CGRC · Question #692
Which NIST SP provides a provides a security control catalog for systems at each level, Security and Privacy Controls for Federal Information Systems and Organizations. Response:
The correct answer is A. NIST SP 800-53. NIST Special Publication 800-53 is the authoritative document that provides a comprehensive catalog of security and privacy controls for federal information systems and organizations. It serves as a foundational guide for establishing secure and resilient information systems.
Question
Which NIST SP provides a provides a security control catalog for systems at each level, Security and Privacy Controls for Federal Information Systems and Organizations. Response:
Options
- ANIST SP 800-53
- BNIST SP 800-37
- CNIST SP 800-40
- DNIST SP 800-60
How the community answered
(25 responses)- A92% (23)
- B4% (1)
- D4% (1)
Why each option
NIST Special Publication 800-53 is the authoritative document that provides a comprehensive catalog of security and privacy controls for federal information systems and organizations. It serves as a foundational guide for establishing secure and resilient information systems.
NIST SP 800-53, titled "Security and Privacy Controls for Federal Information Systems and Organizations," is precisely the standard that defines the security control catalog and the associated control baselines for systems at different impact levels. This publication is essential for implementing the Risk Management Framework (RMF) and ensuring the confidentiality, integrity, and availability of federal information.
NIST SP 800-37 focuses on the Risk Management Framework (RMF) itself, not the security control catalog.
NIST SP 800-40 deals with patch and vulnerability management.
NIST SP 800-60 provides guidance on mapping information types to security categories.
Concept tested: NIST security control catalog
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf
Topics
Community Discussion
No community discussion yet for this question.