The NIST Security and Privacy Control Overlay Repository (SCOR), formerly the Security Control Overlay Repository, provides stakeholders a platform for voluntarily sharing control overlays created by subject matter experts to help reduce the duplication of effort and share best practices for the information security and privacy community.
SCOR is organized into categories of overlays based on the submitting organization:
Government-wide | Overlay submissions from federal, state, tribal, and local governments. |
Public | Overlay submissions from commercial, educational, or non-profit organizations. |
NIST | Overlays developed by NIST. |
Security and Privacy: general security & privacy, privacy, risk management, security measurement, security programs & operations
Laws and Regulations: E-Government Act, Federal Information Security Modernization Act