U.S. flag   An unofficial archive of your favorite United States government website
Dot gov

Official websites do not use .rip
We are an unofficial archive, replace .rip by .gov in the URL to access the official website. Access our document index here.


Secure websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to our website. Please do not share sensitive information with us.

This is an archive
(replace .gov by .rip)

SP 1800-27

Securing Property Management Systems

Date Published: March 2021


William Newhouse (NIST), Michael Ekstrom (MITRE), Jeff Finke (MITRE), Marisa Harriston (MITRE)



access control; hospitality cybersecurity; moving target defense; PCI DSS; PMS, privacy; property management system; role-based authentication; tokenization; network security; zero trust architecture
Control Families

Access Control; Assessment, Authorization and Monitoring; Configuration Management; Identification and Authentication; Incident Response; Physical and Environmental Protection; Program Management; Risk Assessment; System and Communications Protection; System and Information Integrity