Glossary
This is a potential security issue, you are being redirected to https://csrc.nist.gov · An official website of the United States government
Publications Expand or Collapse
Includes current (Final and Draft) SP 800 pubs. All SP Series: Current NIST Special Publications (SP), including SP 800 (Computer/Information Security) and SP 1800 (Cybersecurity Practice Guides) pubs. Also includes SP 500 (Computer Systems Technology) pubs related to cybersecurity and privacy.
Special Publications (SPs)
Includes current (Final and Draft) SP 800 pubs. All SP Series: Current NIST Special Publications (SP), including SP 800 (Computer/Information Security) and SP 1800 (Cybersecurity Practice Guides) pubs. Also includes SP 500 (Computer Systems Technology) pubs related to cybersecurity and privacy.
FIPS (standards)
Includes current (Final and Draft) SP 800 pubs. All SP Series: Current NIST Special Publications (SP), including SP 800 (Computer/Information Security) and SP 1800 (Cybersecurity Practice Guides) pubs. Also includes SP 500 (Computer Systems Technology) pubs related to cybersecurity and privacy.
🌐
CISA
cisa.gov › resources-tools › resources › nist-sp-800-218-secure-software-development-framework-v11-recommendations-mitigating-risk-software
NIST SP 800-218, Secure Software Development Framework V1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities | CISA
NIST SP 800-218, Secure Software Development Framework V1.1: Recommendations fo… · Related topics: Information and Communications Technology Supply Chain Security · This document describes a set of fundamental, sound practices for secure software development called the Secure Software Development Framework (SSDF)....
People also ask

How does this course align with NIST SP 800-218?
The course focuses on the core principles of NIST SP 800-218, including secure software development practices, governance, risk-based decision-making, and how SSDF integrates with NIST CSF 2.0, SP 800-53, and SP 800-37.
🌐
nistcybersecurityprofessional.website
nistcybersecurityprofessional.website › home › ncsp framework › nist sp 800-218 › ncsp 800-218 awareness certificate
NIST 800‑218 Awareness Training | NIST Secure Software Development ...
Is NCSP 800-218 Awareness considered official NIST training?
NCSP training is not generic NIST training. It is a governed credential ecosystem aligned to NIST CSF 2.0 and the NIST SP 800-series, with formal governance and stewardship by The Digital Trust Institute.
🌐
nistcybersecurityprofessional.website
nistcybersecurityprofessional.website › home › ncsp framework › nist sp 800-218 › ncsp 800-218 awareness certificate
NIST 800‑218 Awareness Training | NIST Secure Software Development ...
What is the NCSP 800-218 Awareness Certificate?
The NCSP 800-218 Awareness Certificate introduces foundational concepts from NIST SP 800-218: Secure Software Development Framework (SSDF). It is part of the governed NCSP credential ecosystem aligned to NIST CSF 2.0 and the NIST SP 800-series.
🌐
nistcybersecurityprofessional.website
nistcybersecurityprofessional.website › home › ncsp framework › nist sp 800-218 › ncsp 800-218 awareness certificate
NIST 800‑218 Awareness Training | NIST Secure Software Development ...
🌐
NIST CSRC
csrc.nist.gov › pubs › sp › 800 › 218 › r1 › ipd
NIST Special Publication (SP) 800-218 Rev. 1 (Draft), Secure Software Development Framework (SSDF) Version 1.2: Recommendations for Mitigating the Risk of Software Vulnerabilities
December 17, 2025 - Few software development life cycle (SDLC) models explicitly address software security in detail, so secure software development practices usually need to be added to each SDLC model. SP 800-218 recommends the Secure Software Development Framework (SSDF), which is a core set of high-level secure ...
🌐
Checkmarx
checkmarx.com › blog › what-you-need-to-know-about-nist-800-218-the-secure-software-development-framework
What You Need To Know About NIST 800-218
February 3, 2026 - We are now seeing indicators of how the US Government intends to drive the changes they believe are necessary. One of the requirements they are implementing is that all software vendors attest that they developed their software in accordance with NIST 800-218, the Secure Software Development Framework, or SSDF.
🌐
Black Duck
blackduck.com › blog › nist-ssdf-secure-software-development.html
Implementing NIST SSDF: Best Practices for Secure Software Development
August 12, 2025 - The National Institute of Standards and Technology (NIST) Special Publication (SP) 800-218, also known as the Secure Software Development Framework (SSDF) is a critical guide for contemporary secure software development.
🌐
Nistcybersecurityprofessional
nistcybersecurityprofessional.website › home › ncsp framework › nist sp 800-218 › ncsp 800-218 awareness certificate
NIST 800‑218 Awareness Training | NIST Secure Software Development Framework (SSDF)
NIST Special Publication 800‑218, Secure Software Development Framework (SSDF), provides a set of fundamental, outcome‑based practices for building secure software and reducing vulnerabilities throughout the software development lifecycle.
🌐
NIST
nvlpubs.nist.gov › nistpubs › specialpublications › nist.sp.800-218.pdf pdf
NIST Special Publication 800-218 Secure Software Development
An artifact is “a piece of evidence” [adapted from IR7692]. Evidence is “grounds for belief or disbelief; data on which to base proof or to establish truth or falsehood” [SP800160]. Artifacts provide records of secure software development practices.
Find elsewhere
🌐
NIST CSRC
csrc.nist.gov › pubs › sp › 800 › 218 › a › ipd
NIST Special Publication (SP) 800-218A (Withdrawn), Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile
April 29, 2024 - This publication augments the secure software development practices and tasks defined in SP 800-218, Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities.
🌐
CSRC
csrc.nist.rip › News › 2024 › nist-publishes-sp-800218a
NIST Publishes SP 800-218A | CSRC
July 29, 2024 - Today, NIST is releasing Special Publication (SP) 800-218A, Secure Software Development Practices for Generative AI and Dual-Use Foundation Models: An SSDF Community Profile.
🌐
Anchore
anchore.com › blog › about-new-nist-ssdf
An Introduction to NIST's Secure Software Development Framework | Anchore
The National Institute of Standards and Technology (NIST) published SP 800-218 — the Secure Software Development Framework (SSDF) — in 2022 alongside Executive Order 14028.
🌐
Securebydesignhandbook
securebydesignhandbook.com › united states › nist sp 800-218 (ssdf)
NIST SP 800-218 (SSDF) | Secure-by-Design Handbook
The Secure Software Development Framework (SSDF), detailed in NIST Special Publication 800-218, is a set of fundamental, high-level practices for building secure software.
🌐
RegScale
regscale.com › home › regscale announces support for the nist 800-218 ssdf catalog
Support for the NIST 800-218 SSDF Catalog | RegScale
August 16, 2024 - The National Institute of Standards and Technology (NIST) Special Publication (SP) 800-218 Revision 1 provides on best practices for secure software development.
🌐
Reddit
reddit.com › r/devsecops › nist sp 800-218 – what is this framework and how to utilize it
r/devsecops on Reddit: NIST SP 800-218 – What Is This Framework and How To Utilize It
August 29, 2022 - This article can help: https://scribesecurity.com/blog/nist-sp-800-218-what-is-this-framework-and-how-to-utilize-it/?utm_campaign=Reddit groups&utm_source=reddit&utm_medium=social&utm_term=Reddit Groups SSDF framework blog&utm_content=Reddit Groups SSDF framework blog Share
🌐
Nistcybersecurityprofessional
nistcybersecurityprofessional.website › home › ncsp framework › nist sp 800-218 › ncsp 800-218 foundation certificate
NIST 800‑218 SSDF Training | Secure Software Development Framework
Learn NIST SP 800‑218 secure software development practices. Covers SSDF tasks, controls, and integration into DevSecOps pipelines. This 2-day, instructor led, course introduces the NIST Secure Software Development Framework (SSDF), teaching ...
🌐
Pivot Point Security
pivotpointsecurity.com › pivot point security › information security services › nist sp 800-218 (ssdf)
NIST SP 800-218 (SSDF) - Pivot Point Security
March 24, 2026 - The NIST SP 800-218 standard, “Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities” was created per direction in the May 2021 Executive Order (EO) 14028 on cybersecurity.
🌐
NIST CSRC
csrc.nist.gov › News › 2022 › nist-publishes-sp-800-218-ssdf-v11
NIST Updates the Secure Software Development Framework (SSDF) | CSRC
February 4, 2022 - NIST has released Special Publication (SP) 800-218, Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software Vulnerabilities.
🌐
NIST
nvlpubs.nist.gov › nistpubs › CSWP › NIST.CSWP.04232020.pdf pdf
Withdrawn White Paper Warning Notice
Series/Number NIST Special Publication 800-218 · Title Secure Software Development Framework (SSDF) Version 1.1: Recommendations for Mitigating the Risk of Software · Vulnerabilities · Publication Date February 2022 · DOI https://doi.org/10.6028/NIST.SP.800-218 ·