NIST SP800-53 rev 5
This publication provides a catalogue of security and privacy controls for information systems and organisations to protect organisational operations and assets, individuals, other organizations, and others from a diverse set of threats and risks, including hostile attacks, human errors, natural disasters, structural failures, foreign intelligence entities, and privacy risks. This revision includes amendments up to 10 December 2020. The controls and enhancements provided are flexible and customizable and are to be implemented as part of an organisation-wide process to manage risk. The controls address diverse requirements derived from mission and business needs, laws, executive orders, directives, regulations, policies, standards, and guidelines. Finally, the consolidated control catalogue addresses security and privacy from a functionality perspective (i.e., the strength of functions and mechanisms provided by the controls) and from an assurance perspective (i.e., the measure of confidence in the security or privacy capability provided by the controls). Addressing functionality and assurance helps to ensure that information technology products and the systems that rely on those products are sufficiently trustworthy.
Sector(s):
- All
Jurisdiction(s):
- All
Filter By:
Filter By:
Category:
Show All
Legislation
Cybersecurity
Whistleblower
Privacy
Workplace Health & Safety
Modern Slavery
Financial Services
Business
Risk Management
Filter By:
Load More