Information SecurityUnited States
NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software
What is NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software?
NIST's minimum standard for how software producers verify their own code under Executive Order 14028: eleven techniques from threat modelling and static analysis through coverage-measured tests, fuzzing and included-component checks, plus secure defaults and supply chain integrity at release. It comprises 13 controls organised across 2 domains, and applies in the United States.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →Where NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software overlaps with the standards you already hold
NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software vs ISO 27001:2022View comparison →NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software vs SOC 2View comparison →NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software vs NIST CSF 2.0View comparison →NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software vs GDPRView comparison →NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software vs HIPAAView comparison →NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software vs PCI DSS 4.0View comparison →
What NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software means in your sector
NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software for Healthcare→NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software for Financial Services→NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software for Technology→NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software for Government→NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software for Manufacturing→NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software for Energy→NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software for Retail→NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software for Education→
What NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software means for your job
NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software for CISOs→NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software for Compliance Officers→NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software for Risk Managers→NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software for IT Directors→NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software for DPOs→NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software for Auditors→
Questions people ask about NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software
What is NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software?
NIST's minimum standard for how software producers verify their own code under Executive Order 14028: eleven techniques from threat modelling and static analysis through coverage-measured tests, fuzzing and included-component checks, plus secure defaults and supply chain integrity at release.
How many controls does NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software have?
NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software contains 13 controls organized across 2 domains.
Where does NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software apply?
NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software applies in United States. Organizations operating in or serving customers in this jurisdiction should check whether its requirements reach them.
Which version of NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software is covered here?
This page covers NIST IR 8397 (October 2021).
Query NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software programmatically
NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software, its 13 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software API reference and MCP config →How ready are you for NIST IR 8397 Guidelines on Minimum Standards for Developer Verification of Software?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .