Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST IR 8060

Guidelines for the Creation of Interoperable Software Identification (SWID) Tags

Date Published: April 2016


David Waltermire (NIST), Brant Cheikes (MITRE), Larry Feldman (G2), Gregory Witte (G2)



software; software asset management; software identification (SWID); software identification tag
Control Families

Audit and Accountability; Configuration Management; Maintenance; Media Protection; Planning; System and Services Acquisition; System and Communications Protection; System and Information Integrity


Download URL

Supplemental Material:
Guideline Summary for NISTIR 8060 (xlsx)
Schema Definition for NISTIR 8060

Related NIST Publications:
IR 8085 (Draft)
ITL Bulletin

Document History:
04/22/16: IR 8060 (Final)