Skip to content
EnvironmentalUnited States

NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines

What is NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines?

NIST's strategies for integrating software supply chain security into DevSecOps CI/CD pipelines: environment baselines, open-source intake, SCM controls, pipeline trust and attestations, secure build, commit and deploy requirements, GitOps practice and update-key protection. It comprises 28 controls organised across 5 domains, and applies in the United States.

Map this against the frameworks you already hold

The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.

Browse the framework graph →

Where NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines overlaps with the standards you already hold

What NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines means in your sector

What NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines means for your job

Questions people ask about NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines

What is NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines?
NIST's strategies for integrating software supply chain security into DevSecOps CI/CD pipelines: environment baselines, open-source intake, SCM controls, pipeline trust and attestations, secure build, commit and deploy requirements, GitOps practice and update-key protection.
How many controls does NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines have?
NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines contains 28 controls organized across 5 domains.
Where does NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines apply?
NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines applies in United States. Organizations operating in or serving customers in this jurisdiction should check whether its requirements reach them.
Which version of NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines is covered here?
This page covers NIST SP 800-204D (February 2024).

Query NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines programmatically

NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines, its 28 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.

NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines API reference and MCP config →

How ready are you for NIST SP 800-204D Software Supply Chain Security in DevSecOps CI/CD Pipelines?

Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.

Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .