800-53A

NIST SP 800-53A

  1. 800-53A is basically a guide on conducting Security and Privacy Control Assessments (e.g., audits).
    1. "800-53A provides a set of procedures for conducting assessments of security... and privacy controls employed within federal information systems and organizations."[1]
    2. The procedures are designed to be tailored to an organizations unique needs and risk tolerances.

Resources

Official

SP 800-53A Rev. 5, Assessing Security and Privacy Controls in Information Systems and Organizations | CSRC

Supplemental

  1. NIST Special Publication 800-53 - Wikipedia ↩︎