Information SecurityUnited States
NIST SP 800-115
What is NIST SP 800-115?
Technical Guide to Information Security Testing. It comprises 31 controls organised across 6 domains, published by NIST, and applies in the United States.
Map this against the frameworks you already hold
The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.
Browse the framework graph →The 6 domains NIST SP 800-115 groups its controls into
NIST SP 800-115: Operations Security
NIST SP 800-115: Information Security Policies
NIST SP 800-115: Asset Management
NIST SP 800-115: Communications Security
NIST SP 800-115: Access Control
Where NIST SP 800-115 overlaps with the standards you already hold
What NIST SP 800-115 means in your sector
What NIST SP 800-115 means for your job
Questions people ask about NIST SP 800-115
What is NIST SP 800-115?
Technical Guide to Information Security Testing.
How many controls does NIST SP 800-115 have?
NIST SP 800-115 contains 31 controls organized across 6 domains.
Where does NIST SP 800-115 apply?
NIST SP 800-115 is applicable in United States. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
What frameworks does NIST SP 800-115 map to?
NIST SP 800-115 has control-to-control mappings with 529 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.
How do I get started with NIST SP 800-115 compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.
Query NIST SP 800-115 programmatically
NIST SP 800-115, its 31 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
NIST SP 800-115 API reference and MCP config →How ready are you for NIST SP 800-115?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .