Cybersecurity

NIST seeks comment on key cyber guide for agencies

concept cybersecurity art

The National Institute of Standards and Technology (NIST) has made major revisions to a key cybersecurity document for agencies, cataloguing principal security safeguards and countermeasures to protect their information systems.

This final public draft of "Security and Privacy Controls for Federal Information Systems and Organizations, Special Publication (SP)800-53, Revision 4," is now online, and the agency is seeking comment. Feedback on the document should be sent to sec-cert@nist.gov by March 1.

"This is by far the most extensive update to our control catalog since it was first published in 2005," said Ron Ross, FISMA Implementation Project leader and NIST fellow, in a statement. "We received and responded to several thousand comments from across the federal government, industry and academia during the initial public comment period and have greatly increased the cybersecurity toolset for our customers as a result."

Resource

Read the draft version of Special Publication 800-53, Revision 4.

Recent revisions include new guidance for handling insider threats, supply chain risk, mobile and cloud computing technologies, as well as a variety of cybersecurity concerns: application security, firmware integrity, distributed systems and advanced persistent threat.

The draft also address gaps in threat coverage, increases security control and created new mapping tables to international security standards, while introducing overlays to help agencies develop security plans catered to their mission.

The latest revision was conducted as part of the Joint Task Force Transformative Initiative, which is made up of security experts from NIST, the Department of Defense, the intelligence community and the Committee on National Security Systems.

About the Author

Frank Konkel is a former staff writer for FCW.

Featured

  • IT Modernization
    Eisenhower Executive Office Building (Image: Wikimedia Commons)

    OMB's user guide to the MGT Act

    The Office of Management and Budget is working on a rules-of-the-road document to cover how agencies can seek and use funds under the MGT Act.

  • global network (Pushish Images/Shutterstock.com)

    As others see us -- a few surprises

    A recent dinner with civil servants from Asia delivered some interesting insights, Steve Kelman writes.

  • FCW Perspectives
    cloud (Singkham/Shutterstock.com)

    A smarter approach to cloud

    Advances in cloud technology are shifting the focus toward choosing the right tool for the job and crafting solutions that truly modernize systems.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.