NIST updates guide to information system security and privacy controls

The National Institute of Standards and Technology has updated its Security and Privacy Controls for Information Systems and Organizations, a catalog of tools to help organizations manage and respond to security and privacy risks.

“The fifth revision of this widely used framework is a beneficial resource for hospitals and health systems to either be adopted as a framework for combined security and privacy controls, or as a reference guide to inform and benchmark existing security and privacy programs,” said John Riggi, AHA senior advisor for cybersecurity and risk.