Cybersecurity

NIST seeks comment on key cyber guide for agencies

concept cybersecurity art

The National Institute of Standards and Technology (NIST) has made major revisions to a key cybersecurity document for agencies, cataloguing principal security safeguards and countermeasures to protect their information systems.

This final public draft of "Security and Privacy Controls for Federal Information Systems and Organizations, Special Publication (SP)800-53, Revision 4," is now online, and the agency is seeking comment. Feedback on the document should be sent to [email protected] by March 1.

"This is by far the most extensive update to our control catalog since it was first published in 2005," said Ron Ross, FISMA Implementation Project leader and NIST fellow, in a statement. "We received and responded to several thousand comments from across the federal government, industry and academia during the initial public comment period and have greatly increased the cybersecurity toolset for our customers as a result."

Resource

Read the draft version of Special Publication 800-53, Revision 4.

Recent revisions include new guidance for handling insider threats, supply chain risk, mobile and cloud computing technologies, as well as a variety of cybersecurity concerns: application security, firmware integrity, distributed systems and advanced persistent threat.

The draft also address gaps in threat coverage, increases security control and created new mapping tables to international security standards, while introducing overlays to help agencies develop security plans catered to their mission.

The latest revision was conducted as part of the Joint Task Force Transformative Initiative, which is made up of security experts from NIST, the Department of Defense, the intelligence community and the Committee on National Security Systems.

About the Author

Frank Konkel is a former staff writer for FCW.

Featured

  • Workforce
    Avril Haines testifies SSCI Jan. 19, 2021

    Haines looks to restore IC workforce morale

    If confirmed, Avril Haines says that one of her top priorities as the Director of National Intelligence will be "institutional" issues, like renewing public trust in the intelligence community and improving workforce morale.

  • Defense
    laptop cloud concept (Andrey Suslov/Shutterstock.com)

    Telework, BYOD and DEOS

    Telework made the idea of bringing your own device a top priority as the Defense Information Systems Agency begins transitioning to a permanent version of the commercial virtual remote environment.

Stay Connected