WASHINGTON -- NIST has released a standard for corporate security control of information systems.

"Special Publication (SP) 800-53, Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations," represents the "most comprehensive update" to the security controls catalog since its inception in 2005, NIST said.

The new revision provides a "more holistic approach to information security and risk management by providing organizations with the breadth and depth of security controls necessary to fundamentally strengthen their information systems and the environments in which those systems operate—contributing to systems that are more resilient in the face of cyber attacks and other threats. This “Build It Right” strategy is coupled with a variety of security controls for “Continuous Monitoring” to give organizations near real-time information that is essential for senior leaders making ongoing risk-based decisions affecting their critical missions and business functions,” the document asserts.

• Prev
• Next