Security Controls for Federal Information Systems and Organizations

NIST announces the release of the Initial Public Draft (IPD) of Special Publication 800-53, Revision 3, Recommended Security Controls for Federal Information Systems and Organizations. This is the first major update of Special Publication 800-53 since its initial publication in December 2005.

The changing threat environment and growing sophistication of cyber attacks necessitated specific changes to the allocation of security controls and control enhancements in the low-impact, moderate-impact, and high-impact baselines.

....added new security controls to address organization-wide security programs and introduced the concept of a security program plan to capture security program management requirements for organizations.