Secure .gov websites use HTTPS
A lock (
) or https:// means youโve safely connected to the .gov website. Share sensitive information only on official, secure websites.
NIST has finalized Special Publication (SP) 800-70r5 (Revision 5), National Checklist Program for IT Products โ Guidelines for Checklist Users and Developers. The update includes an appendix with enhanced mapping concepts between checklist settings, NIST Cybersecurity Framework (CSF) 2.0 outcomes, SP 800-53 controls, and Common Configuration Enumeration (CCE) identifiers for evidence-ready automation and reporting.
Open for public comment until May 6, 2026: CSF 2.0 Informative References QuickโStart Guide. This draft explains how to find, filter, and apply informative references using NIST tools. Review and submit comments here.