| SP 1800-10 |
Protecting Information and System Integrity in Industrial Control System Environments: Cybersecurity for the Manufacturing Sector |
Dated March 16, 2022. |
|
| SP 800-101 Rev. 1 |
Guidelines on Mobile Device Forensics |
Dated May 15, 2014. |
|
| SP 800-108 Rev. 1 |
Recommendation for Key Derivation Using Pseudorandom Functions |
Dated February 2, 2024. |
|
| SP 800-111 |
Guide to Storage Encryption Technologies for End User Devices |
Dated November 15, 2007. |
|
| SP 800-113 |
Guide to SSL VPNs |
Dated July 1, 2008. |
|
| SP 800-114 Rev. 1 |
User's Guide to Telework and Bring Your Own Device (BYOD) Security |
Dated July 29, 2016. |
|
| SP 800-115 |
Technical Guide to Information Security Testing and Assessment |
Dated September 3, 2008. |
|
| SP 800-116 Rev. 1 |
Guidelines for the Use of PIV Credentials in Facility Access |
Dated June 29, 2018. |
|
| SP 800-119 |
Guidelines for the Secure Deployment of IPv6 |
Dated December 29, 2010. |
|
| SP 800-12 Rev. 1 |
An Introduction to Information Security |
Dated June 22, 2017. |
|
| SP 800-121 Rev. 2 |
Guide to Bluetooth Security |
Dated January 19, 2022. |
|
| SP 800-122 |
Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) |
Dated April 6, 2010. |
|
| SP 800-123 |
Guide to General Server Security |
Dated July 25, 2008. |
|
| SP 800-124 Rev. 2 |
Guidelines for Managing the Security of Mobile Devices in the Enterprise |
Dated May 17, 2023. |
|
| SP 800-125 |
Guide to Security for Full Virtualization Technologies |
Dated January 28, 2011. |
|
| SP 800-125A Rev. 1 |
Security Recommendations for Server-based Hypervisor Platforms |
Dated June 7, 2018. |
|
| SP 800-125B |
Secure Virtual Network Configuration for Virtual Machine (VM) Protection |
Dated March 7, 2016. |
|
| SP 800-126 Rev. 3 |
The Technical Specification for the Security Content Automation Protocol (SCAP): SCAP Version 1.3 |
Dated February 14, 2018. |
|
| SP 800-126A |
SCAP 1.3 Component Specification Version Updates: An Annex to NIST Special Publication 800-126 Revision 3 |
Dated February 14, 2018. |
|
| SP 800-128 |
Guide for Security-Focused Configuration Management of Information Systems (Update 1) |
Dated October 10, 2019. |
|
| SP 800-130 |
A Framework for Designing Cryptographic Key Management Systems |
Dated August 15, 2013. |
|
| SP 800-131A Rev. 2 |
Transitioning the Use of Cryptographic Algorithms and Key Lengths |
Dated March 21, 2019. |
Public comment period closed 12/4/24 |
| SP 800-132 |
Recommendation for Password-Based Key Derivation: Part 1: Storage Applications |
Dated December 22, 2010. |
Revisions planned as of 5/11/23 |
| SP 800-133 Rev. 2 |
Recommendation for Cryptographic Key Generation |
Dated June 4, 2020. |
|
| SP 800-135 Rev. 1 |
Recommendation for Existing Application-Specific Key Derivation Functions |
Dated December 23, 2011. |
Under review/revision by NIST as of 8/20/24 |
| SP 800-137 |
Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations |
Dated September 30, 2011. |
|
| SP 800-137A |
Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment |
Dated May 21, 2020. |
|
| SP 800-140 |
FIPS 140-3 Derived Test Requirements (DTR): CMVP Validation Authority Updates to ISO/IEC 24759 |
Dated March 20, 2020. |
|
| SP 800-140A |
CMVP Documentation Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 |
Dated March 20, 2020. |
|
| SP 800-140B Rev.1 |
CMVP Security Policy Requirements: CMVP Validation Authority Updates to ISO/IEC 24759 and ISO/IEC 19790 Annex B |
Dated November 17, 2023. |
|
| SP 800-140C Rev. 2 |
CMVP Approved Security Functions: CMVP Validation Authority Updates to ISO/IEC 24759 |
Dated July 25, 2023. |
|
| SP 800-140D Rev. 2 |
CMVP Approved Sensitive Parameter Generation and Establishment Methods: CMVP Validation Authority Updates to ISO/IEC 24759 |
Dated July 25, 2023. |
|
| SP 800-140E |
CMVP Approved Authentication Mechanisms: CMVP Validation Authority Requirements for ISO/IEC 19790 Annex E and ISO/IEC 24579 Section 6.17 |
Dated March 20, 2020. |
|
| SP 800-140F |
CMVP Approved Non-Invasive Attack Mitigation Test Metrics: CMVP Validation Authority Updates to ISO/IEC 24759 |
Dated March 20, 2020. |
|
| SP 800-142 |
Practical Combinatorial Testing |
Dated October 7, 2010. |
|
| SP 800-144 |
Guidelines on Security and Privacy in Public Cloud Computing |
Dated December 9, 2011. |
|
| SP 800-145 |
The NIST Definition of Cloud Computing |
Dated September 28, 2011. |
|
| SP 800-146 |
Cloud Computing Synopsis and Recommendations |
Dated May 29, 2012. |
|
| SP 800-147 |
BIOS Protection Guidelines |
Dated April 29, 2011. |
|
| SP 800-147B |
BIOS Protection Guidelines for Servers |
Dated August 28, 2014. |
|
| SP 800-150 |
Guide to Cyber Threat Information Sharing |
Dated October 4, 2016. |
|
| SP 800-152 |
A Profile for U.S. Federal Cryptographic Key Management Systems (CKMS) |
Dated October 28, 2015. |
|
| SP 800-153 |
Guidelines for Securing Wireless Local Area Networks (WLANs) |
Dated February 21, 2012. |
|
| SP 800-156 |
Representation of PIV Chain-of-Trust for Import and Export |
Dated May 20, 2016. |
|
| SP 800-157 |
Guidelines for Derived Personal Identity Verification (PIV) Credentials |
Dated December 19, 2014. |
|
| SP 800-160 Vol. 1 Rev. 1 |
Engineering of Trustworthy Secure Systems |
Dated November 16, 2022. |
|
| SP 800-160 Vol. 2 Rev. 1 |
Developing Cyber-Resilient Systems: A Systems Security Engineering Approach |
Dated December 9, 2021. |
|
| SP 800-161 Rev. 1 |
Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations |
Dated November 1, 2024. |
|
| SP 800-162 |
Guide to Attribute Based Access Control (ABAC) Definition and Considerations |
Dated August 2, 2019. |
|
| SP 800-163 Rev. 1 |
Vetting the Security of Mobile Applications |
Dated April 19, 2019. |
|
| SP 800-166 |
Derived PIV Application and Data Model Test Guidelines |
Dated June 6, 2016. |
|
| SP 800-167 |
Guide to Application Whitelisting |
Dated October 28, 2015. |
|
| SP 800-168 |
Approximate Matching: Definition and Terminology |
Dated July 2, 2014. |
|
| SP 800-171 Rev. 3 |
Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations |
Dated May 14, 2024. |
|
| SP 800-172 |
Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171 |
Dated February 2, 2021. |
|
| SP 800-172A |
Assessing Enhanced Security Requirements for Controlled Unclassified Information |
Dated March 15, 2022. |
|
| SP 800-175A |
Guideline for Using Cryptographic Standards in the Federal Government: Directives, Mandates and Policies |
Dated August 22, 2016. |
|
| SP 800-175B Rev. 1 |
Guideline for Using Cryptographic Standards in the Federal Government: Cryptographic Mechanisms |
Dated March 31, 2020. |
|
| SP 800-177 Rev. 1 |
Trustworthy Email |
Dated February 26, 2019. |
|
| SP 800-178 |
A Comparison of Attribute Based Access Control (ABAC) Standards for Data Service Applications: Extensible Access Control Markup Language (XACML) and Next Generation Access Control (NGAC) |
Dated October 3, 2016. |
|
| SP 800-18 Rev. 2 |
Guide for Developing Security Plans for Federal Information Systems |
Dated June 30, 2026. |
|
| SP 800-181 Rev. 1 |
Workforce Framework for Cybersecurity (NICE Framework) |
Dated November 16, 2020. |
|
| SP 800-183 |
Networks of 'Things' |
Dated July 28, 2016. |
|
| SP 800-184 |
Guide for Cybersecurity Event Recovery |
Dated December 22, 2016. |
|
| SP 800-185 |
SHA-3 Derived Functions: cSHAKE, KMAC, TupleHash, and ParallelHash |
Dated December 22, 2016. |
|
| SP 800-187 |
Guide to LTE Security |
Dated December 21, 2017. |
|
| SP 800-189 |
Resilient Interdomain Traffic Exchange: BGP Security and DDoS Mitigation |
Dated December 17, 2019. |
|
| SP 800-190 |
Application Container Security Guide |
Dated September 25, 2017. |
|
| SP 800-192 |
Verification and Test Methods for Access Control Policies/Models |
Dated June 27, 2017. |
|
| SP 800-193 |
Platform Firmware Resiliency Guidelines |
Dated May 4, 2018. |
|
| SP 800-202 |
Quick Start Guide for Populating Mobile Test Devices |
Dated May 10, 2018. |
|
| SP 800-204 |
Security Strategies for Microservices-based Application Systems |
Dated August 7, 2019. |
|
| SP 800-204A |
Building Secure Microservices-based Applications Using Service-Mesh Architecture |
Dated May 27, 2020. |
|
| SP 800-204B |
Attribute-based Access Control for Microservices-based Applications using a Service Mesh |
Dated August 6, 2021. |
|
| SP 800-204C |
Implementation of DevSecOps for a Microservices-based Application with Service Mesh |
Dated March 8, 2022. |
|
| SP 800-205 |
Attribute Considerations for Access Control Systems |
Dated June 18, 2019. |
|
| SP 800-207 |
Zero Trust Architecture |
Dated August 11, 2020. |
|
| SP 800-208 |
Recommendation for Stateful Hash-Based Signature Schemes |
Dated October 29, 2020. |
|
| SP 800-209 Rev. 1 |
Security Guidelines for Storage Infrastructure |
Dated October 29, 2020. |
Comment period closed as of 9/8/26 |
| SP 800-210 |
General Access Control Guidance for Cloud Systems |
Dated July 31, 2020. |
|
| SP 800-213 |
IoT Device Cybersecurity Guidance for the Federal Government: Establishing IoT Device Cybersecurity Requirements |
Dated November 29, 2021. |
|
| SP 800-213A |
IoT Device Cybersecurity Guidance for the Federal Government: IoT Device Cybersecurity Requirement Catalog |
Dated November 29, 2021. |
|
| SP 800-218 |
Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities |
Dated February 3, 2022. |
|
| SP 800-219 Rev. 2 |
Automated Secure Configuration Guidance from the macOS Security Compliance Project (mSCP) |
Dated July 21, 2023. |
Comment period closed as of 8/14/26 |
| SP 800-22 Rev. 1 |
A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications |
Dated April 30, 2010. |
Revision by NIST in progress as of 4/19/22 |
| SP 800-220 |
Fiscal Year 2021 Cybersecurity and Privacy Annual Report |
Dated September 26, 2022. |
|
| SP 800-28 Version 2 |
Guidelines on Active Content and Mobile Code |
Dated March 7, 2008. |
|
| SP 800-30 Rev. 1 |
Guide for Conducting Risk Assessments |
Dated September 17, 2012. |
|
| SP 800-34 Rev. 1 |
Contingency Planning Guide for Federal Information Systems |
Dated November 11, 2010. |
Inquiries for this are open as of 3/17/23 |
| SP 800-35 |
Guide to Information Technology Security Services |
Dated October 9, 2003. |
|
| SP 800-37 Rev. 2 |
Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy |
Dated December 10, 2018. |
|
| SP 800-38A |
Recommendation for Block Cipher Modes of Operation: Methods and Techniques |
Dated December 1, 2001. |
Under review/revision by NIST as of 4/28/23 |
| SP 800-38A Addendum |
Recommendation for Block Cipher Modes of Operation: Three Variants of Ciphertext Stealing for CBC Mode |
Dated October 21, 2010. |
Under review by NIST, will be merged into 38A (4/28/23) |
| SP 800-38B |
Recommendation for Block Cipher Modes of Operation: the CMAC Mode for Authentication |
Dated October 6, 2016. |
Under review/revision by NIST as of 4/10/25 |
| SP 800-38C |
Recommendation for Block Cipher Modes of Operation: the CCM Mode for Authentication and Confidentiality |
Dated July 20, 2007. |
Under review/revision by NIST as of 4/10/25 |
| SP 800-38D Rev.1 |
Recommendation for Block Cipher Modes of Operation: Galois/Counter Mode (GCM) and GMAC |
Dated November 28, 2007. |
Comment period closed as of 7/31/26 |
| SP 800-38E |
Recommendation for Block Cipher Modes of Operation: the XTS-AES Mode for Confidentiality on Storage Devices |
Dated January 18, 2010. |
Under review/revision by NIST as of 3/6/24 |
| SP 800-38F |
Recommendation for Block Cipher Modes of Operation: Methods for Key Wrapping |
Dated December 13, 2012. |
|
| SP 800-38G |
Recommendation for Block Cipher Modes of Operation: Methods for Format-Preserving Encryption |
Dated August 4, 2016. |
Revised by NIST; public comment closed 4/15/19 |
| SP 800-39 |
Managing Information Security Risk: Organization, Mission, and Information System View |
Dated March 1, 2011. |
|
| SP 800-40 Rev. 4 |
Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology |
Dated April 6, 2022. |
|
| SP 800-41 Rev. 1 |
Guidelines on Firewalls and Firewall Policy |
Dated September 28, 2009. |
|
| SP 800-44 Version 2 |
Guidelines on Securing Public Web Servers |
Dated October 9, 2007. |
|
| SP 800-45 Version 2 |
Guidelines on Electronic Mail Security |
Dated February 20, 2007. |
|
| SP 800-46 Rev. 2 |
Guide to Enterprise Telework, Remote Access, and Bring Your Own Device (BYOD) Security |
Dated July 29, 2016. |
|
| SP 800-47 Rev. 1 |
Managing the Security of Information Exchanges |
Dated July 20, 2021. |
|
| SP 800-49 |
Federal S/MIME V3 Client Profile |
Dated November 5, 2002. |
|
| SP 800-50 Rev.1 |
Building a Cybersecurity and Privacy Learning Program |
Dated September 12, 2024. |
|
| SP 800-51 Rev. 1 |
Guide to Using Vulnerability Naming Schemes |
Dated February 25, 2011. |
|
| SP 800-52 Rev. 2 |
Guidelines for the Selection, Configuration, and Use of Transport Layer Security (TLS) Implementations |
Dated August 29, 2019. |
Comment period closed as of 7/10/26 |
| SP 800-53 Rev. 5 |
Security and Privacy Controls for Information Systems and Organizations |
Dated December 10, 2020. |
Updated with new content as of 8/27/25 |
| SP 800-53A Rev. 5 |
Assessing Security and Privacy Controls in Information Systems and Organizations |
Dated January 25, 2022. |
Updated with new content as of 8/27/25 |
| SP 800-53B |
Control Baselines for Information Systems and Organizations |
Dated December 10, 2020. |
Updated with new content as of 8/27/25 |
| SP 800-55 Vol. 1 |
Measurement Guide for Information Security: Volume 1 — Identifying and Selecting Measures |
Dated December 4, 2024. |
|
| SP 800-55 Vol 2 |
Measurement Guide for Information Security: Volume 2 — Developing an Information Security Measurement Program |
Dated December 4, 2024. |
|
| SP 800-56A Rev. 3 |
Recommendation for Pair-Wise Key-Establishment Schemes Using Discrete Logarithm Cryptography |
Dated April 16, 2018. |
Under review/revision by NIST as of 1/6/26 |
| SP 800-56B Rev. 2 |
Recommendation for Pair-Wise Key-Establishment Using Integer Factorization Cryptography |
Dated March 21, 2019. |
Under review/revision by NIST as of 1/6/26 |
| SP 800-56C Rev. 2 |
Recommendation for Key-Derivation Methods in Key-Establishment Schemes |
Dated August 18, 2020. |
Under review/revision by NIST as of 1/6/26 |
| SP 800-57 Part 1 Rev. 5 |
Recommendation for Key Management: Part 1 – General |
Dated May 4, 2020. |
|
| SP 800-57 Part 2 Rev. 1 |
Recommendation for Key Management: Part 2 – Best Practices for Key Management Organizations |
Dated May 23, 2019. |
Under review/revision by NIST as of 7/1/25 |
| SP 800-57 Part 3 Rev. 1 |
Recommendation for Key Management, Part 3: Application-Specific Key Management Guidance |
Dated January 22, 2015. |
Under review/revision by NIST as of 7/1/25 |
| SP 800-58 |
Security Considerations for Voice Over IP Systems |
Dated January 1, 2005. |
|
| SP 800-59 |
Guideline for Identifying an Information System as a National Security System |
Dated August 20, 2003. |
|
| SP 800-60 Vol. 1 Rev. 1 |
Guide for Mapping Types of Information and Information Systems to Security Categories |
Dated August 1, 2008. |
|
| SP 800-60 Vol. 2 Rev. 1 |
Guide for Mapping Types of Information and Information Systems to Security Categories: Appendices |
Dated August 1, 2008. |
|
| SP 800-61 Rev. 3 |
Incident Response Recommendations and Considerations for Cybersecurity Risk Management: A CSF 2.0 Community Profile |
Dated April 3, 2025. |
|
| SP 800-63A |
Digital Identity Guidelines: Identity Proofing and Enrollment |
Dated July 31, 2025. |
|
| SP 800-63B-4 |
Digital Identity Guidelines: Authentication and Authenticator Management |
Dated July 31, 2025. |
|
| SP 800-63C-4 |
Digital Identity Guidelines: Federation and Assertions |
Dated July 31, 2025. |
|
| SP 800-66 Rev. 2 |
An Introductory Resource Guide for Implementing the Health Insurance Portability and Accountability Act (HIPAA) Security Rule |
Dated February 14, 2024. |
|
| SP 800-70 Rev. 5 |
National Checklist Program for IT Products: Guidelines for Checklist Users and Developers |
Dated May 8, 2026. |
|
| SP 800-72 |
Guidelines on PDA Forensics |
Dated November 1, 2004. |
|
| SP 800-73-5 |
Interfaces for Personal Identity Verification: Part 1 – PIV Card Application Namespace, Data Model, and Representation |
Dated July 15, 2024. |
|
| SP 800-76-2 |
Biometric Specifications for Personal Identity Verification |
Dated July 11, 2013. |
|
| SP 800-77 Rev. 1 |
Guide to IPsec VPNs |
Dated June 30, 2020. |
|
| SP 800-78-5 |
Cryptographic Algorithms and Key Sizes for Personal Identity Verification |
Dated July 15, 2024. |
|
| SP 800-79-2 |
Guidelines for the Authorization of Personal Identity Verification Card Issuers (PCI) and Derived PIV Credential Issuers (DPCI) |
Dated July 30, 2015. |
|
| SP 800-81 Rev. 3 |
Secure Domain Name System (DNS) Deployment Guide |
Dated March 19, 2026. |
|
| SP 800-82 Rev. 3 |
Guide to Operational Technology (OT) Security |
Dated September 28, 2023. |
Updates under consideration as of 7/18/24 |
| SP 800-83 Rev. 1 |
Guide to Malware Incident Prevention and Handling for Desktops and Laptops |
Dated July 22, 2013. |
|
| SP 800-84 |
Guide to Test, Training, and Exercise Programs for IT Plans and Capabilities |
Dated September 21, 2006. |
|
| SP 800-85A-4 |
PIV Card Application and Middleware Interface Test Guidelines (SP 800-73-4 Compliance) |
Dated April 13, 2016. |
|
| SP 800-85B |
PIV Data Model Test Guidelines |
Dated July 31, 2006. |
|
| SP 800-86 |
Guide to Integrating Forensic Techniques into Incident Response |
Dated September 1, 2006. |
|
| SP 800-87 Rev. 2 |
Codes for Identification of Federal and Federally-Assisted Organizations |
Dated April 19, 2018. |
|
| SP 800-88 Rev. 2 |
Guidelines for Media Sanitization |
Dated September 26, 2025. |
|
| SP 800-89 |
Recommendation for Obtaining Assurances for Digital Signature Applications |
Dated November 30, 2006. |
|
| SP 800-90A Rev. 1 |
Recommendation for Random Number Generation Using Deterministic Random Bit Generators |
Dated June 24, 2015. |
|
| SP 800-90B |
Recommendation for the Entropy Sources Used for Random Bit Generation |
Dated January 10, 2018. |
Updates under consideration as of 5/28/25 |
| SP 800-92 |
Guide to Computer Security Log Management |
Dated September 13, 2006. |
|
| SP 800-94 |
Guide to Intrusion Detection and Prevention Systems (IDPS) |
Dated February 20, 2007. |
Rev 1 never published and retired; under review/revision by NIST as of 7/15/22 |
| SP 800-95 |
Guide to Secure Web Services |
Dated August 29, 2007. |
|
| SP 800-96 |
PIV Card to Reader Interoperability Guidelines |
Dated December 29, 2006. |
|
| SP 800-98 |
Guidelines for Securing Radio Frequency Identification (RFID) Systems |
Dated April 6, 2007. |
|