CGRC · Question #74
Which NIST Special publication provides guidance on security assessment reports? Response:
The correct answer is B. NIST SP 800-53A. NIST SP 800-53A provides guidance on assessing the security controls of federal information systems and covers the details for security assessment reports. This publication outlines the procedures and methods for conducting security control assessments.
Question
Which NIST Special publication provides guidance on security assessment reports? Response:
Options
- ANIST SP 800-18
- BNIST SP 800-53A
- CNIST SP 800-53
- DNIST SP 800-37
How the community answered
(40 responses)- A3% (1)
- B88% (35)
- C3% (1)
- D8% (3)
Why each option
NIST SP 800-53A provides guidance on assessing the security controls of federal information systems and covers the details for security assessment reports. This publication outlines the procedures and methods for conducting security control assessments.
NIST SP 800-18, "Guide for Developing Security Plans for Federal Information Systems," focuses on System Security Plans (SSPs), not security assessment reports.
NIST SP 800-53A, "Assessing Security and Privacy Controls in Federal Information Systems and Organizations," provides guidance and procedures for conducting security control assessments. This includes the structure and content of security assessment reports, which document the findings of these assessments.
NIST SP 800-53, "Security and Privacy Controls for Federal Information Systems and Organizations," defines the security controls themselves, not the guidance for assessment reports.
NIST SP 800-37, "Guide for Applying the Risk Management Framework to Federal Information Systems," outlines the overall RMF process, not specific guidance for security assessment reports.
Concept tested: NIST publications - Security Assessment Reports
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53Ar5.pdf
Topics
Community Discussion
No community discussion yet for this question.