Revised Catalog of Security Controls for Federal Information Systems and Organizations: For Use in Both National Security and Nonnational Security Systems

This bulletin summarizes the information presented in NIST Special Publication 800-53, Revision 3, Recommended Security Controls for Federal Information Systems and Organizations, on the catalog of security controls for information systems. These best practices are broad based and comprehensive... See full abstract

This bulletin summarizes the information presented in NIST Special Publication 800-53, Revision 3, Recommended Security Controls for Federal Information Systems and Organizations, on the catalog of security controls for information systems. These best practices are broad based and comprehensive safeguards and countermeasures for protecting today s information systems. The publication presents a uniform approach to describing controls for both national security and non-national security applications to help government organizations address advanced cyber threats that can exploit vulnerabilities in federal information systems. The bulletin explains the role of security controls in the risk management process that IT managers apply to balance the operational and economic costs of protective measures for their information and IT systems with the gains in capabilities and improved support of organizational mission that result from the use of efficient protection procedures. Information is provided about how the information on security controls is organized in the publication and how to access NIST standards and guidelines that pertain to security controls.
Hide full abstract