August-9/us-18-Lipner-SDL-For-The-Rest-Of-Us.pdf), “Application Software Security and the CIS Controls: A Reference · Paper” by Steve Lipner and Stacy Simpson from SAFECode (https://safecode.org/resource-publications/cis-controls/), and · “Simplified Implementation of the Microsoft SDL” by Microsoft (https://www.microsoft.com/en- us/download/details.aspx?id=12379). NIST SP 800-218 ·

September 30, 2021 - August-9/us-18-Lipner-SDL-For-The-Rest-Of-Us.pdf) and “Simplified Implementation of the Microsoft SDL” by Microsoft · (https://www.microsoft.com/en-us/download/details.aspx?id=12379). NIST SP 800-218 (DRAFT) SSDF VERSION 1.1 · 4 · 2 · The Secure Software Development Framework ·

February 3, 2022 - Publication: https://doi.org/10.6028/NIST.SP.800-218 Download URL Potential updates (xlsx) Translations

Natl. Inst. Stand. Technol. Spec. Publ. 800-218, 31 pages (September 2021)

Additional information about this publication is available at https://csrc.nist.gov/pubs/sp/800/218/a/final,

April 29, 2024 - NIST Special Publication (SP) 800-218.

NIST.SP.800-218.SSDF-table - Free download as Excel Spreadsheet (.xls / .xlsx), PDF File (.pdf), Text File (.txt) or read online for free. This document outlines practices and tasks for defining security requirements for software development.

nist.sp.800-218.ssdf-table - Free download as Excel Spreadsheet (.xls / .xlsx), PDF File (.pdf), Text File (.txt) or read online for free. The document outlines practices and tasks for defining and implementing secure software development. It ...

NIST Special Publication 800-218 · Secure Software Development · Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk · of Software Vulnerabilities · 2 · Copyright © 2022 The Printer Working Group. All rights reserved. Executive Order on Improving the ·

April 29, 2024 - This document augments the secure software development practices and tasks defined in Secure Software Development Framework (SSDF) version 1.1 by adding practices, tasks, recommendations, considerations, notes, and informative references that are specific to AI model development throughout ...

December 17, 2025 - Few software development life cycle (SDLC) models explicitly address software security in detail, so secure software development practices usually need to be added to each SDLC model to ensure that the software being developed is well-secured. This document recommends the Secure Software ...

July 26, 2024 - This document augments the secure software development practices and tasks defined in Secure Software Development Framework (SSDF) version 1.1 by adding practices, tasks, recommendations, considerations, notes, and informative references that are specific to AI model development throughout ...

Explore NIST SP 800-218 and CISA Attestation Requirements · Download the PDF · Table of Contents · Introduction · NIST 800-218 Requirements and Sonatype · Attestation Form and Sonatype · Get in Touch · In May 2021, the White House issued Executive Order 14028 on Improving the Nation’s Cybersecurity, the first federal regulation targeting the security of software components.

September 30, 2021 - Few software development life cycle (SDLC) models explicitly address software security in detail, so secure software development practices usually need to be added to each SDLC model to ensure that the software being developed is well-secured. This document recommends the Secure Software Development Framework (SSDF) – a core set of high-level secure software development practices that can be integrated into each SDLC implementation.

NIST SP 800-218, Secure Software ... Technology Supply Chain Security · This document describes a set of fundamental, sound practices for secure software development called the Secure Software Development Framework (SSDF)....

March 10, 2026 - It is NOT software. You cannot download NIST SP 800–218 and install it. It is a PDF document (available for free) that describes practices you must implement in your own development pipeline.

https://csrc.nist.gov/publications/detail/sp/800-218/final

Includes current (Final and Draft) SP 800 pubs. All SP Series: Current NIST Special Publications (SP), including SP 800 (Computer/Information Security) and SP 1800 (Cybersecurity Practice Guides) pubs. Also includes SP 500 (Computer Systems Technology) pubs related to cybersecurity and privacy.

NIST Special Publication 800-208 · Recommendation for Stateful

The Secure Software Development Framework (SSDF), detailed in NIST Special Publication 800-218, is a set of fundamental, high-level practices for building secure software.