Summary of NIST SP 80053 Revision 4, Security （总结NIST SP 80053修订安全）.pdfVIP

NIST Computer Security Division Summary of NIST SP 800-53 Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations Kelley Dempsey Computer Security Division Information Technology Laboratory Greg Witte Doug Rike G2, Inc. Annapolis Junction, MD February 19, 2014 Abstract This white paper provides an overview of NIST Special Publication (SP) 800-53 Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations, which was published April 30, 2013. Keywords assurance; computer security; FIPS Publication 199; FIPS Publication 200, FISMA; Privacy Act; Risk Management Framework; security controls; security requirements Disclaimer Any mention of commercial products or reference to commercial organizations is for information only; it does not imply recommendation or endorsement by NIST, nor does it imply that the products mentioned are necessarily the best available for the purpose. Additional Information For additional information on NIST’s Computer Security Division programs, projects and publications, visit the Computer Security Resource Center, . Information on other efforts at NIST and in the Information Technology Laboratory (ITL) is available at and /itl. ii Table of Contents 1 Introduction 1 2 NIST SP 800-53 Revision 4 and the Risk Management Framework (RMF) 2 3 Control Baselines and Tailoring 4 4 Documenting the Control Selection Process 5 5 Assurance 6 6 Security Controls 7 7 International Information Security Standards 8 8 Overlays 9 9 Privacy 10