Security and Privacy Controls for Information Systems and Organizations Rev 5: Draft NIST Special Publication 800-53 Revision 5

Rev 4 was SUPERCEDED BY REV 5 (this version) RELEASED 15 AUG 2017 Also available for Kindle

Includes a Forward written by Luis Ayala on how each NIST title is an integral part of a holistic cybersecurity strategy.

This publication provides a catalog of security and privacy controls for federal information systems and organizations to protect organizational operations and assets, individuals, other organizations, and the Nation from a diverse set of threats including hostile attacks, natural disasters, structural failures, human errors, and privacy risks. The controls are flexible and customizable and implemented as part of an organization-wide process to manage risk. The controls address diverse requirements derived from mission and business needs, laws, Executive Orders, directives, regulations, policies, standards, and guidelines. The publication describes how to develop specialized sets of controls, or overlays, tailored for specific types of missions and business functions, technologies, environments of operation, and sector-specific applications.

Why buy a book you can download for free?

First you gotta find a good clean (legible) copy and make sure it s the latest version (not always easy). Some documents found on the web are missing some pages or the image quality is so poor, they are difficult to read. We look over each document carefully and replace poor quality images by going back to the original source document. We proof each document to make sure it s all there including all changes. If you find a good copy, you could print it using a network printer you share with 100 other people (typically its either out of paper or toner). If it s just a 10-page document, no problem, but if it s 250-pages, you will need to punch 3 holes in all those pages and put it in a 3-ring binder. Takes at least an hour.

It s much more cost-effective to just order the latest version from Amazon.com

This book is published by 4th Watch Books and includes copyright material. We publish compact, tightly-bound, full-size books (8 by 11 inches), with glossy covers. 4th Watch Books is a Service Disabled Veteran-Owned Small Business (SDVOSB). If you appreciate the service we provide, please leave positive review on Amazon.com

For more titles published by 4th Watch Books, please visit: cybah.webplus.net

UFC 4-010-06 Cybersecurity of Facility-Related Control Systems

NIST SP 800-82 Guide to Industrial Control Systems (ICS) Security

Whitepaper NIST Framework for Improving Critical Infrastructure Cybersecurity

NISTIR 8170 The Cybersecurity Framework

FC 4-141-05N Navy and Marine Corps Industrial Control Systems Monitoring Stations

UFC 3-430-11 Boiler Control Systems

NISTIR 8089 An Industrial Control System Cybersecurity Performance Testbed

UFC 1-200-02 High-Performance and Sustainable Building Requirements

NIST SP 800-12 An Introduction to Information Security

NIST SP 800-18 Developing Security Plans for Federal Information Systems

NIST SP 800-31 Intrusion Detection Systems

NIST SP 800-34 Contingency Planning Guide for Federal Information Systems

NIST SP 800-35 Guide to Information Technology Security Services

NIST SP 800-39 Managing Information Security Risk

NIST SP 800-40 Guide to Enterprise Patch Management Technologies

NIST SP 800-41 Guidelines on Firewalls and Firewall Policy

NIST SP 800-44 Guidelines on Securing Public Web Servers

NIST SP 800-47 Security Guide for Interconnecting Information Technology Systems

NIST SP 800-48 Guide to Securing Legacy IEEE 802.11 Wireless Networks

NIST SP 800-53A Assessing Security and Privacy Controls

NIST SP 800-171 Protecting Controlled Unclassified Information in Nonfederal Systems