Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

NIST SP 800-64

Security Considerations in the Information System Development Life Cycle

Date Published: October 2003

Supersedes: SP 800-4 (03/02/1992)


Tim Grance (NIST), Joan Hash (NIST), Marc Stevens (BAH)



acquisition; computer security; life cycle; procurement; request for proposal; requirement; Software Development Life Cycle (SDLC); specification; statement of work
Control Families

None selected


Download URL

Supplemental Material:
None available

Document History:
10/10/03: SP 800-64 (Final)