NIST SP 1800 series
The SP 1800 series consists of Practice Guides published by the NCCoE (National Cybersecurity Center of Excellence). Whereas SP 800 defines “what to do,” SP 1800 explains “how to implement it,” illustrating combinations of commercial products.
For the full text, see csrc.nist.gov/publications/sp1800.
Main current documents
| Number | Title | Overview |
|---|---|---|
| SP 1800-5 | IT Asset Management | IT asset management for the financial sector |
| SP 1800-10 | Protecting Information and System Integrity in Industrial Control System Environments | Integrity protection in ICS environments |
| SP 1800-11 | Data Integrity: Recovering from Ransomware and Other Destructive Events | Recovery after ransomware |
| SP 1800-22 | Mobile Device Security: Bring Your Own Device (BYOD) | BYOD security |
| SP 1800-25 | Data Integrity: Identifying and Protecting Assets Against Ransomware | Pre-incident ransomware measures |
| SP 1800-26 | Data Integrity: Detecting and Responding to Ransomware | Ransomware detection / response |
| SP 1800-31 | Improving Enterprise Patching for General IT Systems | Implementing patch operations |
| SP 1800-35 | Implementing a Zero Trust Architecture | Implementation guide for SP 800-207 |
| SP 1800-38 | Migration to Post-Quantum Cryptography | PQC migration |