NIST Revision of 800-53 Security and Privacy Controls for Information Systems and Organizations - Rev5

The security and privacy controls in this publication may be used by organizations to assist their information security and privacy requirements. The control catalog can be viewed as a toolbox containing a collection of safeguards, countermeasures, techniques, and processes to respond to security and privacy risks. The controls are employed as part of a well-defined risk management process that supports organizational information security and privacy programs.