Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-160 Vol. 1 Rev. 1

Engineering Trustworthy Secure Systems

Date Published: November 2022

Supersedes: SP 800-160 Vol. 1 (03/21/2018)


Ron Ross (NIST), Mark Winstead (MITRE), Michael McEvilley (MITRE)



assurance; developmental engineering; engineering trades; field engineering; implementation; information security; information security policy; inspection; integration; penetration testing; protection needs; requirements analysis; resilience; review; risk assessment; risk management; risk treatment; security architecture; security design; security requirements; specifications; stakeholders; system of systems; system component; system element; system life cycle; systems; systems engineering; systems security engineering; trustworthiness; validation; verification
Control Families

None selected


Download URL

Supplemental Material:
Systems Security Engineering (SSE) Project

Publication Volumes:
SP 800-160 Vol. 2 Rev. 1

Document History:
01/11/22: SP 800-160 Vol. 1 Rev. 1 (Draft)
06/07/22: SP 800-160 Vol. 1 Rev. 1 (Draft)
11/16/22: SP 800-160 Vol. 1 Rev. 1 (Final)


Security and Privacy

planning, risk assessment, trustworthiness

Laws and Regulations

E-Government Act