Formal document that provides an overview of the security requirements for an organization-wide information security program and describes the program management controls and common controls in place or planned for meeting those requirements.
Sources:
CNSSI 4009-2015
NIST SP 800-137
under Information Security Program Plan
NIST SP 800-30 Rev. 1
under Information Security Program Plan
NIST SP 800-37 Rev. 2
from
OMB Circular A-130 (2016)
NIST SP 800-39
under Information Security Program Plan
NIST SP 800-53 Rev. 5
from
OMB Circular A-130 (2016)
NIST SP 800-53A Rev. 5
from
OMB Circular A-130 (2016)
NIST SP 800-82r3
under Information Security Program Plan
from
OMB Circular A-130 (2016)
Formal document that provides an overview of the security requirements for an organization-wide information security program and describes the program management controls and common controls in place or planned for meeting those requirements. [SP800‑37] from [OMBA‑130]
Sources:
NIST SP 800-18r2
from
NIST SP 800-37 Rev. 2 - (from OMB A-130)