February 3, 2022 - Supplemental Material: SP 800-218 Table in Excel (xlsx) Delta from April 2020 paper (docx) Delta from September 2021 public draft (docx) SSDF Project homepage Executive Order 14028, Improving the Nation's Cybersecurity

CSRC provides access to NIST's cybersecurity- and information security-related projects, publications, news and events.

April 13, 2026 - NIST Special Publication (SP) 800-218, Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities has been posted as final, along with a Microsoft Excel version of the SSDF 1.1 table. SP 800-218 includes mappings from Executive ...

October 10, 2024 - SCF Set Theory Relationship Mapping (STRM) - Excel download using NIST IR 8477 guidance for crosswalk mapping.

NIST.SP.800-218.SSDF-table - Free download as Excel Spreadsheet (.xls / .xlsx), PDF File (.pdf), Text File (.txt) or read online for free. This document outlines practices and tasks for defining security requirements for software development.

NIST Special Publication (SP) 800-218, Secure Software Development Framework (SSDF) Version 1.1: Recommendations · for Mitigating the Risk of Software Vulnerabilities has been posted as final, along with a Microsoft Excel version of the

September 30, 2021 - Natl. Inst. Stand. Technol. Spec. Publ. 800-218, 31 pages (September 2021)

A recording of the workshop can be viewed on NIST's website. NIST Special Publication (SP) 800-218, Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities has been posted as final, along with a Microsoft Excel version of ...

Includes current (Final and Draft) SP 800 pubs. All SP Series: Current NIST Special Publications (SP), including SP 800 (Computer/Information Security) and SP 1800 (Cybersecurity Practice Guides) pubs. Also includes SP 500 (Computer Systems Technology) pubs related to cybersecurity and privacy.

August 29, 2022 - This article can help: https://scribesecurity.com/blog/nist-sp-800-218-what-is-this-framework-and-how-to-utilize-it/?utm_campaign=Reddit groups&utm_source=reddit&utm_medium=social&utm_term=Reddit Groups SSDF framework blog&utm_content=Reddit Groups SSDF framework blog Share

April 29, 2024 - NIST Special Publication (SP) 800-218.

September 30, 2021 - Natl. Inst. Stand. Technol. Spec. Publ. 800-218, 31 pages (September 2021)

An artifact is “a piece of evidence” [adapted from IR7692]. Evidence is “grounds for belief or disbelief; data on which to base proof or to establish truth or falsehood” [SP800160]. Artifacts provide records of secure software development practices.

September 30, 2021 - Few software development life cycle ... developed is well secured. Draft SP 800-218 recommends a core set of high-level secure software development practices called the SSDF that can be integrated within each SDLC implementation....

NIST SP 800-218, Secure Software ... Technology Supply Chain Security · This document describes a set of fundamental, sound practices for secure software development called the Secure Software Development Framework (SSDF)....

Additional information about this publication is available at https://csrc.nist.gov/pubs/sp/800/218/a/final,

Stay compliant with NIST SP 800-218 and CISA requirements. Discover how Sonatype enhances software supply chain security and can help you comply.

December 17, 2025 - Few software development life cycle (SDLC) models explicitly address software security in detail, so secure software development practices usually need to be added to each SDLC model. SP 800-218 recommends the Secure Software Development Framework (SSDF), which is a core set of high-level secure ...

3 weeks ago - NIST has released Special Publication (SP) 800-18r2 (Revision 2), Developing Security, Privacy, and Cybersecurity Supply Chain Risk Management Plans for Systems. This revision broadens the scope of system planning to encompass three interconnected plan types that are collectively referred to ...