Which NIST Special Publication defines Security Products?

• A. NIST SP 800-35
• B. NIST SP 800-36
• C. NIST SP 800-64
• D. NIST SP 800-65

Answer: (B)

The question tests knowledge of where NIST provides the official definition of Security Products in its published guidance. A Security Product refers to the actual hardware or software tools that implement security controls, as opposed to processes, policies, or risk-management activities.

NIST Special Publication 800-36 is the source that defines Security Products and explains how they fit into the federal security program, including their role in selection and evaluation. The other publications cover different topics, such as risk management, system lifecycle planning, or testing and assessment, and do not provide the definition of Security Products. This helps ensure consistent terminology across federal security documents, procurement, and compliance activities.