/2020 Status: Draft (Obsolete)	Draft (Obsolete)	1/27/2020
SP	1800-25	Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events SP 1800-25 (Initial Public Draft) Data Integrity: Identifying and Protecting Assets Against Ransomware and Other Destructive Events 1/27/2020 Status: Draft (Obsolete)	Draft (Obsolete)	1/27/2020
SP	1800-24	Securing Picture Archiving and Communication System (PACS) SP 1800-24 (Initial Public Draft) Securing Picture Archiving and Communication System (PACS) 9/16/2019 Status: Draft (Obsolete)	Draft (Obsolete)	9/16/2019
SP	1800-23	Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry SP 1800-23 (Initial Public Draft) Energy Sector Asset Management: For Electric Utilities, Oil & Gas Industry 9/23/2019 Status: Draft (Obsolete)	Draft (Obsolete)	9/23/2019
SP	1800-22	Mobile Device Security: Bring Your Own Device (BYOD) SP 1800-22 (2nd Public Draft) Mobile Device Security: Bring Your Own Device (BYOD) 11/29/2022 Status: Draft (Obsolete)	Draft (Obsolete)	11/29/2022
SP	1800-22	Mobile Device Security: Bring Your Own Device (BYOD) SP 1800-22 (Initial Public Draft) Mobile Device Security: Bring Your Own Device (BYOD) 3/18/2021 Status: Draft (Obsolete)	Draft (Obsolete)	3/18/2021
SP	1800-21	Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) SP 1800-21 (Initial Public Draft) Mobile Device Security: Corporate-Owned Personally-Enabled (COPE) 7/22/2019 Status: Draft (Obsolete)	Draft (Obsolete)	7/22/2019
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 (Initial Public Draft) Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 10/27/2021 Status: Draft (Obsolete)	Draft (Obsolete)	10/27/2021
SP	1800-19	Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments SP 1800-19 (Initial Preliminary Draft) Trusted Cloud: Security Practice Guide for VMware Hybrid Cloud Infrastructure as a Service (IaaS) Environments 4/13/2020 Status: Draft (Obsolete)	Draft (Obsolete)	4/13/2020
SP	1800-18	Privileged Account Management for the Financial Services Sector SP 1800-18 (Initial Public Draft) Privileged Account Management for the Financial Services Sector 9/28/2018 Status: Draft (Obsolete)	Draft (Obsolete)	9/28/2018
SP	1800-17	Multifactor Authentication for E-Commerce SP 1800-17 (Initial Public Draft) Multifactor Authentication for E-Commerce 8/22/2018 Status: Draft (Obsolete)	Draft (Obsolete)	8/22/2018
SP	1800-16	Securing Web Transactions: TLS Server Certificate Management SP 1800-16 (Initial Public Draft) Securing Web Transactions: TLS Server Certificate Management 7/17/2019 Status: Draft (Obsolete)	Draft (Obsolete)	7/17/2019
SP	1800-16	Securing Web Transactions: TLS Server Certificate Management SP 1800-16 (Initial Preliminary Draft) Securing Web Transactions: TLS Server Certificate Management 11/29/2018 Status: Draft (Obsolete)	Draft (Obsolete)	11/29/2018
SP	1800-15	Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) SP 1800-15 (Initial Public Draft) Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) 9/16/2020 Status: Draft (Obsolete)	Draft (Obsolete)	9/16/2020
SP	1800-15	Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) SP 1800-15 (2nd Preliminary Draft) Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) 11/21/2019 Status: Draft (Obsolete)	Draft (Obsolete)	11/21/2019
SP	1800-15	Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) SP 1800-15 (Initial Preliminary Draft) Securing Small Business and Home Internet of Things (IoT) Devices: Mitigating Network-Based Attacks Using Manufacturer Usage Description (MUD) 4/24/2019 Status: Draft (Obsolete)	Draft (Obsolete)	4/24/2019
SP	1800-14	Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation SP 1800-14 (Initial Public Draft) Protecting the Integrity of Internet Routing: Border Gateway Protocol (BGP) Route Origin Validation 9/04/2018 Status: Draft (Obsolete)	Draft (Obsolete)	9/04/2018
SP	1800-13	Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders SP 1800-13 (2nd Public Draft) Mobile Application Single Sign-On: Improving Authentication for Public Safety First Responders 5/29/2019 Status: Draft (Obsolete)	Draft (Obsolete)	5/29/2019
SP	1800-13	Mobile Application Single Sign-On: Improving Authentication for Public Safety and First Responders SP 1800-13 (Initial Public Draft) Mobile Application Single Sign-On: Improving Authentication for Public Safety and First Responders 4/16/2018 Status: Draft (Obsolete)	Draft (Obsolete)	4/16/2018
SP	1800-12	Derived Personal Identity Verification (PIV) Credentials SP 1800-12 (2nd Public Draft) Derived Personal Identity Verification (PIV) Credentials 8/02/2018 Status: Draft (Obsolete)	Draft (Obsolete)	8/02/2018
SP	1800-12	Derived Personal Identity Verification (PIV) Credentials SP 1800-12 (Initial Public Draft) Derived Personal Identity Verification (PIV) Credentials 9/29/2017 Status: Draft (Obsolete)	Draft (Obsolete)	9/29/2017
SP	1800-11	Data Integrity: Recovering from Ransomware and Other Destructive Events SP 1800-11 (Initial Public Draft) Data Integrity: Recovering from Ransomware and Other Destructive Events 9/06/2017 Status: Draft (Obsolete)	Draft (Obsolete)	9/06/2017
SP	1800-10	Protecting Information and System Integrity in Industrial Control System Environments: Cybersecurity for the Manufacturing Sector SP 1800-10 (Initial Public Draft) Protecting Information and System Integrity in Industrial Control System Environments: Cybersecurity for the Manufacturing Sector 9/23/2021 Status: Draft (Obsolete)	Draft (Obsolete)	9/23/2021
SP	1800-9	Access Rights Management for the Financial Services Sector SP 1800-9 (Initial Public Draft) Access Rights Management for the Financial Services Sector 8/31/2017 Status: Draft (Obsolete)	Draft (Obsolete)	8/31/2017
SP	1800-8	Securing Wireless Infusion Pumps in Healthcare Delivery Organizations SP 1800-8 (Initial Public Draft) Securing Wireless Infusion Pumps in Healthcare Delivery Organizations 5/08/2017 Status: Draft (Obsolete)	Draft (Obsolete)	5/08/2017
SP	1800-7	Situational Awareness for Electric Utilities SP 1800-7 (Initial Public Draft) Situational Awareness for Electric Utilities 2/16/2017 Status: Draft (Obsolete)	Draft (Obsolete)	2/16/2017
SP	1800-6	Domain Name Systems-Based Electronic Mail Security SP 1800-6 (Initial Public Draft) Domain Name Systems-Based Electronic Mail Security 11/02/2016 Status: Draft (Obsolete)	Draft (Obsolete)	11/02/2016
SP	1800-5	IT Asset Management: Financial Services SP 1800-5 (Initial Public Draft) IT Asset Management: Financial Services 10/26/2015 Status: Draft (Obsolete)	Draft (Obsolete)	10/26/2015
SP	1800-4	Mobile Device Security: Cloud and Hybrid Builds SP 1800-4 (Initial Public Draft) Mobile Device Security: Cloud and Hybrid Builds 11/02/2015 Status: Draft (Obsolete)	Draft (Obsolete)	11/02/2015
SP	1800-3	Attribute Based Access Control SP 1800-3 (2nd Public Draft) Attribute Based Access Control 9/20/2017 Status: Draft (Obsolete)	Draft (Obsolete)	9/20/2017
SP	1800-3	Attribute Based Access Control SP 1800-3 (Initial Public Draft) Attribute Based Access Control 9/29/2015 Status: Draft (Obsolete)	Draft (Obsolete)	9/29/2015
SP	1800-2	Identity and Access Management for Electric Utilities SP 1800-2 (Initial Public Draft) Identity and Access Management for Electric Utilities 8/25/2015 Status: Draft (Obsolete)	Draft (Obsolete)	8/25/2015
SP	1800-1	Securing Electronic Health Records on Mobile Devices SP 1800-1 (Initial Public Draft) Securing Electronic Health Records on Mobile Devices 7/28/2015 Status: Draft (Obsolete)	Draft (Obsolete)	7/28/2015
SP	1500-4 Rev. 1	NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 2 SP 1500-4 Rev. 1 (Final) (Withdrawn) NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 2 6/26/2018 Status: Withdrawn	Withdrawn	6/26/2018
SP	1500-4	NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 1 SP 1500-4 (Final) (Withdrawn) NIST Big Data Interoperability Framework: Volume 4, Security and Privacy Version 1 10/22/2015 Status: Withdrawn	Withdrawn	10/22/2015
SP	800-221A	Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio SP 800-221A (Initial Public Draft) Information and Communications Technology (ICT) Risk Outcomes: Integrating ICT Risk Management Programs with the Enterprise Risk Portfolio 7/20/2022 Status: Draft (Obsolete)	Draft (Obsolete)	7/20/2022
SP	800-221	Enterprise Impacts of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio SP 800-221 (Initial Public Draft) Enterprise Impacts of Information and Communications Technology Risk: Governing and Managing ICT Risk Programs Within an Enterprise Risk Portfolio 7/20/2022 Status: Draft (Obsolete)	Draft (Obsolete)	7/20/2022
SP	800-219 Rev. 1	Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) SP 800-219 Rev. 1 (Initial Public Draft) Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) 3/13/2023 Status: Draft (Obsolete)	Draft (Obsolete)	3/13/2023
SP	800-219	Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) SP 800-219 (Final) (Withdrawn) Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) 6/24/2022 Status: Withdrawn	Withdrawn	6/24/2022
SP	800-219	Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) SP 800-219 (Initial Public Draft) Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) 2/17/2022 Status: Draft (Obsolete)	Draft (Obsolete)	2/17/2022
SP	800-218	Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities SP 800-218 (Initial Public Draft) Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities 9/30/2021 Status: Draft (Obsolete)	Draft (Obsolete)	9/30/2021
SP	800-216	Recommendations for Federal Vulnerability Disclosure Guidelines SP 800-216 (Initial Public Draft) Recommendations for Federal Vulnerability Disclosure Guidelines 6/07/2021 Status: Draft (Obsolete)	Draft (Obsolete)	6/07/2021
SP	800-215	Guide to a Secure Enterprise Network Landscape SP 800-215 (Initial Public Draft) Guide to a Secure Enterprise Network Landscape 8/05/2022 Status: Draft (Obsolete)	Draft (Obsolete)	8/05/2022
SP	800-213	IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements SP 800-213 (Initial Public Draft) IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements 12/15/2020 Status: Draft (Obsolete)	Draft (Obsolete)	12/15/2020
SP	800-210	General Access Control Guidance for Cloud Systems SP 800-210 (Initial Public Draft) General Access Control Guidance for Cloud Systems 4/01/2020 Status: Draft (Obsolete)	Draft (Obsolete)	4/01/2020
SP	800-209	Security Guidelines for Storage Infrastructure SP 800-209 (Initial Public Draft) Security Guidelines for Storage Infrastructure 7/21/2020 Status: Draft (Obsolete)	Draft (Obsolete)	7/21/2020
SP	800-208	Recommendation for Stateful Hash-Based Signature Schemes SP 800-208 (Initial Public Draft) Recommendation for Stateful Hash-Based Signature Schemes 12/11/2019 Status: Draft (Obsolete)	Draft (Obsolete)	12/11/2019
SP	800-207A	A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Cloud Environments SP 800-207A (Initial Public Draft) A Zero Trust Architecture Model for Access Control in Cloud-Native Applications in Multi-Cloud Environments 4/18/2023 Status: Draft (Obsolete)	Draft (Obsolete)	4/18/2023
SP	800-207	Zero Trust Architecture SP 800-207 (2nd Public Draft) Zero Trust Architecture 2/13/2020 Status: Draft (Obsolete)	Draft (Obsolete)	2/13/2020
SP	800-207	Zero Trust Architecture SP 800-207 (Initial Public Draft) Zero Trust Architecture 9/23/2019 Status: Draft (Obsolete)	Draft (Obsolete)	9/23/2019
SP	800-205	Attribute Considerations for Access Control Systems SP 800-205 (Initial Public Draft) Attribute Considerations for Access Control Systems 2/13/2019 Status: Draft (Obsolete)	Draft (Obsolete)	2/13/2019
SP	800-204C	Implementation of DevSecOps for a Microservices-based Application with Service Mesh SP 800-204C (Initial Public Draft) Implementation of DevSecOps for a Microservices-based Application with Service Mesh 9/29/2021 Status: Draft (Obsolete)	Draft (Obsolete)	9/29/2021
SP	800-204B	Attribute-based Access Control for Microservices-based Applications using a Service Mesh SP 800-204B (Initial Public Draft) Attribute-based Access Control for Microservices-based Applications using a Service Mesh 1/26/2021 Status: Draft (Obsolete)	Draft (Obsolete)	1/26/2021
SP	800-204A	Building Secure Microservices-based Applications Using Service-Mesh Architecture SP 800-204A (Initial Public Draft) Building Secure Microservices-based Applications Using Service-Mesh Architecture 1/17/2020 Status: Draft (Obsolete)	Draft (Obsolete)	1/17/2020
SP	800-204	Security Strategies for Microservices-based Application Systems SP 800-204 (Initial Public Draft) Security Strategies for Microservices-based Application Systems 3/25/2019 Status: Draft (Obsolete)	Draft (Obsolete)	3/25/2019
SP	800-202	Quick Start Guide for Populating Mobile Test Devices SP 800-202 (Initial Public Draft) Quick Start Guide for Populating Mobile Test Devices 3/26/2018 Status: Draft (Obsolete)	Draft (Obsolete)	3/26/2018
SP	800-193	Platform Firmware Resiliency Guidelines SP 800-193 (Initial Public Draft) Platform Firmware Resiliency Guidelines 5/30/2017 Status: Draft (Obsolete)	Draft (Obsolete)	5/30/2017
SP	800-191	The NIST Definition of Fog Computing SP 800-191 (Initial Public Draft) The NIST Definition of Fog Computing 8/21/2017 Status: Draft (Obsolete)	Draft (Obsolete)	8/21/2017
SP	800-190	Application Container Security Guide SP 800-190 (2nd Public Draft) Application Container Security Guide 7/13/2017 Status: Draft (Obsolete)	Draft (Obsolete)	7/13/2017
SP	800-190	Application Container Security Guide SP 800-190 (Initial Public Draft) Application Container Security Guide 4/10/2017 Status: Draft (Obsolete)	Draft (Obsolete)	4/10/2017
SP	800-189	Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation SP 800-189 (2nd Public Draft) Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation 10/17/2019 Status: Draft (Obsolete)	Draft (Obsolete)	10/17/2019
SP	800-189	Secure Interdomain Traffic Exchange: BGP Robustness and DDoS Mitigation SP 800-189 (Initial Public Draft) Secure Interdomain Traffic Exchange: BGP Robustness and DDoS Mitigation 12/17/2018 Status: Draft (Obsolete)	Draft (Obsolete)	12/17/2018
SP	800-188	De-Identifying Government Data Sets SP 800-188 (3rd Public Draft) De-Identifying Government Data Sets 11/15/2022 Status: Draft (Obsolete)	Draft (Obsolete)	11/15/2022
SP	800-188	De-Identifying Government Datasets SP 800-188 (2nd Public Draft) De-Identifying Government Datasets 12/15/2016 Status: Draft (Obsolete)	Draft (Obsolete)	12/15/2016
SP	800-188	De-Identifying Government Datasets SP 800-188 (Initial Public Draft) De-Identifying Government Datasets 8/25/2016 Status: Draft (Obsolete)	Draft (Obsolete)	8/25/2016
SP	800-187	Guide to LTE Security SP 800-187 (Initial Public Draft) Guide to LTE Security 11/21/2016 Status: Draft (Obsolete)	Draft (Obsolete)	11/21/2016
SP	800-186	Recommendations for Discrete Logarithm-Based Cryptography: Elliptic Curve Domain Parameters SP 800-186 (Initial Public Draft) Recommendations for Discrete Logarithm-Based Cryptography: Elliptic Curve Domain Parameters 10/31/2019 Status: Draft (Obsolete)	Draft (Obsolete)	10/31/2019
SP	800-185	SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash SP 800-185 (Initial Public Draft) SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash 8/04/2016 Status: Draft (Obsolete)	Draft (Obsolete)	8/04/2016
SP	800-184	Guide for Cybersecurity Event Recovery SP 800-184 (Initial Public Draft) Guide for Cybersecurity Event Recovery 6/06/2016 Status: Draft (Obsolete)	Draft (Obsolete)	6/06/2016
SP	800-181 Rev. 1	Workforce Framework for Cybersecurity (NICE Framework) SP 800-181 Rev. 1 (Initial Public Draft) Workforce Framework for Cybersecurity (NICE Framework) 7/15/2020 Status: Draft (Obsolete)	Draft (Obsolete)	7/15/2020
SP	800-181	National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework SP 800-181 (Final) (Withdrawn) National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework 8/07/2017 Status: Withdrawn	Withdrawn	8/07/2017
SP	800-181	NICE Cybersecurity Workforce Framework (NCWF): National Initiative for Cybersecurity Education SP 800-181 (Initial Public Draft) NICE Cybersecurity Workforce Framework (NCWF): National Initiative for Cybersecurity Education 11/02/2016 Status: Draft (Obsolete)	Draft (Obsolete)	11/02/2016
SP	800-179 Rev. 1	Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-179 Rev. 1 (Initial Public Draft) Guide to Securing Apple macOS 10.12 Systems for IT Professionals: A NIST Security Configuration Checklist 10/19/2018 Status: Draft (Obsolete)	Draft (Obsolete)	10/19/2018
SP	800-179	Guide to Securing Apple OS X 10.10 Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-179 (Final) (Withdrawn) Guide to Securing Apple OS X 10.10 Systems for IT Professionals: A NIST Security Configuration Checklist 12/05/2016 Status: Withdrawn	Withdrawn	12/05/2016
SP	800-179	Guide to Securing Apple OS X 10.10 Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-179 (Initial Public Draft) Guide to Securing Apple OS X 10.10 Systems for IT Professionals: A NIST Security Configuration Checklist 6/23/2016 Status: Draft (Obsolete)	Draft (Obsolete)	6/23/2016
SP	800-178	A Comparison of Attribute Based Access Control (ABAC) Standards for Data Services: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) SP 800-178 (Initial Public Draft) A Comparison of Attribute Based Access Control (ABAC) Standards for Data Services: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) 12/02/2015 Status: Draft (Obsolete)	Draft (Obsolete)	12/02/2015
SP	800-177 Rev. 1	Trustworthy Email SP 800-177 Rev. 1 (2nd Public Draft) Trustworthy Email 12/15/2017 Status: Draft (Obsolete)	Draft (Obsolete)	12/15/2017
SP	800-177 Rev. 1	Trustworthy Email SP 800-177 Rev. 1 (Initial Public Draft) Trustworthy Email 9/13/2017 Status: Draft (Obsolete)	Draft (Obsolete)	9/13/2017
SP	800-177	Trustworthy Email SP 800-177 (Final) (Withdrawn) Trustworthy Email 9/07/2016 Status: Withdrawn	Withdrawn	9/07/2016
SP	800-177	Trustworthy Email SP 800-177 (Initial Public Draft) Trustworthy Email 3/30/2016 Status: Draft (Obsolete)	Draft (Obsolete)	3/30/2016
SP	800-175B Rev. 1	Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms SP 800-175B Rev. 1 (Initial Public Draft) Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms 7/03/2019 Status: Draft (Obsolete)	Draft (Obsolete)	7/03/2019
SP	800-175B	Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms SP 800-175B (Final) (Withdrawn) Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms 8/22/2016 Status: Withdrawn	Withdrawn	8/22/2016
SP	800-175B	Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms SP 800-175B (Initial Public Draft) Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms 3/11/2016 Status: Draft (Obsolete)	Draft (Obsolete)	3/11/2016
SP	800-175A	Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies SP 800-175A (Initial Public Draft) Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies 4/05/2016 Status: Draft (Obsolete)	Draft (Obsolete)	4/05/2016
SP	800-172A	Assessing Enhanced Security Requirements for Controlled Unclassified Information SP 800-172A (Initial Public Draft) Assessing Enhanced Security Requirements for Controlled Unclassified Information 4/27/2021 Status: Draft (Obsolete)	Draft (Obsolete)	4/27/2021
SP	800-172	Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171 SP 800-172 (Final Public Draft) Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171 7/06/2020 Status: Draft (Obsolete)	Draft (Obsolete)	7/06/2020
SP	800-171 Rev. 3	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 3 (Initial Public Draft) Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 5/10/2023 Status: Draft (Obsolete)	Draft (Obsolete)	5/10/2023
SP	800-171 Rev. 3	Pre-Draft Call for Comments: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 3 (Initial Preliminary Draft) Pre-Draft Call for Comments: Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 7/19/2022 Status: Draft (Obsolete)	Draft (Obsolete)	7/19/2022
SP	800-171 Rev. 2	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 2 (Final) (Withdrawn) Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 2/21/2020 Status: Withdrawn	Withdrawn	2/21/2020
SP	800-171B	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations: Enhanced Security Requirements for Critical Programs and High Value Assets SP 800-171B (Initial Public Draft) Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations: Enhanced Security Requirements for Critical Programs and High Value Assets 6/19/2019 Status: Draft (Obsolete)	Draft (Obsolete)	6/19/2019
SP	800-171 Rev. 2	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 2 (Initial Public Draft) Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 6/19/2019 Status: Draft (Obsolete)	Draft (Obsolete)	6/19/2019
SP	800-171 Rev. 1	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 1 (Final) (Withdrawn) Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 6/07/2018 Status: Withdrawn	Withdrawn	6/07/2018
SP	800-171 Rev. 1	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 1 (Final) (Withdrawn) Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 2/20/2018 Status: Withdrawn	Withdrawn	2/20/2018
SP	800-171A	Assessing Security Requirements for Controlled Unclassified Information SP 800-171A (Final Public Draft) Assessing Security Requirements for Controlled Unclassified Information 2/20/2018 Status: Draft (Obsolete)	Draft (Obsolete)	2/20/2018
SP	800-171 Rev. 1	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 1 (Final) (Withdrawn) Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 11/28/2017 Status: Withdrawn	Withdrawn	11/28/2017
SP	800-171A	Assessing Security Requirements for Controlled Unclassified Information SP 800-171A (Initial Public Draft) Assessing Security Requirements for Controlled Unclassified Information 11/28/2017 Status: Draft (Obsolete)	Draft (Obsolete)	11/28/2017
SP	800-171 Rev. 1	Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations SP 800-171 Rev. 1 (Final) (Withdrawn) Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations 12/20/2016 Status: Withdrawn	Withdrawn	12/20/2016
SP	800-171 Rev. 1	Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations SP 800-171 Rev. 1 (Initial Public Draft) Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations 8/16/2016 Status: Draft (Obsolete)	Draft (Obsolete)	8/16/2016
SP	800-171	Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations SP 800-171 (Final) (Withdrawn) Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations 1/21/2016 Status: Withdrawn	Withdrawn	1/21/2016
SP	800-171	Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations SP 800-171 (Final) (Withdrawn) Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations 10/01/2015 Status: Withdrawn	Withdrawn	10/01/2015
SP	800-171	Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations SP 800-171 (Final) (Withdrawn) Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations 6/18/2015 Status: Withdrawn	Withdrawn	6/18/2015
SP	800-164	Guidelines on Hardware-Rooted Security in Mobile Devices SP 800-164 (Initial Public Draft) Guidelines on Hardware-Rooted Security in Mobile Devices 10/31/2012 Status: Draft (Obsolete)	Draft (Obsolete)	10/31/2012
SP	800-163 Rev. 1	Vetting the Security of Mobile Applications SP 800-163 Rev. 1 (Initial Public Draft) Vetting the Security of Mobile Applications 7/23/2018 Status: Draft (Obsolete)	Draft (Obsolete)	7/23/2018
SP	800-163	Vetting the Security of Mobile Applications SP 800-163 (Final) (Withdrawn) Vetting the Security of Mobile Applications 1/26/2015 Status: Withdrawn	Withdrawn	1/26/2015
SP	800-162	Guide to Attribute Based Access Control (ABAC) Definition and Considerations SP 800-162 (Final) (Withdrawn) Guide to Attribute Based Access Control (ABAC) Definition and Considerations 2/25/2019 Status: Withdrawn	Withdrawn	2/25/2019
SP	800-162	Guide to Attribute Based Access Control (ABAC) Definition and Considerations SP 800-162 (Final) (Withdrawn) Guide to Attribute Based Access Control (ABAC) Definition and Considerations 1/16/2014 Status: Withdrawn	Withdrawn	1/16/2014
SP	800-161 Rev. 1	Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations SP 800-161 Rev. 1 (2nd Public Draft) Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations 10/28/2021 Status: Draft (Obsolete)	Draft (Obsolete)	10/28/2021
SP	800-161 Rev. 1	Cyber Supply Chain Risk Management Practices for Systems and Organizations SP 800-161 Rev. 1 (Initial Public Draft) Cyber Supply Chain Risk Management Practices for Systems and Organizations 4/29/2021 Status: Draft (Obsolete)	Draft (Obsolete)	4/29/2021
SP	800-161 Rev. 1	PRE-DRAFT Call for Comments: Supply Chain Risk Management Practices for Federal Information Systems and Organizations SP 800-161 Rev. 1 (Initial Preliminary Draft) PRE-DRAFT Call for Comments: Supply Chain Risk Management Practices for Federal Information Systems and Organizations 2/04/2020 Status: Draft (Obsolete)	Draft (Obsolete)	2/04/2020
SP	800-161	Supply Chain Risk Management Practices for Federal Information Systems and Organizations SP 800-161 (Final) (Withdrawn) Supply Chain Risk Management Practices for Federal Information Systems and Organizations 4/08/2015 Status: Withdrawn	Withdrawn	4/08/2015
SP	800-160 Vol. 2 Rev. 1	Developing Cyber-Resilient Systems: A Systems Security Engineering Approach SP 800-160 Vol. 2 Rev. 1 (Initial Public Draft) Developing Cyber-Resilient Systems: A Systems Security Engineering Approach 8/05/2021 Status: Draft (Obsolete)	Draft (Obsolete)	8/05/2021
SP	800-160 Vol. 2	Developing Cyber Resilient Systems: A Systems Security Engineering Approach SP 800-160 Vol. 2 (Final) (Withdrawn) Developing Cyber Resilient Systems: A Systems Security Engineering Approach 11/27/2019 Status: Withdrawn	Withdrawn	11/27/2019
SP	800-160 Vol. 2	Developing Cyber Resilient Systems: A Systems Security Engineering Approach SP 800-160 Vol. 2 (Final Public Draft) Developing Cyber Resilient Systems: A Systems Security Engineering Approach 9/04/2019 Status: Draft (Obsolete)	Draft (Obsolete)	9/04/2019
SP	800-160 Vol. 2	Systems Security Engineering: Cyber Resiliency Considerations for the Engineering of Trustworthy Secure Systems SP 800-160 Vol. 2 (Initial Public Draft) Systems Security Engineering: Cyber Resiliency Considerations for the Engineering of Trustworthy Secure Systems 3/21/2018 Status: Draft (Obsolete)	Draft (Obsolete)	3/21/2018
SP	800-160 Vol. 1 Rev. 1	Engineering Trustworthy Secure Systems SP 800-160 Vol. 1 Rev. 1 (Final Public Draft) Engineering Trustworthy Secure Systems 6/07/2022 Status: Draft (Obsolete)	Draft (Obsolete)	6/07/2022
SP	800-160 Vol. 1 Rev. 1	Engineering Trustworthy Secure Systems SP 800-160 Vol. 1 Rev. 1 (Initial Public Draft) Engineering Trustworthy Secure Systems 1/11/2022 Status: Draft (Obsolete)	Draft (Obsolete)	1/11/2022
SP	800-160 Vol. 1	Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems SP 800-160 Vol. 1 (Final) (Withdrawn) Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems 3/21/2018 Status: Withdrawn	Withdrawn	3/21/2018
SP	800-160	Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems SP 800-160 (Final) (Withdrawn) Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems 1/03/2018 Status: Withdrawn	Withdrawn	1/03/2018
SP	800-160	Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems SP 800-160 (Final) (Withdrawn) Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems 11/14/2016 Status: Withdrawn	Withdrawn	11/14/2016
SP	800-160	Systems Security Engineering Guideline: An Integrated Approach to Building Trustworthy Resilient Systems SP 800-160 (Final Public Draft) Systems Security Engineering Guideline: An Integrated Approach to Building Trustworthy Resilient Systems 9/22/2016 Status: Draft (Obsolete)	Draft (Obsolete)	9/22/2016
SP	800-160	Systems Security Engineering Guideline: An Integrated Approach to Building Trustworthy Resilient Systems SP 800-160 (2nd Public Draft) Systems Security Engineering Guideline: An Integrated Approach to Building Trustworthy Resilient Systems 5/04/2016 Status: Draft (Obsolete)	Draft (Obsolete)	5/04/2016
SP	800-160	Systems Security Engineering: An Integrated Approach to Building Trustworthy Resilient Systems SP 800-160 (Initial Public Draft) Systems Security Engineering: An Integrated Approach to Building Trustworthy Resilient Systems 5/13/2014 Status: Draft (Obsolete)	Draft (Obsolete)	5/13/2014
SP	800-150	Guide to Cyber Threat Information Sharing SP 800-150 (Initial Public Draft) Guide to Cyber Threat Information Sharing 4/21/2016 Status: Draft (Obsolete)	Draft (Obsolete)	4/21/2016
SP	800-140F	CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759:2014(E) SP 800-140F (Initial Public Draft) CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759:2014(E) 10/09/2019 Status: Draft (Obsolete)	Draft (Obsolete)	10/09/2019
SP	800-140E	CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790:2012 Annex E and ISO/IEC 24579:2017 SP 800-140E (Initial Public Draft) CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790:2012 Annex E and ISO/IEC 24579:2017 10/09/2019 Status: Draft (Obsolete)	Draft (Obsolete)	10/09/2019
SP	800-140D Rev. 1	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D Rev. 1 (Final) (Withdrawn) CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 5/20/2022 Status: Withdrawn	Withdrawn	5/20/2022
SP	800-140D Rev. 1	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D Rev. 1 (2nd Public Draft) CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 2/10/2022 Status: Draft (Obsolete)	Draft (Obsolete)	2/10/2022
SP	800-140D Rev. 1	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D Rev. 1 (Initial Public Draft) CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 8/20/2021 Status: Draft (Obsolete)	Draft (Obsolete)	8/20/2021
SP	800-140D	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140D (Final) (Withdrawn) CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Withdrawn	Withdrawn	3/20/2020
SP	800-140D	CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759:2014(E) SP 800-140D (Initial Public Draft) CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759:2014(E) 10/09/2019 Status: Draft (Obsolete)	Draft (Obsolete)	10/09/2019
SP	800-140C Rev. 1	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C Rev. 1 (Final) (Withdrawn) CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 5/20/2022 Status: Withdrawn	Withdrawn	5/20/2022
SP	800-140C Rev. 1	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C Rev. 1 (2nd Public Draft) CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 2/10/2022 Status: Draft (Obsolete)	Draft (Obsolete)	2/10/2022
SP	800-140C Rev. 1	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C Rev. 1 (Initial Public Draft) CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 8/20/2021 Status: Draft (Obsolete)	Draft (Obsolete)	8/20/2021
SP	800-140C	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C (Final) (Withdrawn) CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 3/20/2020 Status: Withdrawn	Withdrawn	3/20/2020
SP	800-140C	CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140C (Initial Public Draft) CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 10/09/2019 Status: Draft (Obsolete)	Draft (Obsolete)	10/09/2019
SP	800-140B Rev. 1	CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B Rev. 1 (2nd Public Draft) CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 10/17/2022 Status: Draft (Obsolete)	Draft (Obsolete)	10/17/2022
SP	800-140B Rev. 1	CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B Rev. 1 (Initial Public Draft) CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 5/12/2022 Status: Draft (Obsolete)	Draft (Obsolete)	5/12/2022
SP	800-140B	CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B (Final) (Withdrawn) CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 3/20/2020 Status: Withdrawn	Withdrawn	3/20/2020
SP	800-140B	CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B SP 800-140B (Initial Public Draft) CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B 10/09/2019 Status: Draft (Obsolete)	Draft (Obsolete)	10/09/2019
SP	800-140A	CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140A (Initial Public Draft) CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 10/09/2019 Status: Draft (Obsolete)	Draft (Obsolete)	10/09/2019
SP	800-140	FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 SP 800-140 (Initial Public Draft) FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 10/09/2019 Status: Draft (Obsolete)	Draft (Obsolete)	10/09/2019
SP	800-137A	Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment SP 800-137A (Initial Public Draft) Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment 1/13/2020 Status: Draft (Obsolete)	Draft (Obsolete)	1/13/2020
SP	800-135	Recommendation for Existing Application-Specific Key Derivation Functions SP 800-135 (Final) (Withdrawn) Recommendation for Existing Application-Specific Key Derivation Functions 12/23/2010 Status: Withdrawn	Withdrawn	12/23/2010
SP	800-133 Rev. 2	Recommendation for Cryptographic Key Generation SP 800-133 Rev. 2 (Initial Public Draft) Recommendation for Cryptographic Key Generation 3/05/2020 Status: Draft (Obsolete)	Draft (Obsolete)	3/05/2020
SP	800-133 Rev. 1	Recommendation for Cryptographic Key Generation SP 800-133 Rev. 1 (Final) (Withdrawn) Recommendation for Cryptographic Key Generation 7/23/2019 Status: Withdrawn	Withdrawn	7/23/2019
SP	800-133 Rev. 1	Recommendation for Cryptographic Key Generation SP 800-133 Rev. 1 (Initial Public Draft) Recommendation for Cryptographic Key Generation 3/06/2019 Status: Draft (Obsolete)	Draft (Obsolete)	3/06/2019
SP	800-133	Recommendation for Cryptographic Key Generation SP 800-133 (Final) (Withdrawn) Recommendation for Cryptographic Key Generation 12/21/2012 Status: Withdrawn	Withdrawn	12/21/2012
SP	800-131C	Transitions: Validating the Transition from FIPS 186-2 to FIPS 186-3 SP 800-131C (Initial Public Draft) Transitions: Validating the Transition from FIPS 186-2 to FIPS 186-3 2/10/2011 Status: Draft (Obsolete)	Draft (Obsolete)	2/10/2011
SP	800-131B	Transitions: Validation of Transitioning Cryptographic Algorithm and Key Lengths SP 800-131B (Initial Public Draft) Transitions: Validation of Transitioning Cryptographic Algorithm and Key Lengths 2/10/2011 Status: Draft (Obsolete)	Draft (Obsolete)	2/10/2011
SP	800-131A Rev. 2	Transitioning the Use of Cryptographic Algorithms and Key Lengths SP 800-131A Rev. 2 (Initial Public Draft) Transitioning the Use of Cryptographic Algorithms and Key Lengths 7/19/2018 Status: Draft (Obsolete)	Draft (Obsolete)	7/19/2018
SP	800-131A Rev. 1	Transitions: Recommendation for Transitioning the Use of Cryptographic Algorithms and Key Lengths SP 800-131A Rev. 1 (Final) (Withdrawn) Transitions: Recommendation for Transitioning the Use of Cryptographic Algorithms and Key Lengths 11/06/2015 Status: Withdrawn	Withdrawn	11/06/2015
SP	800-131A	Transitions: Recommendation for Transitioning the Use of Cryptographic Algorithms and Key Lengths SP 800-131A (Final) (Withdrawn) Transitions: Recommendation for Transitioning the Use of Cryptographic Algorithms and Key Lengths 1/13/2011 Status: Withdrawn	Withdrawn	1/13/2011
SP	800-131	Recommendation for the Transitioning of Cryptographic Algorithms and Key Sizes SP 800-131 (Initial Public Draft) Recommendation for the Transitioning of Cryptographic Algorithms and Key Sizes 6/16/2010 Status: Draft (Obsolete)	Draft (Obsolete)	6/16/2010
SP	800-128	Guide for Security-Focused Configuration Management of Information Systems SP 800-128 (Final) (Withdrawn) Guide for Security-Focused Configuration Management of Information Systems 8/12/2011 Status: Withdrawn	Withdrawn	8/12/2011
SP	800-127	Guide to Securing WiMAX Wireless Communications SP 800-127 (Final) (Withdrawn) Guide to Securing WiMAX Wireless Communications 9/30/2010 Status: Withdrawn	Withdrawn	9/30/2010
SP	800-126 Rev. 3	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 SP 800-126 Rev. 3 (Initial Public Draft) The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 7/18/2016 Status: Draft (Obsolete)	Draft (Obsolete)	7/18/2016
SP	800-126 Rev. 2	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2 SP 800-126 Rev. 2 (Final) (Withdrawn) The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2 9/01/2011 Status: Withdrawn	Withdrawn	9/01/2011
SP	800-126A	SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 SP 800-126A (Initial Public Draft) SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 7/18/2016 Status: Draft (Obsolete)	Draft (Obsolete)	7/18/2016
SP	800-126	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.0 SP 800-126 (Final) (Withdrawn) The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.0 11/05/2009 Status: Withdrawn	Withdrawn	11/05/2009
SP	800-125A Rev. 1	Security Recommendations for Server-based Hypervisor Platforms SP 800-125A Rev. 1 (Initial Public Draft) Security Recommendations for Server-based Hypervisor Platforms 4/11/2018 Status: Draft (Obsolete)	Draft (Obsolete)	4/11/2018
SP	800-125A	Security Recommendations for Hypervisor Deployment on Servers SP 800-125A (Final) (Withdrawn) Security Recommendations for Hypervisor Deployment on Servers 1/23/2018 Status: Withdrawn	Withdrawn	1/23/2018
SP	800-125A	Security Recommendations for Hypervisor Deployment SP 800-125A (2nd Public Draft) Security Recommendations for Hypervisor Deployment 9/14/2017 Status: Draft (Obsolete)	Draft (Obsolete)	9/14/2017
SP	800-125A	Security Recommendations for Hypervisor Deployment SP 800-125A (Initial Public Draft) Security Recommendations for Hypervisor Deployment 10/20/2014 Status: Draft (Obsolete)	Draft (Obsolete)	10/20/2014
SP	800-124 Rev. 2	Guidelines for Managing the Security of Mobile Devices in the Enterprise SP 800-124 Rev. 2 (Initial Public Draft) Guidelines for Managing the Security of Mobile Devices in the Enterprise 3/24/2020 Status: Draft (Obsolete)	Draft (Obsolete)	3/24/2020
SP	800-124 Rev. 1	Guidelines for Managing the Security of Mobile Devices in the Enterprise SP 800-124 Rev. 1 (Final) (Withdrawn) Guidelines for Managing the Security of Mobile Devices in the Enterprise 6/21/2013 Status: Withdrawn	Withdrawn	6/21/2013
SP	800-124	Guidelines on Cell Phone and PDA Security SP 800-124 (Final) (Withdrawn) Guidelines on Cell Phone and PDA Security 11/03/2008 Status: Withdrawn	Withdrawn	11/03/2008
SP	800-121 Rev. 2	Guide to Bluetooth Security SP 800-121 Rev. 2 (Final) (Withdrawn) Guide to Bluetooth Security 5/08/2017 Status: Withdrawn	Withdrawn	5/08/2017
SP	800-121 Rev. 2	Guide to Bluetooth Security SP 800-121 Rev. 2 (Initial Public Draft) Guide to Bluetooth Security 10/17/2016 Status: Draft (Obsolete)	Draft (Obsolete)	10/17/2016
SP	800-121 Rev. 1	Guide to Bluetooth Security SP 800-121 Rev. 1 (Final) (Withdrawn) Guide to Bluetooth Security 6/11/2012 Status: Withdrawn	Withdrawn	6/11/2012
SP	800-121	Guide to Bluetooth Security SP 800-121 (Final) (Withdrawn) Guide to Bluetooth Security 9/30/2008 Status: Withdrawn	Withdrawn	9/30/2008
SP	800-120	Recommendation for EAP Methods Used in Wireless Network Access Authentication SP 800-120 (Final) (Withdrawn) Recommendation for EAP Methods Used in Wireless Network Access Authentication 9/17/2009 Status: Withdrawn	Withdrawn	9/17/2009
SP	800-118	Guide to Enterprise Password Management SP 800-118 (Initial Public Draft) Guide to Enterprise Password Management 4/21/2009 Status: Draft (Obsolete)	Draft (Obsolete)	4/21/2009
SP	800-117 Rev. 1	Guide to Adopting and Using the Security Content Automation Protocol (SCAP) Version 1.2 SP 800-117 Rev. 1 (Initial Public Draft) Guide to Adopting and Using the Security Content Automation Protocol (SCAP) Version 1.2 1/06/2012 Status: Draft (Obsolete)	Draft (Obsolete)	1/06/2012
SP	800-117	Guide to Adopting and Using the Security Content Automation Protocol (SCAP) Version 1.0 SP 800-117 (Final) (Withdrawn) Guide to Adopting and Using the Security Content Automation Protocol (SCAP) Version 1.0 7/27/2010 Status: Withdrawn	Withdrawn	7/27/2010
SP	800-116 Rev. 1	A Recommendation for the Use of PIV Credentials in Physical Access Control Systems (PACS) SP 800-116 Rev. 1 (Initial Public Draft) A Recommendation for the Use of PIV Credentials in Physical Access Control Systems (PACS) 12/28/2015 Status: Draft (Obsolete)	Draft (Obsolete)	12/28/2015
SP	800-116	A Recommendation for the Use of PIV Credentials in Physical Access Control Systems (PACS) SP 800-116 (Final) (Withdrawn) A Recommendation for the Use of PIV Credentials in Physical Access Control Systems (PACS) 11/20/2008 Status: Withdrawn	Withdrawn	11/20/2008
SP	800-114 Rev. 1	User's Guide to Telework and Bring Your Own Device (BYOD) Security SP 800-114 Rev. 1 (Initial Public Draft) User's Guide to Telework and Bring Your Own Device (BYOD) Security 3/14/2016 Status: Draft (Obsolete)	Draft (Obsolete)	3/14/2016
SP	800-114	User's Guide to Securing External Devices for Telework and Remote Access SP 800-114 (Final) (Withdrawn) User's Guide to Securing External Devices for Telework and Remote Access 11/01/2007 Status: Withdrawn	Withdrawn	11/01/2007
SP	800-110	Information System Security Reference Data Model SP 800-110 (Initial Public Draft) Information System Security Reference Data Model 9/28/2007 Status: Draft (Obsolete)	Draft (Obsolete)	9/28/2007
SP	800-108 Rev. 1	Recommendation for Key Derivation Using Pseudorandom Functions SP 800-108 Rev. 1 (Initial Public Draft) Recommendation for Key Derivation Using Pseudorandom Functions 10/18/2021 Status: Draft (Obsolete)	Draft (Obsolete)	10/18/2021
SP	800-108	Recommendation for Key Derivation Using Pseudorandom Functions (Revised) SP 800-108 (Final) (Withdrawn) Recommendation for Key Derivation Using Pseudorandom Functions (Revised) 10/01/2009 Status: Withdrawn	Withdrawn	10/01/2009
SP	800-108	Recommendation for Key Derivation Using Pseudorandom Functions SP 800-108 (Final) (Withdrawn) Recommendation for Key Derivation Using Pseudorandom Functions 11/06/2008 Status: Withdrawn	Withdrawn	11/06/2008
SP	800-107	Recommendation for Applications Using Approved Hash Algorithms SP 800-107 (Final) (Withdrawn) Recommendation for Applications Using Approved Hash Algorithms 2/25/2009 Status: Withdrawn	Withdrawn	2/25/2009
SP	800-106	Randomized Hashing for Digital Signatures SP 800-106 (Final) (Withdrawn) Randomized Hashing for Digital Signatures 2/25/2009 Status: Withdrawn	Withdrawn	2/25/2009
SP	800-104	A Scheme for PIV Visual Card Topography SP 800-104 (Final) (Withdrawn) A Scheme for PIV Visual Card Topography 6/29/2007 Status: Withdrawn	Withdrawn	6/29/2007
SP	800-103	An Ontology of Identity Credentials - Part 1: Background and Formulation SP 800-103 (Initial Public Draft) An Ontology of Identity Credentials - Part 1: Background and Formulation 10/06/2006 Status: Draft (Obsolete)	Draft (Obsolete)	10/06/2006
SP	800-101	Guidelines on Cell Phone Forensics SP 800-101 (Final) (Withdrawn) Guidelines on Cell Phone Forensics 5/30/2007 Status: Withdrawn	Withdrawn	5/30/2007
SP	800-100	Information Security Handbook: A Guide for Managers SP 800-100 (Final) (Withdrawn) Information Security Handbook: A Guide for Managers 10/31/2006 Status: Withdrawn	Withdrawn	10/31/2006
SP	800-94 Rev. 1	Guide to Intrusion Detection and Prevention Systems (IDPS) SP 800-94 Rev. 1 (Initial Public Draft) Guide to Intrusion Detection and Prevention Systems (IDPS) 7/25/2012 Status: Draft (Obsolete)	Draft (Obsolete)	7/25/2012
SP	800-90C	Recommendation for Random Bit Generator (RBG) Constructions SP 800-90C (2nd Public Draft) Recommendation for Random Bit Generator (RBG) Constructions 4/13/2016 Status: Draft (Obsolete)	Draft (Obsolete)	4/13/2016
SP	800-90C	Recommendation for Random Bit Generator (RBG) Constructions SP 800-90C (Initial Public Draft) Recommendation for Random Bit Generator (RBG) Constructions 9/05/2012 Status: Draft (Obsolete)	Draft (Obsolete)	9/05/2012
SP	800-90B	Recommendation for the Entropy Sources Used for Random Bit Generation SP 800-90B (2nd Public Draft) Recommendation for the Entropy Sources Used for Random Bit Generation 1/27/2016 Status: Draft (Obsolete)	Draft (Obsolete)	1/27/2016
SP	800-90B	Recommendation for the Entropy Sources Used for Random Bit Generation SP 800-90B (Initial Public Draft) Recommendation for the Entropy Sources Used for Random Bit Generation 9/05/2012 Status: Draft (Obsolete)	Draft (Obsolete)	9/05/2012
SP	800-90A	Recommendation for Random Number Generation Using Deterministic Random Bit Generators SP 800-90A (Final) (Withdrawn) Recommendation for Random Number Generation Using Deterministic Random Bit Generators 1/23/2012 Status: Withdrawn	Withdrawn	1/23/2012
SP	800-90 Rev. 1	Recommendation for Random Number Generation Using Deterministic Random Bit Generators (Revised) SP 800-90 Rev. 1 (Final) (Withdrawn) Recommendation for Random Number Generation Using Deterministic Random Bit Generators (Revised) 3/14/2007 Status: Withdrawn	Withdrawn	3/14/2007
SP	800-90	Recommendation for Random Number Generation Using Deterministic Random Bit Generators SP 800-90 (Final) (Withdrawn) Recommendation for Random Number Generation Using Deterministic Random Bit Generators 6/13/2006 Status: Withdrawn	Withdrawn	6/13/2006
SP	800-88	Guidelines for Media Sanitization SP 800-88 (Final) (Withdrawn) Guidelines for Media Sanitization 9/01/2006 Status: Withdrawn	Withdrawn	9/01/2006
SP	800-88	Guidelines for Media Sanitization SP 800-88 (Final) (Withdrawn) Guidelines for Media Sanitization 8/31/2006 Status: Withdrawn	Withdrawn	8/31/2006
SP	800-87 Rev. 1	Codes for Identification of Federal and Federally-Assisted Organizations SP 800-87 Rev. 1 (Final) (Withdrawn) Codes for Identification of Federal and Federally-Assisted Organizations 4/25/2008 Status: Withdrawn	Withdrawn	4/25/2008
SP	800-87	Codes for the Identification of Federal and Federally Assisted Organizations SP 800-87 (Final) (Withdrawn) Codes for the Identification of Federal and Federally Assisted Organizations 3/07/2007 Status: Withdrawn	Withdrawn	3/07/2007
SP	800-87	Codes for the Identification of Federal and Federally Assisted Organizations SP 800-87 (Final) (Withdrawn) Codes for the Identification of Federal and Federally Assisted Organizations 1/11/2006 Status: Withdrawn	Withdrawn	1/11/2006
SP	800-87	Codes for the Identification of Federal and Federally Assisted Organizations Version 1.0 SP 800-87 (Final) (Withdrawn) Codes for the Identification of Federal and Federally Assisted Organizations Version 1.0 10/14/2005 Status: Withdrawn	Withdrawn	10/14/2005
SP	800-85B-4	PIV Data Model Test Guidelines SP 800-85B-4 (Initial Public Draft) PIV Data Model Test Guidelines 8/06/2014 Status: Draft (Obsolete)	Draft (Obsolete)	8/06/2014
SP	800-85B-1	PIV Data Model Test Guidelines SP 800-85B-1 (Initial Public Draft) PIV Data Model Test Guidelines 9/11/2009 Status: Draft (Obsolete)	Draft (Obsolete)	9/11/2009
SP	800-85A-2	PIV Card Application and Middleware Interface Test Guidelines (SP800-73-3 Compliance) SP 800-85A-2 (Final) (Withdrawn) PIV Card Application and Middleware Interface Test Guidelines (SP800-73-3 Compliance) 7/28/2010 Status: Withdrawn	Withdrawn	7/28/2010
SP	800-85A-1	PIV Card Application and Middleware Interface Test Guidelines (SP800-73-2 Compliance) SP 800-85A-1 (Final) (Withdrawn) PIV Card Application and Middleware Interface Test Guidelines (SP800-73-2 Compliance) 3/31/2009 Status: Withdrawn	Withdrawn	3/31/2009
SP	800-85A	PIV Card Application and Middleware Interface Test Guidelines (SP800-73 Compliance) SP 800-85A (Final) (Withdrawn) PIV Card Application and Middleware Interface Test Guidelines (SP800-73 Compliance) 4/05/2006 Status: Withdrawn	Withdrawn	4/05/2006
SP	800-85	PIV Middleware and On-Card Application Conformance Test Guidance (SP 800-73 Compliance) SP 800-85 (Final) (Withdrawn) PIV Middleware and On-Card Application Conformance Test Guidance (SP 800-73 Compliance) 10/19/2005 Status: Withdrawn	Withdrawn	10/19/2005
SP	800-83	Guide to Malware Incident Prevention and Handling SP 800-83 (Final) (Withdrawn) Guide to Malware Incident Prevention and Handling 11/23/2005 Status: Withdrawn	Withdrawn	11/23/2005
SP	800-82 Rev. 3	Guide to Operational Technology (OT) Security SP 800-82 Rev. 3 (Initial Public Draft) Guide to Operational Technology (OT) Security 4/26/2022 Status: Draft (Obsolete)	Draft (Obsolete)	4/26/2022
SP	800-82 Rev. 3	PRE-DRAFT Call for Comments: Guide to Industrial Control Systems (ICS) Security SP 800-82 Rev. 3 (Initial Preliminary Draft) PRE-DRAFT Call for Comments: Guide to Industrial Control Systems (ICS) Security 4/23/2021 Status: Draft (Obsolete)	Draft (Obsolete)	4/23/2021
SP	800-82 Rev. 2	Guide to Industrial Control Systems (ICS) Security SP 800-82 Rev. 2 (Final) (Withdrawn) Guide to Industrial Control Systems (ICS) Security 6/03/2015 Status: Withdrawn	Withdrawn	6/03/2015
SP	800-82 Rev. 1	Guide to Industrial Control Systems (ICS) Security SP 800-82 Rev. 1 (Final) (Withdrawn) Guide to Industrial Control Systems (ICS) Security 5/14/2013 Status: Withdrawn	Withdrawn	5/14/2013
SP	800-82	Guide to Industrial Control Systems (ICS) Security SP 800-82 (Final) (Withdrawn) Guide to Industrial Control Systems (ICS) Security 6/09/2011 Status: Withdrawn	Withdrawn	6/09/2011
SP	800-82	Guide to Industrial Control Systems (ICS) Security SP 800-82 (Initial Public Draft) Guide to Industrial Control Systems (ICS) Security 9/02/2008 Status: Draft (Obsolete)	Draft (Obsolete)	9/02/2008
SP	800-81 Rev. 1	Secure Domain Name System (DNS) Deployment Guide SP 800-81 Rev. 1 (Final) (Withdrawn) Secure Domain Name System (DNS) Deployment Guide 4/30/2010 Status: Withdrawn	Withdrawn	4/30/2010
SP	800-81	Secure Domain Name System (DNS) Deployment Guide SP 800-81 (Final) (Withdrawn) Secure Domain Name System (DNS) Deployment Guide 5/16/2006 Status: Withdrawn	Withdrawn	5/16/2006
SP	800-80	Guide for Developing Performance Metrics for Information Security SP 800-80 (Initial Public Draft) Guide for Developing Performance Metrics for Information Security 5/04/2006 Status: Draft (Obsolete)	Draft (Obsolete)	5/04/2006
SP	800-79-1	Guidelines for the Accreditation of Personal Identity Verification Card Issuers SP 800-79-1 (Final) (Withdrawn) Guidelines for the Accreditation of Personal Identity Verification Card Issuers 6/18/2008 Status: Withdrawn	Withdrawn	6/18/2008
SP	800-79	Guidelines for the Certification and Accreditation of PIV Card Issuing Organizations SP 800-79 (Final) (Withdrawn) Guidelines for the Certification and Accreditation of PIV Card Issuing Organizations 7/01/2005 Status: Withdrawn	Withdrawn	7/01/2005
SP	800-78-3	Cryptographic Algorithms and Key Sizes for Personal Identity Verification SP 800-78-3 (Final) (Withdrawn) Cryptographic Algorithms and Key Sizes for Personal Identity Verification 12/31/2010 Status: Withdrawn	Withdrawn	12/31/2010
SP	800-78-2	Cryptographic Algorithms and Key Sizes for Personal Identity Verification SP 800-78-2 (Final) (Withdrawn) Cryptographic Algorithms and Key Sizes for Personal Identity Verification 2/19/2010 Status: Withdrawn	Withdrawn	2/19/2010
SP	800-78-1	Cryptographic Algorithms and Key Sizes for Personal Identity Verification SP 800-78-1 (Final) (Withdrawn) Cryptographic Algorithms and Key Sizes for Personal Identity Verification 8/01/2007 Status: Withdrawn	Withdrawn	8/01/2007
SP	800-78	Cryptographic Algorithms and Key Sizes for Personal Identity Verification SP 800-78 (Final) (Withdrawn) Cryptographic Algorithms and Key Sizes for Personal Identity Verification 4/25/2005 Status: Withdrawn	Withdrawn	4/25/2005
SP	800-77 Rev. 1	Guide to IPsec VPNs SP 800-77 Rev. 1 (Initial Public Draft) Guide to IPsec VPNs 7/02/2019 Status: Draft (Obsolete)	Draft (Obsolete)	7/02/2019
SP	800-77	Guide to IPsec VPNs SP 800-77 (Final) (Withdrawn) Guide to IPsec VPNs 12/01/2005 Status: Withdrawn	Withdrawn	12/01/2005
SP	800-76-1	Biometric Data Specification for Personal Identity Verification SP 800-76-1 (Final) (Withdrawn) Biometric Data Specification for Personal Identity Verification 1/17/2007 Status: Withdrawn	Withdrawn	1/17/2007
SP	800-76	Biometric Data Specification for Personal Identity Verification SP 800-76 (Final) (Withdrawn) Biometric Data Specification for Personal Identity Verification 2/01/2006 Status: Withdrawn	Withdrawn	2/01/2006
SP	800-73-4	Interfaces for Personal Identity Verification SP 800-73-4 (Final) (Withdrawn) Interfaces for Personal Identity Verification 5/29/2015 Status: Withdrawn	Withdrawn	5/29/2015
SP	800-73-3	Interfaces for Personal Identity Verification SP 800-73-3 (Final) (Withdrawn) Interfaces for Personal Identity Verification 2/19/2010 Status: Withdrawn	Withdrawn	2/19/2010
SP	800-73-2	Interfaces for Personal Identity Verification SP 800-73-2 (Final) (Withdrawn) Interfaces for Personal Identity Verification 9/18/2008 Status: Withdrawn	Withdrawn	9/18/2008
SP	800-73-1	Interfaces for Personal Identity Verification SP 800-73-1 (Final) (Withdrawn) Interfaces for Personal Identity Verification 3/15/2006 Status: Withdrawn	Withdrawn	3/15/2006
SP	800-73	Interfaces for Personal Identity Verification SP 800-73 (Final) (Withdrawn) Interfaces for Personal Identity Verification 9/29/2005 Status: Withdrawn	Withdrawn	9/29/2005
SP	800-73	Interfaces for Personal Identity Verification SP 800-73 (Final) (Withdrawn) Interfaces for Personal Identity Verification 4/08/2005 Status: Withdrawn	Withdrawn	4/08/2005
SP	800-70 Rev. 4	National Checklist Program for IT Products: Guidelines for Checklist Users and Developers SP 800-70 Rev. 4 (Initial Public Draft) National Checklist Program for IT Products: Guidelines for Checklist Users and Developers 8/01/2017 Status: Draft (Obsolete)	Draft (Obsolete)	8/01/2017
SP	800-70 Rev. 3	National Checklist Program for IT Products: Guidelines for Checklist Users and Developers SP 800-70 Rev. 3 (Final) (Withdrawn) National Checklist Program for IT Products: Guidelines for Checklist Users and Developers 12/08/2016 Status: Withdrawn	Withdrawn	12/08/2016
SP	800-70 Rev. 3	National Checklist Program for IT Products: Guidelines for Checklist Users and Developers SP 800-70 Rev. 3 (Final) (Withdrawn) National Checklist Program for IT Products: Guidelines for Checklist Users and Developers 12/10/2015 Status: Withdrawn	Withdrawn	12/10/2015
SP	800-70 Rev. 2	National Checklist Program for IT Products: Guidelines for Checklist Users and Developers SP 800-70 Rev. 2 (Final) (Withdrawn) National Checklist Program for IT Products: Guidelines for Checklist Users and Developers 2/25/2011 Status: Withdrawn	Withdrawn	2/25/2011
SP	800-70 Rev. 1	National Checklist Program for IT Products: Guidelines for Checklist Users and Developers SP 800-70 Rev. 1 (Final) (Withdrawn) National Checklist Program for IT Products: Guidelines for Checklist Users and Developers 9/30/2009 Status: Withdrawn	Withdrawn	9/30/2009
SP	800-70	Security Configuration Checklists Program for IT Products: Guidance for Checklists Users and Developers SP 800-70 (Final) (Withdrawn) Security Configuration Checklists Program for IT Products: Guidance for Checklists Users and Developers 5/01/2005 Status: Withdrawn	Withdrawn	5/01/2005
SP	800-69	Guidance for Securing Microsoft Windows XP Home Edition: A NIST Security Configuration Checklist SP 800-69 (Final) (Withdrawn) Guidance for Securing Microsoft Windows XP Home Edition: A NIST Security Configuration Checklist 9/29/2006 Status: Withdrawn	Withdrawn	9/29/2006
SP	800-68 Rev. 1	Guide to Securing Microsoft Windows XP Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-68 Rev. 1 (Final) (Withdrawn) Guide to Securing Microsoft Windows XP Systems for IT Professionals: A NIST Security Configuration Checklist 10/24/2008 Status: Withdrawn	Withdrawn	10/24/2008
SP	800-68	Guidance for Securing Microsoft Windows XP Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-68 (Final) (Withdrawn) Guidance for Securing Microsoft Windows XP Systems for IT Professionals: A NIST Security Configuration Checklist 10/20/2005 Status: Withdrawn	Withdrawn	10/20/2005
SP	800-67 Rev. 2	Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher SP 800-67 Rev. 2 (Initial Public Draft) Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher 7/18/2017 Status: Draft (Obsolete)	Draft (Obsolete)	7/18/2017
SP	800-67 Rev. 1	Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher SP 800-67 Rev. 1 (Final) (Withdrawn) Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher 1/23/2012 Status: Withdrawn	Withdrawn	1/23/2012
SP	800-67	Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher SP 800-67 (Final) (Withdrawn) Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher 5/01/2004 Status: Withdrawn	Withdrawn	5/01/2004
SP	800-66 Rev. 2	PRE-DRAFT Call for Comments: Implementing the HIPAA Security Rule SP 800-66 Rev. 2 (Initial Preliminary Draft) PRE-DRAFT Call for Comments: Implementing the HIPAA Security Rule 4/29/2021 Status: Draft (Obsolete)	Draft (Obsolete)	4/29/2021
SP	800-66	An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule SP 800-66 (Final) (Withdrawn) An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule 3/01/2005 Status: Withdrawn	Withdrawn	3/01/2005
SP	800-65 Rev. 1	Recommendations for Integrating Information Security into the Capital Planning and Investment Control Process SP 800-65 Rev. 1 (Initial Public Draft) Recommendations for Integrating Information Security into the Capital Planning and Investment Control Process 7/14/2009 Status: Draft (Obsolete)	Draft (Obsolete)	7/14/2009
SP	800-65	Integrating IT Security into the Capital Planning and Investment Control Process SP 800-65 (Final) (Withdrawn) Integrating IT Security into the Capital Planning and Investment Control Process 1/01/2005 Status: Withdrawn	Withdrawn	1/01/2005
SP	800-64 Rev. 2	Security Considerations in the System Development Life Cycle SP 800-64 Rev. 2 (Final) (Withdrawn) Security Considerations in the System Development Life Cycle 10/16/2008 Status: Withdrawn	Withdrawn	10/16/2008
SP	800-64 Rev. 1	Security Considerations in the Information System Development Life Cycle SP 800-64 Rev. 1 (Final) (Withdrawn) Security Considerations in the Information System Development Life Cycle 6/16/2004 Status: Withdrawn	Withdrawn	6/16/2004
SP	800-64	Security Considerations in the Information System Development Life Cycle SP 800-64 (Final) (Withdrawn) Security Considerations in the Information System Development Life Cycle 10/10/2003 Status: Withdrawn	Withdrawn	10/10/2003
SP	800-63-4	PRE-DRAFT Call for Comments: Digital Identity Guidelines SP 800-63-4 (Initial Preliminary Draft) PRE-DRAFT Call for Comments: Digital Identity Guidelines 6/08/2020 Status: Draft (Obsolete)	Draft (Obsolete)	6/08/2020
SP	800-63-3	Digital Identity Guidelines SP 800-63-3 (Final) (Withdrawn) Digital Identity Guidelines 12/01/2017 Status: Withdrawn	Withdrawn	12/01/2017
SP	800-63C	Digital Identity Guidelines: Federation and Assertions SP 800-63C (Final) (Withdrawn) Digital Identity Guidelines: Federation and Assertions 12/01/2017 Status: Withdrawn	Withdrawn	12/01/2017
SP	800-63-3	Digital Identity Guidelines SP 800-63-3 (Final) (Withdrawn) Digital Identity Guidelines 6/22/2017 Status: Withdrawn	Withdrawn	6/22/2017
SP	800-63C	Digital Identity Guidelines: Federation and Assertions SP 800-63C (Final) (Withdrawn) Digital Identity Guidelines: Federation and Assertions 6/22/2017 Status: Withdrawn	Withdrawn	6/22/2017
SP	800-63-3	Digital Identity Guidelines SP 800-63-3 (2nd Public Draft) Digital Identity Guidelines 3/31/2017 Status: Draft (Obsolete)	Draft (Obsolete)	3/31/2017
SP	800-63-3	Digital Identity Guidelines SP 800-63-3 (Initial Public Draft) Digital Identity Guidelines 1/30/2017 Status: Draft (Obsolete)	Draft (Obsolete)	1/30/2017
SP	800-63-3	Digital Authentication Guideline (Public Preview) SP 800-63-3 (2nd Preliminary Draft) Digital Authentication Guideline (Public Preview) 5/08/2016 Status: Draft (Obsolete)	Draft (Obsolete)	5/08/2016
SP	800-63-3	PRE-DRAFT Call for Comments: Electronic Authentication Guideline SP 800-63-3 (Initial Preliminary Draft) PRE-DRAFT Call for Comments: Electronic Authentication Guideline 4/09/2015 Status: Draft (Obsolete)	Draft (Obsolete)	4/09/2015
SP	800-63B	Digital Identity Guidelines: Authentication and Lifecycle Management SP 800-63B (Final) (Withdrawn) Digital Identity Guidelines: Authentication and Lifecycle Management 12/01/2017 Status: Withdrawn	Withdrawn	12/01/2017
SP	800-63B	Digital Identity Guidelines: Authentication and Lifecycle Management SP 800-63B (Final) (Withdrawn) Digital Identity Guidelines: Authentication and Lifecycle Management 6/22/2017 Status: Withdrawn	Withdrawn	6/22/2017
SP	800-63-2	Electronic Authentication Guideline SP 800-63-2 (Final) (Withdrawn) Electronic Authentication Guideline 8/29/2013 Status: Withdrawn	Withdrawn	8/29/2013
SP	800-63A	Digital Identity Guidelines: Enrollment and Identity Proofing SP 800-63A (Final) (Withdrawn) Digital Identity Guidelines: Enrollment and Identity Proofing 12/01/2017 Status: Withdrawn	Withdrawn	12/01/2017
SP	800-63A	Digital Identity Guidelines: Enrollment and Identity Proofing SP 800-63A (Final) (Withdrawn) Digital Identity Guidelines: Enrollment and Identity Proofing 6/22/2017 Status: Withdrawn	Withdrawn	6/22/2017
SP	800-63-1	Electronic Authentication Guideline SP 800-63-1 (Final) (Withdrawn) Electronic Authentication Guideline 12/12/2011 Status: Withdrawn	Withdrawn	12/12/2011
SP	800-63	Electronic Authentication Guideline SP 800-63 (Final) (Withdrawn) Electronic Authentication Guideline 4/30/2006 Status: Withdrawn	Withdrawn	4/30/2006
SP	800-63	Electronic Authentication Guideline SP 800-63 (Final) (Withdrawn) Electronic Authentication Guideline 9/27/2004 Status: Withdrawn	Withdrawn	9/27/2004
SP	800-63	Electronic Authentication Guideline SP 800-63 (Final) (Withdrawn) Electronic Authentication Guideline 6/30/2004 Status: Withdrawn	Withdrawn	6/30/2004
SP	800-61 Rev. 1	Computer Security Incident Handling Guide SP 800-61 Rev. 1 (Final) (Withdrawn) Computer Security Incident Handling Guide 3/07/2008 Status: Withdrawn	Withdrawn	3/07/2008
SP	800-61	Computer Security Incident Handling Guide SP 800-61 (Final) (Withdrawn) Computer Security Incident Handling Guide 1/16/2004 Status: Withdrawn	Withdrawn	1/16/2004
SP	800-60 Vol. 2	Appendixes to Guide for Mapping Types of Information and Information Systems to Security Categories SP 800-60 Vol. 2 (Final) (Withdrawn) Appendixes to Guide for Mapping Types of Information and Information Systems to Security Categories 6/10/2004 Status: Withdrawn	Withdrawn	6/10/2004
SP	800-60 Vol. 1	Guide for Mapping Types of Information and Information Systems to Security Categories SP 800-60 Vol. 1 (Final) (Withdrawn) Guide for Mapping Types of Information and Information Systems to Security Categories 6/10/2004 Status: Withdrawn	Withdrawn	6/10/2004
SP	800-57 Part 3	Recommendation for Key Management, Part 3: Application-Specific Key Management Guidance SP 800-57 Part 3 (Final) (Withdrawn) Recommendation for Key Management, Part 3: Application-Specific Key Management Guidance 12/28/2009 Status: Withdrawn	Withdrawn	12/28/2009
SP	800-57 Part 2 Rev. 1	Recommendation for Key Management, Part 2: Best Practices for Key Management Organizations SP 800-57 Part 2 Rev. 1 (2nd Public Draft) Recommendation for Key Management, Part 2: Best Practices for Key Management Organizations 11/20/2018 Status: Draft (Obsolete)	Draft (Obsolete)	11/20/2018
SP	800-57 Part 2 Rev. 1	Recommendation for Key Management, Part 2: Best Practices for Key Management Organization SP 800-57 Part 2 Rev. 1 (Initial Public Draft) Recommendation for Key Management, Part 2: Best Practices for Key Management Organization 4/06/2018 Status: Draft (Obsolete)	Draft (Obsolete)	4/06/2018
SP	800-57 Part 2	Recommendation for Key Management, Part 2: Best Practices for Key Management Organization SP 800-57 Part 2 (Final) (Withdrawn) Recommendation for Key Management, Part 2: Best Practices for Key Management Organization 8/25/2005 Status: Withdrawn	Withdrawn	8/25/2005
SP	800-57 Part 1 Rev. 5	Recommendation for Key Management: Part 1 – General SP 800-57 Part 1 Rev. 5 (Initial Public Draft) Recommendation for Key Management: Part 1 – General 10/08/2019 Status: Draft (Obsolete)	Draft (Obsolete)	10/08/2019
SP	800-57 Part 1 Rev. 4	Recommendation for Key Management, Part 1: General SP 800-57 Part 1 Rev. 4 (Final) (Withdrawn) Recommendation for Key Management, Part 1: General 1/28/2016 Status: Withdrawn	Withdrawn	1/28/2016
SP	800-57 Part 1 Rev. 3	Recommendation for Key Management, Part 1: General (Revision 3) SP 800-57 Part 1 Rev. 3 (Final) (Withdrawn) Recommendation for Key Management, Part 1: General (Revision 3) 7/10/2012 Status: Withdrawn	Withdrawn	7/10/2012
SP	800-57 Part 1 Rev. 2	Recommendation for Key Management, Part 1: General (Revised) SP 800-57 Part 1 Rev. 2 (Final) (Withdrawn) Recommendation for Key Management, Part 1: General (Revised) 3/01/2007 Status: Withdrawn	Withdrawn	3/01/2007
SP	800-57 Part 1 Rev. 1	Recommendation for Key Management, Part 1: General (Revised) SP 800-57 Part 1 Rev. 1 (Final) (Withdrawn) Recommendation for Key Management, Part 1: General (Revised) 5/01/2006 Status: Withdrawn	Withdrawn	5/01/2006
SP	800-57 Part 1	Recommendation for Key Management, Part 1: General SP 800-57 Part 1 (Final) (Withdrawn) Recommendation for Key Management, Part 1: General 8/01/2005 Status: Withdrawn	Withdrawn	8/01/2005
SP	800-56C Rev. 2	Recommendation for Key-Derivation Methods in Key-Establishment Schemes SP 800-56C Rev. 2 (Initial Public Draft) Recommendation for Key-Derivation Methods in Key-Establishment Schemes 3/24/2020 Status: Draft (Obsolete)	Draft (Obsolete)	3/24/2020
SP	800-56C Rev. 1	Recommendation for Key-Derivation Methods in Key-Establishment Schemes SP 800-56C Rev. 1 (Final) (Withdrawn) Recommendation for Key-Derivation Methods in Key-Establishment Schemes 4/16/2018 Status: Withdrawn	Withdrawn	4/16/2018
SP	800-56C Rev. 1	Recommendation for Key Derivation through Extraction-then-Expansion SP 800-56C Rev. 1 (Initial Public Draft) Recommendation for Key Derivation through Extraction-then-Expansion 8/07/2017 Status: Draft (Obsolete)	Draft (Obsolete)	8/07/2017
SP	800-56C	Recommendation for Key Derivation through Extraction-then-Expansion SP 800-56C (Final) (Withdrawn) Recommendation for Key Derivation through Extraction-then-Expansion 11/28/2011 Status: Withdrawn	Withdrawn	11/28/2011
SP	800-56B Rev. 2	Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography SP 800-56B Rev. 2 (Initial Public Draft) Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography 7/10/2018 Status: Draft (Obsolete)	Draft (Obsolete)	7/10/2018
SP	800-56B Rev. 1	Recommendation for Pair-Wise Key-Establishment Schemes Using Integer Factorization Cryptography SP 800-56B Rev. 1 (Final) (Withdrawn) Recommendation for Pair-Wise Key-Establishment Schemes Using Integer Factorization Cryptography 10/01/2014 Status: Withdrawn	Withdrawn	10/01/2014
SP	800-56B	Recommendation for Pair-Wise Key Establishment Schemes Using Integer Factorization Cryptography SP 800-56B (Final) (Withdrawn) Recommendation for Pair-Wise Key Establishment Schemes Using Integer Factorization Cryptography 8/28/2009 Status: Withdrawn	Withdrawn	8/28/2009
SP	800-56A Rev. 3	Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography SP 800-56A Rev. 3 (Initial Public Draft) Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography 8/07/2017 Status: Draft (Obsolete)	Draft (Obsolete)	8/07/2017
SP	800-56A Rev. 2	Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography SP 800-56A Rev. 2 (Final) (Withdrawn) Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography 6/05/2013 Status: Withdrawn	Withdrawn	6/05/2013
SP	800-56A Rev. 1	Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography SP 800-56A Rev. 1 (Final) (Withdrawn) Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography 3/14/2007 Status: Withdrawn	Withdrawn	3/14/2007
SP	800-56A	Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography SP 800-56A (Final) (Withdrawn) Recommendation for Pair-Wise Key Establishment Schemes Using Discrete Logarithm Cryptography 5/03/2006 Status: Withdrawn	Withdrawn	5/03/2006
SP	800-55 Rev. 2	PRE-DRAFT Call for Comments: Performance Measurement Guide for Information Security SP 800-55 Rev. 2 (Initial Preliminary Draft) PRE-DRAFT Call for Comments: Performance Measurement Guide for Information Security 9/24/2020 Status: Draft (Obsolete)	Draft (Obsolete)	9/24/2020
SP	800-55	Security Metrics Guide for Information Technology Systems SP 800-55 (Final) (Withdrawn) Security Metrics Guide for Information Technology Systems 8/01/2003 Status: Withdrawn	Withdrawn	8/01/2003
SP	800-54	Border Gateway Protocol Security SP 800-54 (Final) (Withdrawn) Border Gateway Protocol Security 7/17/2007 Status: Withdrawn	Withdrawn	7/17/2007
SP	800-53 Rev. 5	Security and Privacy Controls for Information Systems and Organizations SP 800-53 Rev. 5 (Final) (Withdrawn) Security and Privacy Controls for Information Systems and Organizations 9/23/2020 Status: Withdrawn	Withdrawn	9/23/2020
SP	800-53 Rev. 5	Security and Privacy Controls for Information Systems and Organizations SP 800-53 Rev. 5 (Final Public Draft) Security and Privacy Controls for Information Systems and Organizations 3/16/2020 Status: Draft (Obsolete)	Draft (Obsolete)	3/16/2020
SP	800-53 Rev. 5	Security and Privacy Controls for Information Systems and Organizations SP 800-53 Rev. 5 (Initial Public Draft) Security and Privacy Controls for Information Systems and Organizations 8/15/2017 Status: Draft (Obsolete)	Draft (Obsolete)	8/15/2017
SP	800-53 Rev. 5	PRE-DRAFT Call for Comments: Security and Privacy Controls for Federal Information Systems and Organizations SP 800-53 Rev. 5 (Initial Preliminary Draft) PRE-DRAFT Call for Comments: Security and Privacy Controls for Federal Information Systems and Organizations 2/23/2016 Status: Draft (Obsolete)	Draft (Obsolete)	2/23/2016
SP	800-53 Rev. 4	Security and Privacy Controls for Federal Information Systems and Organizations SP 800-53 Rev. 4 (Final) (Withdrawn) Security and Privacy Controls for Federal Information Systems and Organizations 1/22/2015 Status: Withdrawn	Withdrawn	1/22/2015
SP	800-53 Rev. 4	Security and Privacy Controls for Federal Information Systems and Organizations SP 800-53 Rev. 4 (Final) (Withdrawn) Security and Privacy Controls for Federal Information Systems and Organizations 1/15/2014 Status: Withdrawn	Withdrawn	1/15/2014
SP	800-53 Rev. 4	Security and Privacy Controls for Federal Information Systems and Organizations SP 800-53 Rev. 4 (Final) (Withdrawn) Security and Privacy Controls for Federal Information Systems and Organizations 5/07/2013 Status: Withdrawn	Withdrawn	5/07/2013
SP	800-53 Rev. 4	Security and Privacy Controls for Federal Information Systems and Organizations SP 800-53 Rev. 4 (Final) (Withdrawn) Security and Privacy Controls for Federal Information Systems and Organizations 4/30/2013 Status: Withdrawn	Withdrawn	4/30/2013
SP	800-53 Rev. 3	Recommended Security Controls for Federal Information Systems and Organizations SP 800-53 Rev. 3 (Final) (Withdrawn) Recommended Security Controls for Federal Information Systems and Organizations 5/01/2010 Status: Withdrawn	Withdrawn	5/01/2010
SP	800-53 Rev. 3	Recommended Security Controls for Federal Information Systems and Organizations SP 800-53 Rev. 3 (Final) (Withdrawn) Recommended Security Controls for Federal Information Systems and Organizations 9/14/2009 Status: Withdrawn	Withdrawn	9/14/2009
SP	800-53 Rev. 3	Recommended Security Controls for Federal Information Systems and Organizations SP 800-53 Rev. 3 (Final) (Withdrawn) Recommended Security Controls for Federal Information Systems and Organizations 8/12/2009 Status: Withdrawn	Withdrawn	8/12/2009
SP	800-53 Rev. 3	Recommended Security Controls for Federal Information Systems and Organizations SP 800-53 Rev. 3 (Final) (Withdrawn) Recommended Security Controls for Federal Information Systems and Organizations 8/03/2009 Status: Withdrawn	Withdrawn	8/03/2009
SP	800-53B	Control Baselines for Information Systems and Organizations SP 800-53B (Final) (Withdrawn) Control Baselines for Information Systems and Organizations 10/29/2020 Status: Withdrawn	Withdrawn	10/29/2020
SP	800-53B	Control Baselines for Information Systems and Organizations SP 800-53B (Initial Public Draft) Control Baselines for Information Systems and Organizations 7/31/2020 Status: Draft (Obsolete)	Draft (Obsolete)	7/31/2020
SP	800-53 Rev. 2	Recommended Security Controls for Federal Information Systems SP 800-53 Rev. 2 (Final) (Withdrawn) Recommended Security Controls for Federal Information Systems 12/19/2007 Status: Withdrawn	Withdrawn	12/19/2007
SP	800-53A Rev. 5	Assessing Security and Privacy Controls in Information Systems and Organizations SP 800-53A Rev. 5 (Initial Public Draft) Assessing Security and Privacy Controls in Information Systems and Organizations 8/03/2021 Status: Draft (Obsolete)	Draft (Obsolete)	8/03/2021
SP	800-53A Rev. 4	Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans SP 800-53A Rev. 4 (Final) (Withdrawn) Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans 12/18/2014 Status: Withdrawn	Withdrawn	12/18/2014
SP	800-53A Rev. 4	Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans SP 800-53A Rev. 4 (Final) (Withdrawn) Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans 12/11/2014 Status: Withdrawn	Withdrawn	12/11/2014
SP	800-53A Rev. 1	Guide for Assessing the Security Controls in Federal Information Systems and Organizations: Building Effective Security Assessment Plans SP 800-53A Rev. 1 (Final) (Withdrawn) Guide for Assessing the Security Controls in Federal Information Systems and Organizations: Building Effective Security Assessment Plans 6/29/2010 Status: Withdrawn	Withdrawn	6/29/2010
SP	800-53A	Guide for Assessing the Security Controls in Federal Information Systems and Organizations: Building Effective Security Assessment Plans SP 800-53A (Final) (Withdrawn) Guide for Assessing the Security Controls in Federal Information Systems and Organizations: Building Effective Security Assessment Plans 7/01/2008 Status: Withdrawn	Withdrawn	7/01/2008
SP	800-53 Rev. 1	Recommended Security Controls for Federal Information Systems SP 800-53 Rev. 1 (Final) (Withdrawn) Recommended Security Controls for Federal Information Systems 12/19/2006 Status: Withdrawn	Withdrawn	12/19/2006
SP	800-53	Recommended Security Controls for Federal Information Systems SP 800-53 (Final) (Withdrawn) Recommended Security Controls for Federal Information Systems 6/17/2005 Status: Withdrawn	Withdrawn	6/17/2005
SP	800-53	Recommended Security Controls for Federal Information Systems SP 800-53 (Final) (Withdrawn) Recommended Security Controls for Federal Information Systems 4/22/2005 Status: Withdrawn	Withdrawn	4/22/2005
SP	800-53	Recommended Security Controls for Federal Information Systems SP 800-53 (Final) (Withdrawn) Recommended Security Controls for Federal Information Systems 2/28/2005 Status: Withdrawn	Withdrawn	2/28/2005
SP	800-52 Rev. 2	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations SP 800-52 Rev. 2 (2nd Public Draft) Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations 10/15/2018 Status: Draft (Obsolete)	Draft (Obsolete)	10/15/2018
SP	800-52 Rev. 2	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations SP 800-52 Rev. 2 (Initial Public Draft) Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations 11/15/2017 Status: Draft (Obsolete)	Draft (Obsolete)	11/15/2017
SP	800-52 Rev. 1	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations SP 800-52 Rev. 1 (Final) (Withdrawn) Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations 4/28/2014 Status: Withdrawn	Withdrawn	4/28/2014
SP	800-52	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations SP 800-52 (Final) (Withdrawn) Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations 6/09/2005 Status: Withdrawn	Withdrawn	6/09/2005
SP	800-51	Use of the Common Vulnerabilities and Exposures (CVE) Vulnerability Naming Scheme SP 800-51 (Final) (Withdrawn) Use of the Common Vulnerabilities and Exposures (CVE) Vulnerability Naming Scheme 9/01/2002 Status: Withdrawn	Withdrawn	9/01/2002
SP	800-50 Rev. 1	PRE-DRAFT Call for Comments: Building a Cybersecurity and Privacy Awareness and Training Program SP 800-50 Rev. 1 (Initial Preliminary Draft) PRE-DRAFT Call for Comments: Building a Cybersecurity and Privacy Awareness and Training Program 9/21/2021 Status: Draft (Obsolete)	Draft (Obsolete)	9/21/2021
SP	800-48 Rev. 1	Guide to Securing Legacy IEEE 802.11 Wireless Networks SP 800-48 Rev. 1 (Final) (Withdrawn) Guide to Securing Legacy IEEE 802.11 Wireless Networks 7/25/2008 Status: Withdrawn	Withdrawn	7/25/2008
SP	800-48	Wireless Network Security: 802.11, Bluetooth and Handheld Devices SP 800-48 (Final) (Withdrawn) Wireless Network Security: 802.11, Bluetooth and Handheld Devices 11/01/2002 Status: Withdrawn	Withdrawn	11/01/2002
SP	800-47 Rev. 1	Managing the Security of Information Exchanges SP 800-47 Rev. 1 (Initial Public Draft) Managing the Security of Information Exchanges 1/26/2021 Status: Draft (Obsolete)	Draft (Obsolete)	1/26/2021
SP	800-47	Security Guide for Interconnecting Information Technology Systems SP 800-47 (Final) (Withdrawn) Security Guide for Interconnecting Information Technology Systems 9/01/2002 Status: Withdrawn	Withdrawn	9/01/2002
SP	800-46 Rev. 2	Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security SP 800-46 Rev. 2 (Initial Public Draft) Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security 3/14/2016 Status: Draft (Obsolete)	Draft (Obsolete)	3/14/2016
SP	800-46 Rev. 1	Guide to Enterprise Telework and Remote Access Security SP 800-46 Rev. 1 (Final) (Withdrawn) Guide to Enterprise Telework and Remote Access Security 6/16/2009 Status: Withdrawn	Withdrawn	6/16/2009
SP	800-46	Security for Telecommuting and Broadband Communications SP 800-46 (Final) (Withdrawn) Security for Telecommuting and Broadband Communications 8/01/2002 Status: Withdrawn	Withdrawn	8/01/2002
SP	800-45	Guidelines on Electronic Mail Security SP 800-45 (Final) (Withdrawn) Guidelines on Electronic Mail Security 9/11/2002 Status: Withdrawn	Withdrawn	9/11/2002
SP	800-44	Guidelines on Securing Public Web Servers SP 800-44 (Final) (Withdrawn) Guidelines on Securing Public Web Servers 10/09/2002 Status: Withdrawn	Withdrawn	10/09/2002
SP	800-43	Systems Administration Guidance for Securing Windows 2000 Professional System SP 800-43 (Final) (Withdrawn) Systems Administration Guidance for Securing Windows 2000 Professional System 11/01/2002 Status: Withdrawn	Withdrawn	11/01/2002
SP	800-42	Guideline on Network Security Testing SP 800-42 (Final) (Withdrawn) Guideline on Network Security Testing 10/15/2003 Status: Withdrawn	Withdrawn	10/15/2003
SP	800-41	Guidelines on Firewalls and Firewall Policy SP 800-41 (Final) (Withdrawn) Guidelines on Firewalls and Firewall Policy 1/01/2002 Status: Withdrawn	Withdrawn	1/01/2002
SP	800-40 Rev. 4	Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology SP 800-40 Rev. 4 (Initial Public Draft) Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology 11/17/2021 Status: Draft (Obsolete)	Draft (Obsolete)	11/17/2021
SP	800-40 Rev. 3	Guide to Enterprise Patch Management Technologies SP 800-40 Rev. 3 (Final) (Withdrawn) Guide to Enterprise Patch Management Technologies 7/22/2013 Status: Withdrawn	Withdrawn	7/22/2013
SP	800-40 Version 2	Creating a Patch and Vulnerability Management Program SP 800-40 Version 2 (Final) (Withdrawn) Creating a Patch and Vulnerability Management Program 11/16/2005 Status: Withdrawn	Withdrawn	11/16/2005
SP	800-40	Procedures for Handling Security Patches SP 800-40 (Final) (Withdrawn) Procedures for Handling Security Patches 8/01/2002 Status: Withdrawn	Withdrawn	8/01/2002
SP	800-38G	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G (Final) (Withdrawn) Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 3/29/2016 Status: Withdrawn	Withdrawn	3/29/2016
SP	800-38C	Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality SP 800-38C (Final) (Withdrawn) Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality 5/12/2004 Status: Withdrawn	Withdrawn	5/12/2004
SP	800-38B	Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication SP 800-38B (Final) (Withdrawn) Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication 5/01/2005 Status: Withdrawn	Withdrawn	5/01/2005
SP	800-37 Rev. 2	Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy SP 800-37 Rev. 2 (Final Public Draft) Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy 10/02/2018 Status: Draft (Obsolete)	Draft (Obsolete)	10/02/2018
SP	800-37 Rev. 2	Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy SP 800-37 Rev. 2 (Initial Public Draft) Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy 5/09/2018 Status: Draft (Obsolete)	Draft (Obsolete)	5/09/2018
SP	800-37 Rev. 2	Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy SP 800-37 Rev. 2 (Initial Preliminary Draft) Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy 9/28/2017 Status: Draft (Obsolete)	Draft (Obsolete)	9/28/2017
SP	800-37 Rev. 1	Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach SP 800-37 Rev. 1 (Final) (Withdrawn) Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach 6/05/2014 Status: Withdrawn	Withdrawn	6/05/2014
SP	800-37 Rev. 1	Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach SP 800-37 Rev. 1 (Final) (Withdrawn) Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach 2/22/2010 Status: Withdrawn	Withdrawn	2/22/2010
SP	800-37	Guide for the Security Certification and Accreditation of Federal Information Systems SP 800-37 (Final) (Withdrawn) Guide for the Security Certification and Accreditation of Federal Information Systems 5/20/2004 Status: Withdrawn	Withdrawn	5/20/2004
SP	800-36	Guide to Selecting Information Technology Security Products SP 800-36 (Final) (Withdrawn) Guide to Selecting Information Technology Security Products 10/09/2003 Status: Withdrawn	Withdrawn	10/09/2003
SP	800-34 Rev. 1	Contingency Planning Guide for Federal Information Systems SP 800-34 Rev. 1 (Final) (Withdrawn) Contingency Planning Guide for Federal Information Systems 5/31/2010 Status: Withdrawn	Withdrawn	5/31/2010
SP	800-34	Contingency Planning Guide for Information Technology Systems SP 800-34 (Final) (Withdrawn) Contingency Planning Guide for Information Technology Systems 6/13/2002 Status: Withdrawn	Withdrawn	6/13/2002
SP	800-33	Underlying Technical Models for Information Technology Security SP 800-33 (Final) (Withdrawn) Underlying Technical Models for Information Technology Security 12/01/2001 Status: Withdrawn	Withdrawn	12/01/2001
SP	800-32	Introduction to Public Key Technology and the Federal PKI Infrastructure SP 800-32 (Final) (Withdrawn) Introduction to Public Key Technology and the Federal PKI Infrastructure 2/26/2001 Status: Withdrawn	Withdrawn	2/26/2001
SP	800-31	Intrusion Detection Systems (IDS) SP 800-31 (Final) (Withdrawn) Intrusion Detection Systems (IDS) 11/01/2001 Status: Withdrawn	Withdrawn	11/01/2001
SP	800-30	Risk Management Guide for Information Technology Systems SP 800-30 (Final) (Withdrawn) Risk Management Guide for Information Technology Systems 7/01/2002 Status: Withdrawn	Withdrawn	7/01/2002
SP	800-29	A Comparison of the Security Requirements for Cryptographic Modules in FIPS 140-1 and FIPS 140-2 SP 800-29 (Final) (Withdrawn) A Comparison of the Security Requirements for Cryptographic Modules in FIPS 140-1 and FIPS 140-2 6/01/2001 Status: Withdrawn	Withdrawn	6/01/2001
SP	800-28	Guidelines on Active Content and Mobile Code SP 800-28 (Final) (Withdrawn) Guidelines on Active Content and Mobile Code 10/17/2001 Status: Withdrawn	Withdrawn	10/17/2001
SP	800-27 Revision (r)	Engineering Principles for Information Technology Security (A Baseline for Achieving Security), Revision A SP 800-27 Revision (r) (Final) (Withdrawn) Engineering Principles for Information Technology Security (A Baseline for Achieving Security), Revision A 6/21/2004 Status: Withdrawn	Withdrawn	6/21/2004
SP	800-27	Engineering Principles for Information Technology Security (A Baseline for Achieving Security) SP 800-27 (Final) (Withdrawn) Engineering Principles for Information Technology Security (A Baseline for Achieving Security) 6/15/2001 Status: Withdrawn	Withdrawn	6/15/2001
SP	800-26 Rev. 1	Guide for Information Technology Security Assessments and System Reporting Form SP 800-26 Rev. 1 (Initial Public Draft) Guide for Information Technology Security Assessments and System Reporting Form 8/15/2005 Status: Draft (Obsolete)	Draft (Obsolete)	8/15/2005
SP	800-26	Security Self-Assessment Guide for Information Technology Systems SP 800-26 (Final) (Withdrawn) Security Self-Assessment Guide for Information Technology Systems 11/01/2001 Status: Withdrawn	Withdrawn	11/01/2001
SP	800-25	Federal Agency Use of Public Key Technology for Digital Signatures and Authentication SP 800-25 (Final) (Withdrawn) Federal Agency Use of Public Key Technology for Digital Signatures and Authentication 10/01/2000 Status: Withdrawn	Withdrawn	10/01/2000
SP	800-24	PBX Vulnerability Analysis: Finding Holes in Your PBX Before Someone Else Does SP 800-24 (Final) (Withdrawn) PBX Vulnerability Analysis: Finding Holes in Your PBX Before Someone Else Does 4/01/2001 Status: Withdrawn	Withdrawn	4/01/2001
SP	800-23	Guidelines to Federal Organizations on Security Assurance and Acquisition/Use of Tested/Evaluated Products SP 800-23 (Final) (Withdrawn) Guidelines to Federal Organizations on Security Assurance and Acquisition/Use of Tested/Evaluated Products 8/01/2000 Status: Withdrawn	Withdrawn	8/01/2000
SP	800-22 Rev. 1	A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications SP 800-22 Rev. 1 (Final) (Withdrawn) A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications 8/01/2008 Status: Withdrawn	Withdrawn	8/01/2008
SP	800-22	A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications SP 800-22 (Final) (Withdrawn) A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications 5/15/2001 Status: Withdrawn	Withdrawn	5/15/2001
SP	800-21 E2	Guideline for Implementing Cryptography in the Federal Government SP 800-21 E2 (Final) (Withdrawn) Guideline for Implementing Cryptography in the Federal Government 12/01/2005 Status: Withdrawn	Withdrawn	12/01/2005
SP	800-21	Guideline for Implementing Cryptography in the Federal Government SP 800-21 (Final) (Withdrawn) Guideline for Implementing Cryptography in the Federal Government 11/01/1999 Status: Withdrawn	Withdrawn	11/01/1999
SP	800-20	Modes of Operation Validation System for the Triple Data Encryption Algorithm (TMOVS): Requirements and Procedures SP 800-20 (Final) (Withdrawn) Modes of Operation Validation System for the Triple Data Encryption Algorithm (TMOVS): Requirements and Procedures 3/01/2012 Status: Withdrawn	Withdrawn	3/01/2012
SP	800-20	Modes of Operation Validation System for the Triple Data Encryption Algorithm (TMOVS): Requirements and Procedures SP 800-20 (Final) (Withdrawn) Modes of Operation Validation System for the Triple Data Encryption Algorithm (TMOVS): Requirements and Procedures 4/01/2000 Status: Withdrawn	Withdrawn	4/01/2000
SP	800-20	Modes of Operation Validation System for the Triple Data Encryption Algorithm (TMOVS): Requirements and Procedures SP 800-20 (Final) (Withdrawn) Modes of Operation Validation System for the Triple Data Encryption Algorithm (TMOVS): Requirements and Procedures 10/01/1999 Status: Withdrawn	Withdrawn	10/01/1999
SP	800-19	Mobile Agent Security SP 800-19 (Final) (Withdrawn) Mobile Agent Security 10/01/1999 Status: Withdrawn	Withdrawn	10/01/1999
SP	800-18	Guide for Developing Security Plans for Information Technology Systems SP 800-18 (Final) (Withdrawn) Guide for Developing Security Plans for Information Technology Systems 12/01/1998 Status: Withdrawn	Withdrawn	12/01/1998
SP	800-17	Modes of Operation Validation System (MOVS): Requirements and Procedures SP 800-17 (Final) (Withdrawn) Modes of Operation Validation System (MOVS): Requirements and Procedures 2/01/1998 Status: Withdrawn	Withdrawn	2/01/1998
SP	800-16 Rev. 1	A Role-Based Model for Federal Information Technology/Cybersecurity Training SP 800-16 Rev. 1 (2nd Public Draft) A Role-Based Model for Federal Information Technology/Cybersecurity Training 10/24/2013 Status: Draft (Obsolete)	Draft (Obsolete)	10/24/2013
SP	800-16 Rev. 1	Information Security Training Requirements: A Role- and Performance-Based Model SP 800-16 Rev. 1 (Initial Public Draft) Information Security Training Requirements: A Role- and Performance-Based Model 3/20/2009 Status: Draft (Obsolete)	Draft (Obsolete)	3/20/2009
SP	800-15	MISPC Minimum Interoperability Specification for PKI Components, Version 1 SP 800-15 (Final) (Withdrawn) MISPC Minimum Interoperability Specification for PKI Components, Version 1 1/01/1998 Status: Withdrawn	Withdrawn	1/01/1998
SP	800-14	Generally Accepted Principles and Practices for Securing Information Technology Systems SP 800-14 (Final) (Withdrawn) Generally Accepted Principles and Practices for Securing Information Technology Systems 9/03/1996 Status: Withdrawn	Withdrawn	9/03/1996
SP	800-13	Telecommunications Security Guidelines for Telecommunications Management Network SP 800-13 (Final) (Withdrawn) Telecommunications Security Guidelines for Telecommunications Management Network 10/02/1995 Status: Withdrawn	Withdrawn	10/02/1995
SP	800-12 Rev. 1	An Introduction to Information Security SP 800-12 Rev. 1 (Initial Public Draft) An Introduction to Information Security 1/23/2017 Status: Draft (Obsolete)	Draft (Obsolete)	1/23/2017
SP	800-12	An Introduction to Computer Security: the NIST Handbook SP 800-12 (Final) (Withdrawn) An Introduction to Computer Security: the NIST Handbook 10/02/1995 Status: Withdrawn	Withdrawn	10/02/1995
SP	800-11	The Impact of the FCC's Open Network Architecture on NS/EP Telecommunications Security SP 800-11 (Final) (Withdrawn) The Impact of the FCC's Open Network Architecture on NS/EP Telecommunications Security 2/01/1995 Status: Withdrawn	Withdrawn	2/01/1995
SP	800-10	Keeping Your Site Comfortably Secure: An Introduction to Internet Firewalls SP 800-10 (Final) (Withdrawn) Keeping Your Site Comfortably Secure: An Introduction to Internet Firewalls 12/01/1994 Status: Withdrawn	Withdrawn	12/01/1994
SP	800-9	Good Security Practices for Electronic Commerce, Including Electronic Data Interchange SP 800-9 (Final) (Withdrawn) Good Security Practices for Electronic Commerce, Including Electronic Data Interchange 12/01/1993 Status: Withdrawn	Withdrawn	12/01/1993
SP	800-8	Security Issues in the Database Language SQL SP 800-8 (Final) (Withdrawn) Security Issues in the Database Language SQL 8/02/1993 Status: Withdrawn	Withdrawn	8/02/1993
SP	800-7	Security in Open Systems SP 800-7 (Final) (Withdrawn) Security in Open Systems 7/01/1994 Status: Withdrawn	Withdrawn	7/01/1994
SP	800-6	Automated Tools for Testing Computer System Vulnerability SP 800-6 (Final) (Withdrawn) Automated Tools for Testing Computer System Vulnerability 12/01/1992 Status: Withdrawn	Withdrawn	12/01/1992
SP	800-5	A Guide to the Selection of Anti-Virus Tools and Techniques SP 800-5 (Final) (Withdrawn) A Guide to the Selection of Anti-Virus Tools and Techniques 12/01/1992 Status: Withdrawn	Withdrawn	12/01/1992
SP	800-4	Computer Security Considerations in Federal Procurements: A Guide for Procurement Initiatiors, Contracting Officers, and Computer Security SP 800-4 (Final) (Withdrawn) Computer Security Considerations in Federal Procurements: A Guide for Procurement Initiatiors, Contracting Officers, and Computer Security 3/02/1992 Status: Withdrawn	Withdrawn	3/02/1992
SP	800-3	Establishing a Computer Security Incident Response Capability (CSIRC) SP 800-3 (Final) (Withdrawn) Establishing a Computer Security Incident Response Capability (CSIRC) 11/01/1991 Status: Withdrawn	Withdrawn	11/01/1991
SP	800-2	Public Key Cryptography SP 800-2 (Final) (Withdrawn) Public Key Cryptography 4/01/1991 Status: Withdrawn	Withdrawn	4/01/1991
SP	800-1	Bibliography of Selected Computer Security Publications, January 1980 - October 1989 SP 800-1 (Final) (Withdrawn) Bibliography of Selected Computer Security Publications, January 1980 - October 1989 12/01/1990 Status: Withdrawn	Withdrawn	12/01/1990
SP	500-299	NIST Cloud Computing Security Reference Architecture SP 500-299 (Initial Public Draft) NIST Cloud Computing Security Reference Architecture 5/05/2013 Status: Draft (Obsolete)	Draft (Obsolete)	5/05/2013
SP	500-172	Computer Security Training Guidelines SP 500-172 (Final) (Withdrawn) Computer Security Training Guidelines 11/01/1989 Status: Withdrawn	Withdrawn	11/01/1989
SP	500-20	Validating the Correctness of Hardware Implementations of the NBS Data Encryption Standard SP 500-20 (Final) (Withdrawn) Validating the Correctness of Hardware Implementations of the NBS Data Encryption Standard 11/01/1977 Status: Withdrawn	Withdrawn	11/01/1977

View All Publications

Current Publications

NIST Series Pubs
- Final Pubs
- Drafts Open for Comment
- Drafts (all)
- View By Series
  - FIPS (standards)
  - SP 800 (guidance)
  - SP 1800 (practice guides)
  - SP (all subseries)
  - IR (interagency/internal reports)
  - CSWP (cybersecurity white papers)
  - ITL Bulletins
Other Pubs