Title: Security and Privacy Controls for Federal Information Systems and Organizations
Overview: NIST SP 800-53 provides a catalog of security and privacy controls for federal information systems and organizations. The publication outlines a process for selecting and implementing these controls to protect organizational operations, assets, individuals, and the nation from a diverse set of threats.
Revisions:
- Revision 3: Introduced significant improvements to the security control catalog, including new controls and enhancements to existing controls.
- Revision 4: Expanded the control catalog to address new threats and technologies, and included privacy controls to protect personally identifiable information (PII).
- Revision 5: Integrated security and privacy controls into a unified control catalog, updated controls to address emerging threats, and provided mappings to other frameworks and standards.
Key Control Families:
- Access Control (AC): Controls related to limiting access to information systems and data.
- Audit and Accountability (AU): Controls for monitoring and recording system activities.
- Security Assessment and Authorization (CA): Controls for assessing and authorizing information systems.
- Configuration Management (CM): Controls for managing system configurations.
- Contingency Planning (CP): Controls for preparing for and responding to emergencies.
- Identification and Authentication (IA): Controls for verifying the identity of users and devices.
- Incident Response (IR): Controls for detecting and responding to security incidents.
- Maintenance (MA): Controls for maintaining system security.
- Media Protection (MP): Controls for protecting information stored on media.
- Physical and Environmental Protection (PE): Controls for securing physical access to systems.
- Planning (PL): Controls for developing security plans.
- Personnel Security (PS): Controls for managing personnel security.
- Risk Assessment (RA): Controls for assessing risks to information systems.
- System and Services Acquisition (SA): Controls for acquiring secure systems and services.
- System and Communications Protection (SC): Controls for protecting system communications.
- System and Information Integrity (SI): Controls for ensuring system integrity.
Contáctanos! / Contact Us.
Please let us know how can we help you filling the following form or gives a call: +52 55 2060 4781 , number in Mexico.
Contáctenos llenando este formato o puede llamar al +52 55 2060 4781 en México.
Por favor, díganos sus necesidades y requerimientos.
