Control Baselines for Information Systems and Organizations

Joint Task Force

doi:https://doi.org/10.6028/NIST.SP.800-53B

SP 800-53B

Control Baselines for Information Systems and Organizations

Documentation Topics

Date Published: October 2020

Author(s)

Joint Task Force

Abstract

This publication provides security and privacy control baselines for the Federal Government. There are three security control baselines (one for each system impact level—low-impact, moderate-impact, and high-impact), as well as a privacy baseline that is applied to systems irrespective of impact level. In addition to the control baselines, this publication provides tailoring guidance and a set of working assumptions that help guide and inform the control selection process. Finally, this publication provides guidance on the development of overlays to facilitate control baseline customization for specific communities of interest, technologies, and environments of operation.

Keywords

assurance; impact level; privacy control; privacy control baseline; security control; security control baseline; tailoring; control selection; control overlays

Control Families

None selected

Documentation

Publication:
SP 800-53B (DOI)
Local Download

Supplemental Material:
Security Control Overlay Repository (SCOR) (web)
NIST news article (web)

Other Parts of this Publication:
SP 800-53 Rev. 5

Document History:
07/31/20: SP 800-53B (Draft)
10/29/20: SP 800-53B (Final)

Topics

Security and Privacy
cyber supply chain risk management; general security & privacy; privacy; privacy controls; security controls; security programs & operations

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

Computer Security Resource Center

Computer Security Resource Center

SP 800-53B

Control Baselines for Information Systems and Organizations

Author(s)

Abstract

Keywords

Control Families

Documentation

Topics