Cybersecurity

NIST seeks comment on key cyber guide for agencies

concept cybersecurity art

The National Institute of Standards and Technology (NIST) has made major revisions to a key cybersecurity document for agencies, cataloguing principal security safeguards and countermeasures to protect their information systems.

This final public draft of "Security and Privacy Controls for Federal Information Systems and Organizations, Special Publication (SP)800-53, Revision 4," is now online, and the agency is seeking comment. Feedback on the document should be sent to [email protected] by March 1.

"This is by far the most extensive update to our control catalog since it was first published in 2005," said Ron Ross, FISMA Implementation Project leader and NIST fellow, in a statement. "We received and responded to several thousand comments from across the federal government, industry and academia during the initial public comment period and have greatly increased the cybersecurity toolset for our customers as a result."

Resource

Read the draft version of Special Publication 800-53, Revision 4.

Recent revisions include new guidance for handling insider threats, supply chain risk, mobile and cloud computing technologies, as well as a variety of cybersecurity concerns: application security, firmware integrity, distributed systems and advanced persistent threat.

The draft also address gaps in threat coverage, increases security control and created new mapping tables to international security standards, while introducing overlays to help agencies develop security plans catered to their mission.

The latest revision was conducted as part of the Joint Task Force Transformative Initiative, which is made up of security experts from NIST, the Department of Defense, the intelligence community and the Committee on National Security Systems.

About the Author

Frank Konkel is a former staff writer for FCW.

Featured

  • Federal 100 Awards
    Federal 100 logo

    Nominations for the 2021 Fed 100 are now being accepted

    The deadline for submissions is Dec. 31.

  • Government Innovation Awards
    Government Innovation Awards - https://governmentinnovationawards.com

    Congratulations to the 2020 Rising Stars

    These early-career leaders already are having an outsized impact on government IT.

Stay Connected