NIST 800-53R5(A) Assessing Security and Privacy Controls in Information Systems and Organizations

NIST 800-53R5(A) Assessing Security and Privacy Controls in Information Systems and Organizations.
This publication provides a methodology and set of procedures for conducting assessments of security and privacy controls employed within systems and organizations within an effective risk management framework. The assessment procedures, executed at various phases of the system development life cycle, are consistent with the security and privacy controls in NIST Special Publication 800-53, Revision 5. The procedures are customizable and can be easily tailored to provide organizations with the needed flexibility to conduct security and privacy control assessments that support organizational risk management processes and are aligned with the stated risk tolerance of the organization. Information on building effective security and privacy assessment plans is also provided with guidance on analyzing assessment results.

SP 800-53A is a companion guideline to [SP 800-53] Security and Privacy Controls for Systems and Organizations. Each publication provides guidance for implementing specific steps in the Risk Management Framework (RMF).1 SP 800-53 and [SP 800-53B] address the Select step of the RMF and provide guidance on security and privacy control selection

[jimr]

Great Stuff! Sorry I missed the livestream, but the missus has other things planned for my time. Cheers!

[Cwhitlock-StudyGRC]

#TeamGRC #GRC_Mafia You got it correct enough 🤣