Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-23

Guidelines to Federal Organizations on Security Assurance and Acquisition/Use of Tested/Evaluated Products

Date Published: August 2000

Planning Note (08/01/2018): Withdrawn: Pre-dates many relevant laws, regulations, and executive directives, and does not reflect NIST’s current validation programsRisk Management Framework, or the Cybersecurity Framework. For a current overview, see SP 800-12 Rev. 1An Introduction to Information Security.


Edward Roback (NIST)



Assurance; computer security; evaluation; information assurance; IT security; security testing
Control Families

Assessment, Authorization and Monitoring; Risk Assessment; System and Services Acquisition


Download URL

Supplemental Material:
None available

Document History:
08/01/00: SP 800-23 (Final)


Security and Privacy

acquisition, testing & validation