Search | CSRC

Search Results

Showing 201 matching records.

Series	Number	Title Publications	Status	Release Date
SP	1800-13	Mobile Application Single Sign-On: Improving Authentication for Public Safety and First Responders SP 1800-13 (DRAFT) Mobile Application Single Sign-On: Improving Authentication for Public Safety and First Responders 4/16/2018 Status: Download: Draft SP 1800-13 volumes and Project Homepage; Submit Comments	Draft	4/16/2018
SP	1800-12	Derived Personal Identity Verification (PIV) Credentials SP 1800-12 (DRAFT) Derived Personal Identity Verification (PIV) Credentials 9/29/2017 Status: Download: Draft SP 1800-12 volumes and Project Homepage; Submit Comments	Draft	9/29/2017
SP	1800-11	Data Integrity: Recovering from Ransomware and Other Destructive Events SP 1800-11 (DRAFT) Data Integrity: Recovering from Ransomware and Other Destructive Events 9/06/2017 Status: Download: Draft SP 1800-11 volumes and Project Homepage; Submit Comments	Draft	9/06/2017
SP	1800-9	Access Rights Management for the Financial Services Sector SP 1800-9 (DRAFT) Access Rights Management for the Financial Services Sector 8/31/2017 Status: Download: Draft 1800-9 volumes and homepage; Submit Comments; Learn more about this project	Draft	8/31/2017
SP	1800-8	Securing Wireless Infusion Pumps in Healthcare Delivery Organizations SP 1800-8 (DRAFT) Securing Wireless Infusion Pumps in Healthcare Delivery Organizations 5/08/2017 Status: Download: Draft SP 1800-8 volumes and Project Homepage; Submit Comments; Learn more about this project	Draft	5/08/2017
SP	1800-7	Situational Awareness for Electric Utilities SP 1800-7 (DRAFT) Situational Awareness for Electric Utilities 2/16/2017 Status: Download: Draft SP 1800-7 volumes and Project Homepage; Submit Comments; Learn more about this project	Draft	2/16/2017
SP	1800-6	Domain Name System-Based Electronic Mail Security SP 1800-6 Domain Name System-Based Electronic Mail Security 1/19/2018 Status: Download: SP 1800-6 (DOI); Local Download; Project Homepage (with links to HTML version)	Final	1/19/2018
SP	1800-5	IT Asset Management: Financial Services SP 1800-5 (DRAFT) IT Asset Management: Financial Services 10/26/2015 Status: Download: Draft SP 1800-5 volumes and Project Homepage; NIST Press Release; Submit Comments	Draft	10/26/2015
SP	1800-4	Mobile Device Security: Cloud and Hybrid Builds SP 1800-4 (DRAFT) Mobile Device Security: Cloud and Hybrid Builds 11/02/2015 Status: Download: Draft SP 1800-4 volumes and Project Homepage; NIST Press Release; Submit Comments	Draft	11/02/2015
SP	1800-3	Attribute Based Access Control (2nd Draft) SP 1800-3 (DRAFT) Attribute Based Access Control (2nd Draft) 9/20/2017 Status: Download: Draft SP 1800-3 volumes and Project Homepage; Submit Comments	Draft	9/20/2017
SP	1800-2	Identity and Access Management for Electric Utilities SP 1800-2 (DRAFT) Identity and Access Management for Electric Utilities 8/25/2015 Status: Download: Draft SP 1800-2 volumes and Project Homepage; NIST Press Release	Draft	8/25/2015
SP	1800-1	Securing Electronic Health Records on Mobile Devices SP 1800-1 (DRAFT) Securing Electronic Health Records on Mobile Devices 7/28/2015 Status: Download: Draft SP 1800-1 volumes and Project Homepage; NIST Press Release	Draft	7/28/2015
SP	800-202	Quick Start Guide for Populating Mobile Test Devices SP 800-202 Quick Start Guide for Populating Mobile Test Devices 5/10/2018 Status: Download: SP 800-202 (DOI); Local Download; Computer Forensics Tool Testing (CFTT) Program; CFTT Federated Testing Project	Final	5/10/2018
SP	800-195	2016 NIST/ITL Cybersecurity Program Annual Report SP 800-195 2016 NIST/ITL Cybersecurity Program Annual Report 9/28/2017 Status: Download: SP 800-195 (DOI); Local Download	Final	9/28/2017
SP	800-193	Platform Firmware Resiliency Guidelines SP 800-193 Platform Firmware Resiliency Guidelines 5/04/2018 Status: Download: SP 800-193 (DOI); Local Download	Final	5/04/2018
SP	800-192	Verification and Test Methods for Access Control Policies/Models SP 800-192 Verification and Test Methods for Access Control Policies/Models 6/27/2017 Status: Download: SP 800-192 (DOI); Local Download	Final	6/27/2017
SP	800-190	Application Container Security Guide SP 800-190 Application Container Security Guide 9/25/2017 Status: Download: SP 800-190 (DOI); Local Download	Final	9/25/2017
SP	800-188	De-Identifying Government Datasets (2nd Draft) SP 800-188 (DRAFT) De-Identifying Government Datasets (2nd Draft) 12/15/2016 Status: Download: Draft SP 800-188; Comment Template	Draft	12/15/2016
SP	800-187	Guide to LTE Security SP 800-187 Guide to LTE Security 12/21/2017 Status: Download: SP 800-187 (DOI); Local Download	Final	12/21/2017
SP	800-185	SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash SP 800-185 SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash 12/22/2016 Status: Download: SP 800-185 (DOI); Local Download; Comments Received on Draft SP 800-185	Final	12/22/2016
SP	800-184	Guide for Cybersecurity Event Recovery SP 800-184 Guide for Cybersecurity Event Recovery 12/22/2016 Status: Download: SP 800-184 (DOI); Local Download; Press Release (12-22-2016)	Final	12/22/2016
SP	800-183	Networks of 'Things' SP 800-183 Networks of 'Things' 7/28/2016 Status: Download: SP 800-183 (DOI); Local Download; Press Release	Final	7/28/2016
SP	800-182	Computer Security Division 2015 Annual Report SP 800-182 Computer Security Division 2015 Annual Report 8/10/2016 Status: Download: SP 800-182 (DOI); Local Download	Final	8/10/2016
SP	800-181	National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework SP 800-181 National Initiative for Cybersecurity Education (NICE) Cybersecurity Workforce Framework 8/07/2017 Status: Download: SP 800-181 (DOI); Local Download; Reference Spreadsheet for NICE Framework; NICE Framework homepage	Final	8/07/2017
SP	800-180	NIST Definition of Microservices, Application Containers and System Virtual Machines SP 800-180 (DRAFT) NIST Definition of Microservices, Application Containers and System Virtual Machines 2/18/2016 Status: Download: Draft SP 800-180; Comment Template	Draft	2/18/2016
SP	800-179	Guide to Securing Apple OS X 10.10 Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-179 Guide to Securing Apple OS X 10.10 Systems for IT Professionals: A NIST Security Configuration Checklist 12/05/2016 Status: Download: SP 800-179 (DOI); Local Download; Supplemental Content (GitHub); National Checklist Program	Final	12/05/2016
SP	800-178	A Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) SP 800-178 A Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) 10/03/2016 Status: Download: SP 800-178 (DOI); Local Download	Final	10/03/2016
SP	800-177 Rev. 1	Trustworthy Email (2nd Draft) SP 800-177 Rev. 1 (DRAFT) Trustworthy Email (2nd Draft) 12/15/2017 Status: Download: Draft (2nd) SP 800-177 Rev. 1; Comment template	Draft	12/15/2017
SP	800-177	Trustworthy Email SP 800-177 Trustworthy Email 9/07/2016 Status: Download: SP 800-177 (DOI); Local Download; High Assurance Domains project	Final	9/07/2016
SP	800-176	Computer Security Division 2014 Annual Report SP 800-176 Computer Security Division 2014 Annual Report 8/20/2015 Status: Download: SP 800-176 (DOI); Local Download	Final	8/20/2015
SP	800-175B	Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms SP 800-175B Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms 8/22/2016 Status: Download: SP 800-175B (DOI); Local Download; Comments Received from Final Draft	Final	8/22/2016
SP	800-175A	Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies SP 800-175A Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies 8/22/2016 Status: Download: SP 800-175A (DOI); Local Download; Comments Received from Final Draft	Final	8/22/2016
SP	800-171 Rev. 1	Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations SP 800-171 Rev. 1 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations 2/20/2018 Status: Download: SP 800-171 Rev. 1 (DOI); Local Download; CUI Plan of Action template; CUI SSP template **[see Planning Note]; Mapping: Cybersecurity Framework v.1.0 to SP 800-171 Rev. 1	Final	2/20/2018
SP	800-171A	Assessing Security Requirements for Controlled Unclassified Information (Final Draft) SP 800-171A (DRAFT) Assessing Security Requirements for Controlled Unclassified Information (Final Draft) 2/20/2018 Status: Download: Final Draft SP 800-171A; Comment template; CUI SSP template **[see Planning Note]; CUI Plan of Action template	Draft	2/20/2018
SP	800-170	Computer Security Division 2013 Annual Report SP 800-170 Computer Security Division 2013 Annual Report 9/04/2014 Status: Download: SP 800-170 (DOI); Local Download	Final	9/04/2014
SP	800-168	Approximate Matching: Definition and Terminology SP 800-168 Approximate Matching: Definition and Terminology 7/02/2014 Status: Download: SP 800-168 (DOI); Local Download	Final	7/02/2014
SP	800-167	Guide to Application Whitelisting SP 800-167 Guide to Application Whitelisting 10/28/2015 Status: Download: SP 800-167 (DOI); Local Download; Press Release	Final	10/28/2015
SP	800-166	Derived PIV Application and Data Model Test Guidelines SP 800-166 Derived PIV Application and Data Model Test Guidelines 6/06/2016 Status: Download: SP 800-166 (DOI); Local Download	Final	6/06/2016
SP	800-165	Computer Security Division 2012 Annual Report SP 800-165 Computer Security Division 2012 Annual Report 7/22/2013 Status: Download: SP 800-165 (DOI); Local Download	Final	7/22/2013
SP	800-164	Guidelines on Hardware-Rooted Security in Mobile Devices SP 800-164 (DRAFT) Guidelines on Hardware-Rooted Security in Mobile Devices 10/31/2012 Status: Download: Draft SP 800-164	Draft	10/31/2012
SP	800-163	Vetting the Security of Mobile Applications SP 800-163 Vetting the Security of Mobile Applications 1/26/2015 Status: Download: SP 800-163 (DOI); Local Download; Press Release	Final	1/26/2015
SP	800-162	Guide to Attribute Based Access Control (ABAC) Definition and Considerations SP 800-162 Guide to Attribute Based Access Control (ABAC) Definition and Considerations 1/16/2014 Status: Download: SP 800-162 (DOI); Local Download; SP 800-162 (EPUB)	Final	1/16/2014
SP	800-161	Supply Chain Risk Management Practices for Federal Information Systems and Organizations SP 800-161 Supply Chain Risk Management Practices for Federal Information Systems and Organizations 4/08/2015 Status: Download: SP 800-161 (DOI); Local Download	Final	4/08/2015
SP	800-160 Vol. 2	Systems Security Engineering: Cyber Resiliency Considerations for the Engineering of Trustworthy Secure Systems SP 800-160 Vol. 2 (DRAFT) Systems Security Engineering: Cyber Resiliency Considerations for the Engineering of Trustworthy Secure Systems 3/21/2018 Status: Download: Draft SP 800-160 Vol. 2; Comment Template; Presentation: "Building Cyber Resilient Systems"	Draft	3/21/2018
SP	800-160 Vol. 1	Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems SP 800-160 Vol. 1 Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems 3/21/2018 Status: Download: SP 800-160 Vol. 1 (DOI); Local Download; "Rethinking Cybersecurity from the Inside Out" (blog post)	Final	3/21/2018
SP	800-157	Guidelines for Derived Personal Identity Verification (PIV) Credentials SP 800-157 Guidelines for Derived Personal Identity Verification (PIV) Credentials 12/19/2014 Status: Download: SP 800-157 (DOI); Local Download; Comments and resolutions on Draft SP 800-157 (Mar. 2014)	Final	12/19/2014
SP	800-156	Representation of PIV Chain-of-Trust for Import and Export SP 800-156 Representation of PIV Chain-of-Trust for Import and Export 5/20/2016 Status: Download: SP 800-156 (DOI); Local Download; XSD Schema File for SP 800-156 Chain of Trust	Final	5/20/2016
SP	800-155	BIOS Integrity Measurement Guidelines SP 800-155 (DRAFT) BIOS Integrity Measurement Guidelines 12/08/2011 Status: Download: Draft SP 800-155	Draft	12/08/2011
SP	800-154	Guide to Data-Centric System Threat Modeling SP 800-154 (DRAFT) Guide to Data-Centric System Threat Modeling 3/14/2016 Status: Download: Draft SP 800-154; Comment Template	Draft	3/14/2016
SP	800-153	Guidelines for Securing Wireless Local Area Networks (WLANs) SP 800-153 Guidelines for Securing Wireless Local Area Networks (WLANs) 2/21/2012 Status: Download: SP 800-153 (DOI); Local Download; Press Release (Mar. 6, 2012)	Final	2/21/2012
SP	800-152	A Profile for U.S. Federal Cryptographic Key Management Systems (CKMS) SP 800-152 A Profile for U.S. Federal Cryptographic Key Management Systems (CKMS) 10/28/2015 Status: Download: SP 800-152 (DOI); Local Download; Comments received on final (3rd) Draft (Dec. 2014); Draft 3 (Dec. 2014); Draft 2 (Jan. 2014); Draft (Aug. 2012)	Final	10/28/2015
SP	800-150	Guide to Cyber Threat Information Sharing SP 800-150 Guide to Cyber Threat Information Sharing 10/04/2016 Status: Download: SP 800-150 (DOI); Local Download	Final	10/04/2016
SP	800-147B	BIOS Protection Guidelines for Servers SP 800-147B BIOS Protection Guidelines for Servers 8/28/2014 Status: Download: SP 800-147B (DOI); Local Download	Final	8/28/2014
SP	800-147	BIOS Protection Guidelines SP 800-147 BIOS Protection Guidelines 4/29/2011 Status: Download: SP 800-147 (DOI); Local Download; Press Release	Final	4/29/2011
SP	800-146	Cloud Computing Synopsis and Recommendations SP 800-146 Cloud Computing Synopsis and Recommendations 5/29/2012 Status: Download: SP 800-146 (DOI); Local Download; SP 800-146 (EPUB); Press Release	Final	5/29/2012
SP	800-145	The NIST Definition of Cloud Computing SP 800-145 The NIST Definition of Cloud Computing 9/28/2011 Status: Download: SP 800-145 (DOI); Local Download; SP 800-145 (EPUB); Press Release	Final	9/28/2011
SP	800-144	Guidelines on Security and Privacy in Public Cloud Computing SP 800-144 Guidelines on Security and Privacy in Public Cloud Computing 12/09/2011 Status: Download: SP 800-144 (DOI); Local Download; SP 800-144 (EPUB); Press Release	Final	12/09/2011
SP	800-142	Practical Combinatorial Testing SP 800-142 Practical Combinatorial Testing 10/07/2010 Status: Download: SP 800-142 (DOI); Local Download	Final	10/07/2010
SP	800-137	Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations SP 800-137 Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations 9/30/2011 Status: Download: SP 800-137 (DOI); Local Download; Press Release	Final	9/30/2011
SP	800-135 Rev. 1	Recommendation for Existing Application-Specific Key Derivation Functions SP 800-135 Rev. 1 Recommendation for Existing Application-Specific Key Derivation Functions 12/23/2011 Status: Download: SP 800-135 Rev. 1 (DOI); Local Download; Informative Note (09-19-2016)	Final	12/23/2011
SP	800-133	Recommendation for Cryptographic Key Generation SP 800-133 Recommendation for Cryptographic Key Generation 12/21/2012 Status: Download: SP 800-133 (DOI); Local Download; SP 800-133 (EPUB); Press Release	Final	12/21/2012
SP	800-132	Recommendation for Password-Based Key Derivation: Part 1: Storage Applications SP 800-132 Recommendation for Password-Based Key Derivation: Part 1: Storage Applications 12/22/2010 Status: Download: SP 800-132 (DOI); Local Download	Final	12/22/2010
SP	800-131A Rev. 1	Transitions: Recommendation for Transitioning the Use of Cryptographic Algorithms and Key Lengths SP 800-131A Rev. 1 Transitions: Recommendation for Transitioning the Use of Cryptographic Algorithms and Key Lengths 11/06/2015 Status: Download: SP 800-131A Rev. 1 (DOI); Local Download; Comments and resolutions on Draft (July 2015)	Final	11/06/2015
SP	800-130	A Framework for Designing Cryptographic Key Management Systems SP 800-130 A Framework for Designing Cryptographic Key Management Systems 8/15/2013 Status: Download: SP 800-130 (DOI); Local Download	Final	8/15/2013
SP	800-128	Guide for Security-Focused Configuration Management of Information Systems SP 800-128 Guide for Security-Focused Configuration Management of Information Systems 8/12/2011 Status: Download: SP 800-128 (DOI); Local Download	Final	8/12/2011
SP	800-127	Guide to Securing WiMAX Wireless Communications SP 800-127 Guide to Securing WiMAX Wireless Communications 9/30/2010 Status: Download: SP 800-127 (DOI); Local Download; SP 800-127 (EPUB); Press Release	Final	9/30/2010
SP	800-126 Rev. 3	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 SP 800-126 Rev. 3 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 2/14/2018 Status: Download: SP 800-126 Rev. 3 (DOI); Local Download; SCAP project	Final	2/14/2018
SP	800-126 Rev. 2	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2 SP 800-126 Rev. 2 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.2 3/19/2012 Status: Download: SP 800-126 Rev. 2 (DOI); Local Download; NIST Solicits Comments for SP 800-126 & SCAP	Final	3/19/2012
SP	800-126A	SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 SP 800-126A SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 2/14/2018 Status: Download: SP 800-126A (DOI); Local Download; SCAP project	Final	2/14/2018
SP	800-126 Rev. 1	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.1 SP 800-126 Rev. 1 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.1 2/25/2011 Status: Download: SP 800-126 Rev. 1 (DOI); Local Download	Final	2/25/2011
SP	800-126	The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.0 SP 800-126 The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.0 11/05/2009 Status: Download: SP 800-126 (DOI); Local Download	Final	11/05/2009
SP	800-125B	Secure Virtual Network Configuration for Virtual Machine (VM) Protection SP 800-125B Secure Virtual Network Configuration for Virtual Machine (VM) Protection 3/07/2016 Status: Download: SP 800-125B (DOI); Local Download	Final	3/07/2016
SP	800-125A Rev. 1	Security Recommendations for Server-based Hypervisor Platforms SP 800-125A Rev. 1 (DRAFT) Security Recommendations for Server-based Hypervisor Platforms 4/11/2018 Status: Download: Draft SP 800-125A Rev. 1; Markup copy	Draft	4/11/2018
SP	800-125A	Security Recommendations for Hypervisor Deployment on Servers SP 800-125A Security Recommendations for Hypervisor Deployment on Servers 1/23/2018 Status: Download: SP 800-125A (DOI); Local Download	Final	1/23/2018
SP	800-125	Guide to Security for Full Virtualization Technologies SP 800-125 Guide to Security for Full Virtualization Technologies 1/28/2011 Status: Download: SP 800-125 (DOI); Local Download; Press Release	Final	1/28/2011
SP	800-124 Rev. 1	Guidelines for Managing the Security of Mobile Devices in the Enterprise SP 800-124 Rev. 1 Guidelines for Managing the Security of Mobile Devices in the Enterprise 6/21/2013 Status: Download: SP 800-124 Rev. 1 (DOI); Local Download; SP 800-124 Rev. 1 (EPUB); Press Release	Final	6/21/2013
SP	800-123	Guide to General Server Security SP 800-123 Guide to General Server Security 7/25/2008 Status: Download: SP 800-123 (DOI); Local Download; SP 800-123 (EPUB)	Final	7/25/2008
SP	800-122	Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) SP 800-122 Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) 4/06/2010 Status: Download: SP 800-122 (DOI); Local Download; SP 800-122 (EPUB)	Final	4/06/2010
SP	800-121 Rev. 2	Guide to Bluetooth Security SP 800-121 Rev. 2 Guide to Bluetooth Security 5/08/2017 Status: Download: SP 800-121 Rev. 2 (DOI); Local Download	Final	5/08/2017
SP	800-120	Recommendation for EAP Methods Used in Wireless Network Access Authentication SP 800-120 Recommendation for EAP Methods Used in Wireless Network Access Authentication 9/17/2009 Status: Download: SP 800-120 (DOI); Local Download	Final	9/17/2009
SP	800-119	Guidelines for the Secure Deployment of IPv6 SP 800-119 Guidelines for the Secure Deployment of IPv6 12/29/2010 Status: Download: SP 800-119 (DOI); Local Download	Final	12/29/2010
SP	800-117 Rev. 1	Guide to Adopting and Using the Security Content Automation Protocol (SCAP) Version 1.2 SP 800-117 Rev. 1 (DRAFT) Guide to Adopting and Using the Security Content Automation Protocol (SCAP) Version 1.2 1/06/2012 Status: Download: Draft SP 800-117 Rev. 1	Draft	1/06/2012
SP	800-117	Guide to Adopting and Using the Security Content Automation Protocol (SCAP) Version 1.0 SP 800-117 Guide to Adopting and Using the Security Content Automation Protocol (SCAP) Version 1.0 7/27/2010 Status: Download: SP 800-117 (DOI); Local Download	Final	7/27/2010
SP	800-116 Rev. 1	A Recommendation for the Use of PIV Credentials in Physical Access Control Systems (PACS) SP 800-116 Rev. 1 (DRAFT) A Recommendation for the Use of PIV Credentials in Physical Access Control Systems (PACS) 12/28/2015 Status: Download: Draft SP 800-116 Rev. 1; Comment Template	Draft	12/28/2015
SP	800-116	A Recommendation for the Use of PIV Credentials in Physical Access Control Systems (PACS) SP 800-116 A Recommendation for the Use of PIV Credentials in Physical Access Control Systems (PACS) 11/20/2008 Status: Download: SP 800-116 (DOI); Local Download	Final	11/20/2008
SP	800-115	Technical Guide to Information Security Testing and Assessment SP 800-115 Technical Guide to Information Security Testing and Assessment 9/30/2008 Status: Download: SP 800-115 (DOI); Local Download; SP 800-115 (EPUB)	Final	9/30/2008
SP	800-114 Rev. 1	User's Guide to Telework and Bring Your Own Device (BYOD) Security SP 800-114 Rev. 1 User's Guide to Telework and Bring Your Own Device (BYOD) Security 7/29/2016 Status: Download: SP 800-114 Rev. 1 (DOI); Local Download	Final	7/29/2016
SP	800-113	Guide to SSL VPNs SP 800-113 Guide to SSL VPNs 7/01/2008 Status: Download: SP 800-113 (DOI); Local Download	Final	7/01/2008
SP	800-111	Guide to Storage Encryption Technologies for End User Devices SP 800-111 Guide to Storage Encryption Technologies for End User Devices 11/15/2007 Status: Download: SP 800-111 (DOI); Local Download	Final	11/15/2007
SP	800-108	Recommendation for Key Derivation Using Pseudorandom Functions (Revised) SP 800-108 Recommendation for Key Derivation Using Pseudorandom Functions (Revised) 10/01/2009 Status: Download: SP 800-108 (DOI); Local Download	Final	10/01/2009
SP	800-107 Rev. 1	Recommendation for Applications Using Approved Hash Algorithms SP 800-107 Rev. 1 Recommendation for Applications Using Approved Hash Algorithms 8/24/2012 Status: Download: SP 800-107 Rev. 1 (DOI); Local Download	Final	8/24/2012
SP	800-106	Randomized Hashing for Digital Signatures SP 800-106 Randomized Hashing for Digital Signatures 2/25/2009 Status: Download: SP 800-106 (DOI); Local Download	Final	2/25/2009
SP	800-102	Recommendation for Digital Signature Timeliness SP 800-102 Recommendation for Digital Signature Timeliness 9/23/2009 Status: Download: SP 800-102 (DOI); Local Download	Final	9/23/2009
SP	800-101 Rev. 1	Guidelines on Mobile Device Forensics SP 800-101 Rev. 1 Guidelines on Mobile Device Forensics 5/15/2014 Status: Download: SP 800-101 Rev. 1 (DOI); Local Download	Final	5/15/2014
SP	800-100	Information Security Handbook: A Guide for Managers SP 800-100 Information Security Handbook: A Guide for Managers 3/07/2007 Status: Download: SP 800-100 (DOI); Local Download	Final	3/07/2007
SP	800-98	Guidelines for Securing Radio Frequency Identification (RFID) Systems SP 800-98 Guidelines for Securing Radio Frequency Identification (RFID) Systems 4/06/2007 Status: Download: SP 800-98 (DOI); Local Download	Final	4/06/2007
SP	800-97	Establishing Wireless Robust Security Networks: A Guide to IEEE 802.11i SP 800-97 Establishing Wireless Robust Security Networks: A Guide to IEEE 802.11i 2/07/2007 Status: Download: SP 800-97 (DOI); Local Download	Final	2/07/2007
SP	800-96	PIV Card to Reader Interoperability Guidelines SP 800-96 PIV Card to Reader Interoperability Guidelines 12/29/2006 Status: Download: SP 800-96 (DOI); Local Download	Final	12/29/2006
SP	800-95	Guide to Secure Web Services SP 800-95 Guide to Secure Web Services 8/29/2007 Status: Download: SP 800-95 (DOI); Local Download	Final	8/29/2007
SP	800-94 Rev. 1	Guide to Intrusion Detection and Prevention Systems (IDPS) SP 800-94 Rev. 1 (DRAFT) Guide to Intrusion Detection and Prevention Systems (IDPS) 7/25/2012 Status: Download: Draft SP 800-94 Rev. 1	Draft	7/25/2012
SP	800-94	Guide to Intrusion Detection and Prevention Systems (IDPS) SP 800-94 Guide to Intrusion Detection and Prevention Systems (IDPS) 2/20/2007 Status: Download: SP 800-94 (DOI); Local Download	Final	2/20/2007
SP	800-92	Guide to Computer Security Log Management SP 800-92 Guide to Computer Security Log Management 9/13/2006 Status: Download: SP 800-92 (DOI); Local Download; SP 800-92 (EPUB)	Final	9/13/2006
SP	800-90C	Recommendation for Random Bit Generator (RBG) Constructions SP 800-90C (DRAFT) Recommendation for Random Bit Generator (RBG) Constructions 4/13/2016 Status: Download: Second Draft SP 800-90C; Comment Template	Draft	4/13/2016
SP	800-90B	Recommendation for the Entropy Sources Used for Random Bit Generation SP 800-90B Recommendation for the Entropy Sources Used for Random Bit Generation 1/10/2018 Status: Download: SP 800-90B (DOI); Local Download; 2nd Draft SP 800-90B; Comments received on 2nd Draft; Summary of Changes (from 2nd Draft to Final); Markup of Changes (from 2nd Draft to Final)	Final	1/10/2018
SP	800-90A Rev. 1	Recommendation for Random Number Generation Using Deterministic Random Bit Generators SP 800-90A Rev. 1 Recommendation for Random Number Generation Using Deterministic Random Bit Generators 6/24/2015 Status: Download: SP 800-90A Rev. 1 (DOI); Local Download; Press Release	Final	6/24/2015
SP	800-89	Recommendation for Obtaining Assurances for Digital Signature Applications SP 800-89 Recommendation for Obtaining Assurances for Digital Signature Applications 11/30/2006 Status: Download: SP 800-89 (DOI); Local Download	Final	11/30/2006
SP	800-88 Rev. 1	Guidelines for Media Sanitization SP 800-88 Rev. 1 Guidelines for Media Sanitization 12/17/2014 Status: Download: SP 800-88 Rev. 1 (DOI); Local Download	Final	12/17/2014
SP	800-87 Rev. 2	Codes for Identification of Federal and Federally-Assisted Organizations SP 800-87 Rev. 2 Codes for Identification of Federal and Federally-Assisted Organizations 4/19/2018 Status: Download: SP 800-87 Rev. 2 (DOI); Local Download	Final	4/19/2018
SP	800-86	Guide to Integrating Forensic Techniques into Incident Response SP 800-86 Guide to Integrating Forensic Techniques into Incident Response 9/01/2006 Status: Download: SP 800-86 (DOI); Local Download	Final	9/01/2006
SP	800-85B-4	PIV Data Model Test Guidelines SP 800-85B-4 (DRAFT) PIV Data Model Test Guidelines 8/06/2014 Status: Download: Draft SP 800-85B-4; Comment Template	Draft	8/06/2014
SP	800-85B	PIV Data Model Test Guidelines SP 800-85B PIV Data Model Test Guidelines 7/31/2006 Status: Download: SP 800-85B (DOI); Local Download	Final	7/31/2006
SP	800-85A-4	PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 Compliance) SP 800-85A-4 PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 Compliance) 4/13/2016 Status: Download: SP 800-85A-4 (DOI); Local Download	Final	4/13/2016
SP	800-84	Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities SP 800-84 Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities 9/21/2006 Status: Download: SP 800-84 (DOI); Local Download; SP 800-84 (EPUB)	Final	9/21/2006
SP	800-83 Rev. 1	Guide to Malware Incident Prevention and Handling for Desktops and Laptops SP 800-83 Rev. 1 Guide to Malware Incident Prevention and Handling for Desktops and Laptops 7/22/2013 Status: Download: SP 800-83 Rev. 1 (DOI); Local Download	Final	7/22/2013
SP	800-82 Rev. 2	Guide to Industrial Control Systems (ICS) Security SP 800-82 Rev. 2 Guide to Industrial Control Systems (ICS) Security 6/03/2015 Status: Download: SP 800-82 Rev. 2 (DOI); Local Download; Press Release	Final	6/03/2015
SP	800-81-2	Secure Domain Name System (DNS) Deployment Guide SP 800-81-2 Secure Domain Name System (DNS) Deployment Guide 9/18/2013 Status: Download: SP 800-81-2 (DOI); Local Download	Final	9/18/2013
SP	800-79-2	Guidelines for the Authorization of Personal Identity Verification Card Issuers (PCI) and Derived PIV Credential Issuers (DPCI) SP 800-79-2 Guidelines for the Authorization of Personal Identity Verification Card Issuers (PCI) and Derived PIV Credential Issuers (DPCI) 7/30/2015 Status: Download: SP 800-79-2 (DOI); Local Download	Final	7/30/2015
SP	800-78-4	Cryptographic Algorithms and Key Sizes for Personal Identity Verification SP 800-78-4 Cryptographic Algorithms and Key Sizes for Personal Identity Verification 5/29/2015 Status: Download: SP 800-78-4 (DOI); Local Download	Final	5/29/2015
SP	800-77	Guide to IPsec VPNs SP 800-77 Guide to IPsec VPNs 12/01/2005 Status: Download: SP 800-77 (DOI); Local Download	Final	12/01/2005
SP	800-76-2	Biometric Specifications for Personal Identity Verification SP 800-76-2 Biometric Specifications for Personal Identity Verification 7/11/2013 Status: Download: SP 800-76-2 (DOI); Local Download	Final	7/11/2013
SP	800-73-4	Interfaces for Personal Identity Verification SP 800-73-4 Interfaces for Personal Identity Verification 2/12/2016 Status: Download: SP 800-73-4 (DOI); Local Download; Press Release (06-16-2015)	Final	2/12/2016
SP	800-72	Guidelines on PDA Forensics SP 800-72 Guidelines on PDA Forensics 11/01/2004 Status: Download: SP 800-72 (DOI); Local Download	Final	11/01/2004
SP	800-70 Rev. 4	National Checklist Program for IT Products: Guidelines for Checklist Users and Developers SP 800-70 Rev. 4 National Checklist Program for IT Products: Guidelines for Checklist Users and Developers 2/15/2018 Status: Download: SP 800-70 Rev. 4 (DOI); Local Download; National Checklist Program	Final	2/15/2018
SP	800-69	Guidance for Securing Microsoft Windows XP Home Edition: A NIST Security Configuration Checklist SP 800-69 Guidance for Securing Microsoft Windows XP Home Edition: A NIST Security Configuration Checklist 9/29/2006 Status: Download: SP 800-69 (DOI); Local Download	Final	9/29/2006
SP	800-68 Rev. 1	Guide to Securing Microsoft Windows XP Systems for IT Professionals: A NIST Security Configuration Checklist SP 800-68 Rev. 1 Guide to Securing Microsoft Windows XP Systems for IT Professionals: A NIST Security Configuration Checklist 10/24/2008 Status: Download: SP 800-68 Rev. 1 (DOI); Local Download; Security Templates R1.2.1; NIST Windows Security Baseline Database Application v0.2.7	Final	10/24/2008
SP	800-67 Rev. 2	Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher SP 800-67 Rev. 2 Recommendation for the Triple Data Encryption Algorithm (TDEA) Block Cipher 11/17/2017 Status: Download: SP 800-67 Rev. 2 (DOI); Local Download; NIST Statement on Current Use and Deprecation of TDEA (7/11/17)	Final	11/17/2017
SP	800-66 Rev. 1	An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule SP 800-66 Rev. 1 An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule 10/23/2008 Status: Download: SP 800-66 Rev. 1 (DOI); Local Download	Final	10/23/2008
SP	800-65	Integrating IT Security into the Capital Planning and Investment Control Process SP 800-65 Integrating IT Security into the Capital Planning and Investment Control Process 1/01/2005 Status: Download: SP 800-65 (DOI); Local Download	Final	1/01/2005
SP	800-64 Rev. 2	Security Considerations in the System Development Life Cycle SP 800-64 Rev. 2 Security Considerations in the System Development Life Cycle 10/16/2008 Status: Download: SP 800-64 Rev. 2 (DOI); Local Download	Final	10/16/2008
SP	800-63-3	Digital Identity Guidelines SP 800-63-3 Digital Identity Guidelines 12/01/2017 Status: Download: SP 800-63-3 (DOI); Local Download; FAQ; SP 800-63-3 (GitHub)	Final	12/01/2017
SP	800-63C	Digital Identity Guidelines: Federation and Assertions SP 800-63C Digital Identity Guidelines: Federation and Assertions 12/01/2017 Status: Download: SP 800-63C (DOI); Local Download; FAQ; SP 800-63-3 (GitHub)	Final	12/01/2017
SP	800-63B	Digital Identity Guidelines: Authentication and Lifecycle Management SP 800-63B Digital Identity Guidelines: Authentication and Lifecycle Management 12/01/2017 Status: Download: SP 800-63B (DOI); Local Download; FAQ; SP 800-63-3 (GitHub)	Final	12/01/2017
SP	800-63A	Digital Identity Guidelines: Enrollment and Identity Proofing SP 800-63A Digital Identity Guidelines: Enrollment and Identity Proofing 12/01/2017 Status: Download: SP 800-63A (DOI); Local Download; FAQ; SP 800-63-3 (GitHub)	Final	12/01/2017
SP	800-61 Rev. 2	Computer Security Incident Handling Guide SP 800-61 Rev. 2 Computer Security Incident Handling Guide 8/06/2012 Status: Download: SP 800-61 Rev. 2 (DOI); Local Download; Press Release	Final	8/06/2012
SP	800-60 Vol. 2 Rev. 1	Guide for Mapping Types of Information and Information Systems to Security Categories: Appendices SP 800-60 Vol. 2 Rev. 1 Guide for Mapping Types of Information and Information Systems to Security Categories: Appendices 8/01/2008 Status: Download: SP 800-60 Vol. 2 Rev. 1 (DOI); Local Download	Final	8/01/2008
SP	800-60 Vol. 1 Rev. 1	Guide for Mapping Types of Information and Information Systems to Security Categories SP 800-60 Vol. 1 Rev. 1 Guide for Mapping Types of Information and Information Systems to Security Categories 8/01/2008 Status: Download: SP 800-60 Vol. 1 Rev. 1 (DOI); Local Download	Final	8/01/2008
SP	800-59	Guideline for Identifying an Information System as a National Security System SP 800-59 Guideline for Identifying an Information System as a National Security System 8/20/2003 Status: Download: SP 800-59 (DOI); Local Download	Final	8/20/2003
SP	800-58	Security Considerations for Voice Over IP Systems SP 800-58 Security Considerations for Voice Over IP Systems 1/01/2005 Status: Download: SP 800-58 (DOI); Local Download	Final	1/01/2005
SP	800-57 Part 3 Rev. 1	Recommendation for Key Management, Part 3: Application-Specific Key Management Guidance SP 800-57 Part 3 Rev. 1 Recommendation for Key Management, Part 3: Application-Specific Key Management Guidance 1/22/2015 Status: Download: SP 800-57 Part 3 Rev. 1 (DOI); Local Download	Final	1/22/2015
SP	800-57 Part 2 Rev. 1	Recommendation for Key Management, Part 2: Best Practices for Key Management Organization SP 800-57 Part 2 Rev. 1 (DRAFT) Recommendation for Key Management, Part 2: Best Practices for Key Management Organization 4/06/2018 Status: Download: Draft SP 800-57 Part 2 Rev. 1	Draft	4/06/2018
SP	800-57 Part 2	Recommendation for Key Management, Part 2: Best Practices for Key Management Organization SP 800-57 Part 2 Recommendation for Key Management, Part 2: Best Practices for Key Management Organization 8/25/2005 Status: Download: SP 800-57 Part 2 (DOI); Local Download; Comments received on Draft (Apr. 2005)	Final	8/25/2005
SP	800-57 Part 1 Rev. 4	Recommendation for Key Management, Part 1: General SP 800-57 Part 1 Rev. 4 Recommendation for Key Management, Part 1: General 1/28/2016 Status: Download: SP 800-57 Part 1 Rev. 4 (DOI); Local Download; Comments and resolutions for SP 800-57 Part 1, Rev. 4	Final	1/28/2016
SP	800-56C Rev. 1	Recommendation for Key-Derivation Methods in Key-Establishment Schemes SP 800-56C Rev. 1 Recommendation for Key-Derivation Methods in Key-Establishment Schemes 4/16/2018 Status: Download: SP 800-56C Rev. 1 (DOI); Local Download; Comments received on Draft SP 800-56C Rev. 1	Final	4/16/2018
SP	800-56B Rev. 1	Recommendation for Pair-Wise Key-Establishment Schemes Using Integer Factorization Cryptography SP 800-56B Rev. 1 Recommendation for Pair-Wise Key-Establishment Schemes Using Integer Factorization Cryptography 10/01/2014 Status: Download: SP 800-56B Rev. 1 (DOI); Local Download	Final	10/01/2014
SP	800-56A Rev. 3	Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography SP 800-56A Rev. 3 Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography 4/16/2018 Status: Download: SP 800-56A Rev. 3 (DOI); Local Download; Comments received on Draft SP 800-56A Rev. 3	Final	4/16/2018
SP	800-55 Rev. 1	Performance Measurement Guide for Information Security SP 800-55 Rev. 1 Performance Measurement Guide for Information Security 7/16/2008 Status: Download: SP 800-55 Rev. 1 (DOI); Local Download	Final	7/16/2008
SP	800-54	Border Gateway Protocol Security SP 800-54 Border Gateway Protocol Security 7/17/2007 Status: Download: SP 800-54 (DOI); Local Download	Final	7/17/2007
SP	800-53 Rev. 5	Security and Privacy Controls for Information Systems and Organizations SP 800-53 Rev. 5 (DRAFT) Security and Privacy Controls for Information Systems and Organizations 8/15/2017 Status: Download: Draft SP 800-53 Rev. 5; Draft SP 800-53 Rev. 5 Controls Markup; Draft SP 800-53 Rev. 5 Baseline Markup	Draft	8/15/2017
SP	800-53 Rev. 4	Security and Privacy Controls for Federal Information Systems and Organizations SP 800-53 Rev. 4 Security and Privacy Controls for Federal Information Systems and Organizations 1/22/2015 Status: Download: SP 800-53 Rev. 4 (DOI); Local Download; Word version of SP 800-53 Rev. 4 (01-22-2015); 800-53 Rev 4 Control Database; XML file for SP 800-53 Rev. 4 (01-15-2014); Summary of NIST SP 800-53 Revision 4; Press Release (04-30-2013)	Final	1/22/2015
SP	800-53A Rev. 4	Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans SP 800-53A Rev. 4 Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans 12/18/2014 Status: Download: SP 800-53A Rev. 4 (DOI); Local Download; Word version of SP 800-53A Rev. 4 (12-18-2014); XML file for SP 800-53A Rev. 4 (06-16-2015); Press Release	Final	12/18/2014
SP	800-52 Rev. 2	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations SP 800-52 Rev. 2 (DRAFT) Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations 11/15/2017 Status: Download: Draft SP 800-52 Rev. 2; Comments received	Draft	11/15/2017
SP	800-52 Rev. 1	Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations SP 800-52 Rev. 1 Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations 4/28/2014 Status: Download: SP 800-52 Rev. 1 (DOI); Local Download; Press Release	Final	4/28/2014
SP	800-51 Rev. 1	Guide to Using Vulnerability Naming Schemes SP 800-51 Rev. 1 Guide to Using Vulnerability Naming Schemes 2/25/2011 Status: Download: SP 800-51 Rev. 1 (DOI); Local Download; Press Release	Final	2/25/2011
SP	800-50	Building an Information Technology Security Awareness and Training Program SP 800-50 Building an Information Technology Security Awareness and Training Program 10/01/2003 Status: Download: SP 800-50 (DOI); Local Download	Final	10/01/2003
SP	800-49	Federal S/MIME V3 Client Profile SP 800-49 Federal S/MIME V3 Client Profile 11/05/2002 Status: Download: SP 800-49 (DOI); Local Download	Final	11/05/2002
SP	800-48 Rev. 1	Guide to Securing Legacy IEEE 802.11 Wireless Networks SP 800-48 Rev. 1 Guide to Securing Legacy IEEE 802.11 Wireless Networks 7/25/2008 Status: Download: SP 800-48 Rev. 1 (DOI); Local Download	Final	7/25/2008
SP	800-47	Security Guide for Interconnecting Information Technology Systems SP 800-47 Security Guide for Interconnecting Information Technology Systems 9/01/2002 Status: Download: SP 800-47 (DOI); Local Download	Final	9/01/2002
SP	800-46 Rev. 2	Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security SP 800-46 Rev. 2 Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security 7/29/2016 Status: Download: SP 800-46 Rev. 2 (DOI); Local Download	Final	7/29/2016
SP	800-45 Version 2	Guidelines on Electronic Mail Security SP 800-45 Version 2 Guidelines on Electronic Mail Security 2/20/2007 Status: Download: SP 800-45 Version 2 (DOI); Local Download	Final	2/20/2007
SP	800-44 Version 2	Guidelines on Securing Public Web Servers SP 800-44 Version 2 Guidelines on Securing Public Web Servers 10/09/2007 Status: Download: SP 800-44 Version 2 (DOI); Local Download	Final	10/09/2007
SP	800-43	Systems Administration Guidance for Securing Windows 2000 Professional System SP 800-43 Systems Administration Guidance for Securing Windows 2000 Professional System 11/01/2002 Status: Download: SP 800-43 (DOI); Local Download; Security Templates R1.2.3	Final	11/01/2002
SP	800-41 Rev. 1	Guidelines on Firewalls and Firewall Policy SP 800-41 Rev. 1 Guidelines on Firewalls and Firewall Policy 9/28/2009 Status: Download: SP 800-41 Rev. 1 (DOI); Local Download	Final	9/28/2009
SP	800-40 Rev. 3	Guide to Enterprise Patch Management Technologies SP 800-40 Rev. 3 Guide to Enterprise Patch Management Technologies 7/22/2013 Status: Download: SP 800-40 Rev. 3 (DOI); Local Download; Press Release	Final	7/22/2013
SP	800-39	Managing Information Security Risk: Organization, Mission, and Information System View SP 800-39 Managing Information Security Risk: Organization, Mission, and Information System View 3/01/2011 Status: Download: SP 800-39 (DOI); Local Download; Press Release	Final	3/01/2011
SP	800-38G	Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption SP 800-38G Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption 3/29/2016 Status: Download: SP 800-38G (DOI); Local Download; Press Release	Final	3/29/2016
SP	800-38F	Recommendation for Block Cipher Modes of Operation: Methods for Key Wrapping SP 800-38F Recommendation for Block Cipher Modes of Operation: Methods for Key Wrapping 12/13/2012 Status: Download: SP 800-38F (DOI); Local Download	Final	12/13/2012
SP	800-38E	Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices SP 800-38E Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices 1/18/2010 Status: Download: SP 800-38E (DOI); Local Download	Final	1/18/2010
SP	800-38D	Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC SP 800-38D Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC 11/28/2007 Status: Download: SP 800-38D (DOI); Local Download	Final	11/28/2007
SP	800-38C	Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality SP 800-38C Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality 7/20/2007 Status: Download: SP 800-38C (DOI); Local Download	Final	7/20/2007
SP	800-38B	Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication SP 800-38B Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication 10/06/2016 Status: Download: SP 800-38B (DOI); Local Download	Final	10/06/2016
SP	800-38A Addendum	Recommendation for Block Cipher Modes of Operation: Three Variants of Ciphertext Stealing for CBC Mode SP 800-38A Addendum Recommendation for Block Cipher Modes of Operation: Three Variants of Ciphertext Stealing for CBC Mode 10/21/2010 Status: Download: SP 800-38A Addendum (DOI); Local Download	Final	10/21/2010
SP	800-38A	Recommendation for Block Cipher Modes of Operation: Methods and Techniques SP 800-38A Recommendation for Block Cipher Modes of Operation: Methods and Techniques 12/01/2001 Status: Download: SP 800-38A (DOI); Local Download	Final	12/01/2001
SP	800-37 Rev. 2	Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy SP 800-37 Rev. 2 (DRAFT) Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy 5/09/2018 Status: Download: Draft SP 800-37 Rev. 2; Draft, with line numbers; Mark-up Copy of Draft SP 800-37 Rev. 2; Comment template; Presentation: RMF 2.0 (introduces the initial public draft); NIST Press Release	Draft	5/09/2018
SP	800-37 Rev. 1	Guide for Applying the Risk Management Framework to Federal Information Systems: a Security Life Cycle Approach SP 800-37 Rev. 1 Guide for Applying the Risk Management Framework to Federal Information Systems: a Security Life Cycle Approach 6/10/2014 Status: Download: SP 800-37 Rev. 1 (DOI); Local Download; Supplemental Guidance on Ongoing Authorization, (June 2014); Press Release	Final	6/10/2014
SP	800-36	Guide to Selecting Information Technology Security Products SP 800-36 Guide to Selecting Information Technology Security Products 10/09/2003 Status: Download: SP 800-36 (DOI); Local Download	Final	10/09/2003
SP	800-35	Guide to Information Technology Security Services SP 800-35 Guide to Information Technology Security Services 10/09/2003 Status: Download: SP 800-35 (DOI); Local Download	Final	10/09/2003
SP	800-34 Rev. 1	Contingency Planning Guide for Federal Information Systems SP 800-34 Rev. 1 Contingency Planning Guide for Federal Information Systems 11/11/2010 Status: Download: SP 800-34 Rev. 1 (DOI); Local Download; Business Impact Analysis (BIA) Template; Contingency Planning: Low Impact System Template; Contingency Planning: Moderate Impact System Template; Contingency Planning: High Impact System Template	Final	11/11/2010
SP	800-33	Underlying Technical Models for Information Technology Security SP 800-33 Underlying Technical Models for Information Technology Security 12/01/2001 Status: Download: SP 800-33 (DOI); Local Download	Final	12/01/2001
SP	800-32	Introduction to Public Key Technology and the Federal PKI Infrastructure SP 800-32 Introduction to Public Key Technology and the Federal PKI Infrastructure 2/26/2001 Status: Download: SP 800-32 (DOI); Local Download	Final	2/26/2001
SP	800-30 Rev. 1	Guide for Conducting Risk Assessments SP 800-30 Rev. 1 Guide for Conducting Risk Assessments 9/17/2012 Status: Download: SP 800-30 Rev. 1 (DOI); Local Download; SP 800-30 Rev. 1 (EPUB); Press Release	Final	9/17/2012
SP	800-29	A Comparison of the Security Requirements for Cryptographic Modules in FIPS 140-1 and FIPS 140-2 SP 800-29 A Comparison of the Security Requirements for Cryptographic Modules in FIPS 140-1 and FIPS 140-2 6/01/2001 Status: Download: SP 800-29 (DOI); Local Download	Final	6/01/2001
SP	800-28 Version 2	Guidelines on Active Content and Mobile Code SP 800-28 Version 2 Guidelines on Active Content and Mobile Code 3/07/2008 Status: Download: SP 800-28 Version 2 (DOI); Local Download	Final	3/07/2008
SP	800-25	Federal Agency Use of Public Key Technology for Digital Signatures and Authentication SP 800-25 Federal Agency Use of Public Key Technology for Digital Signatures and Authentication 10/01/2000 Status: Download: SP 800-25 (DOI); Local Download	Final	10/01/2000
SP	800-24	PBX Vulnerability Analysis: Finding Holes in Your PBX Before Someone Else Does SP 800-24 PBX Vulnerability Analysis: Finding Holes in Your PBX Before Someone Else Does 4/01/2001 Status: Download: SP 800-24 (DOI); Local Download	Final	4/01/2001
SP	800-23	Guidelines to Federal Organizations on Security Assurance and Acquisition/Use of Tested/Evaluated Products SP 800-23 Guidelines to Federal Organizations on Security Assurance and Acquisition/Use of Tested/Evaluated Products 8/01/2000 Status: Download: SP 800-23 (DOI); Local Download	Final	8/01/2000
SP	800-22 Rev. 1a	A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications SP 800-22 Rev. 1a A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications 4/30/2010 Status: Download: SP 800-22 Rev. 1a (DOI); Local Download	Final	4/30/2010
SP	800-22 Rev. 1	A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications SP 800-22 Rev. 1 A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications 8/01/2008 Status: Download: None available	Final	8/01/2008
SP	800-20	Modes of Operation Validation System for the Triple Data Encryption Algorithm (TMOVS): Requirements and Procedures SP 800-20 Modes of Operation Validation System for the Triple Data Encryption Algorithm (TMOVS): Requirements and Procedures 3/01/2012 Status: Download: SP 800-20 (DOI); Local Download	Final	3/01/2012
SP	800-19	Mobile Agent Security SP 800-19 Mobile Agent Security 10/01/1999 Status: Download: SP 800-19 (DOI); Local Download	Final	10/01/1999
SP	800-18 Rev. 1	Guide for Developing Security Plans for Federal Information Systems SP 800-18 Rev. 1 Guide for Developing Security Plans for Federal Information Systems 2/24/2006 Status: Download: SP 800-18 Rev. 1 (DOI); Local Download	Final	2/24/2006
SP	800-17	Modes of Operation Validation System (MOVS): Requirements and Procedures SP 800-17 Modes of Operation Validation System (MOVS): Requirements and Procedures 2/01/1998 Status: Download: SP 800-17 (DOI); Local Download	Final	2/01/1998
SP	800-16 Rev. 1	A Role-Based Model for Federal Information Technology/Cybersecurity Training SP 800-16 Rev. 1 (DRAFT) A Role-Based Model for Federal Information Technology/Cybersecurity Training 3/14/2014 Status: Download: Draft SP 800-16 Rev. 1 (3rd draft)	Draft	3/14/2014
SP	800-16	Information Technology Security Training Requirements: a Role- and Performance-Based Model SP 800-16 Information Technology Security Training Requirements: a Role- and Performance-Based Model 4/01/1998 Status: Download: SP 800-16 (DOI); Local Download	Final	4/01/1998
SP	800-15	MISPC Minimum Interoperability Specification for PKI Components, Version 1 SP 800-15 MISPC Minimum Interoperability Specification for PKI Components, Version 1 1/01/1998 Status: Download: SP 800-15 (DOI); Local Download	Final	1/01/1998
SP	800-13	Telecommunications Security Guidelines for Telecommunications Management Network SP 800-13 Telecommunications Security Guidelines for Telecommunications Management Network 10/02/1995 Status: Download: SP 800-13 (DOI); Local Download	Final	10/02/1995
SP	800-12 Rev. 1	An Introduction to Information Security SP 800-12 Rev. 1 An Introduction to Information Security 6/22/2017 Status: Download: SP 800-12 Rev. 1 (DOI); Local Download	Final	6/22/2017
SP	800-1	Bibliography of Selected Computer Security Publications, January 1980 - October 1989 SP 800-1 Bibliography of Selected Computer Security Publications, January 1980 - October 1989 12/01/1990 Status: Download: SP 800-1 (DOI); Local Download	Final	12/01/1990
SP	500-325	Fog Computing Conceptual Model SP 500-325 Fog Computing Conceptual Model 3/14/2018 Status: Download: SP 500-325 (DOI); Local Download	Final	3/14/2018
SP	500-320	Report of the Workshop on Software Measures and Metrics to Reduce Security Vulnerabilities (SwMM-RSV) SP 500-320 Report of the Workshop on Software Measures and Metrics to Reduce Security Vulnerabilities (SwMM-RSV) 11/10/2016 Status: Download: SP 500-320 (DOI); Local Download	Final	11/10/2016
SP	500-304	Conformance Testing Methodology Framework for ANSI/NIST-ITL 1-2011 Update: 2013, Data Format for the Interchange of Fingerprint, Facial & Other Biometric Information SP 500-304 Conformance Testing Methodology Framework for ANSI/NIST-ITL 1-2011 Update: 2013, Data Format for the Interchange of Fingerprint, Facial & Other Biometric Information 6/24/2015 Status: Download: SP 500-304 (DOI); Local Download; BioCTS homepage	Final	6/24/2015
SP	500-299	NIST Cloud Computing Security Reference Architecture SP 500-299 (DRAFT) NIST Cloud Computing Security Reference Architecture 5/05/2013 Status: Download: Draft SP 500-299; NIST Cloud Computing Security Working Group homepage	Draft	5/05/2013

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer Security
Resource Center

Publication Search

Quick Links

Search Results

Quick Links

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

Computer SecurityResource Center

Publication Search

Quick Links

Search Results

Quick Links

Computer Security
Resource Center