Nist Sp 800-53 - Recommended Security Controls For Federal Information Systems And Organizations

Front 1

"What does control class is ""CA"" in 800-53 Rev3?"

Back 1

800-53 Rev3: Security Assessment and Authorization

Front 2

"What does control class is ""PL"" in 800-53 Rev3?"

Back 2

Planning

Front 3

"What does control class is ""PM"" in 800-53 Rev3?"

Back 3

Program Management

Front 4

"What does control class is ""RA"" in 800-53 Rev3?"

Back 4

Risk Assessment

Front 5

"What does control class is ""SA"" in 800-53 Rev3?"

Back 5

System and Services Acquistion

Front 6

"What does control class is ""AT"" in 800-53 Rev3?"

Back 6

Awareness and Training

Front 7

"What does control class is ""CM"" in 800-53 Rev3?"

Back 7

Configuration Management

Front 8

"What does control class is ""CP"" in 800-53 Rev3?"

Back 8

Contigency Planning

Front 9

"What does control class is ""MA"" in 800-53 Rev3?"

Back 9

Maintenance

Front 10

"What does control class is ""MP"" in 800-53 Rev3?"

Back 10

Media Protection

Front 11

"What does control class is ""PE"" in 800-53 Rev3?"

Back 11

Physical and Environmental Protection

Front 12

"What does control class is ""PS"" in 800-53 Rev3?"

Back 12

Personnel Security

Front 13

"What does control class is ""SI"" in 800-53 Rev3?"

Back 13

System and Information Integrity

Front 14

"What does control class is ""AC"" in 800-53 Rev3?"

Back 14

Access Control

Front 15

"What does control class is ""AU"" in 800-53 Rev3?"

Back 15

Audit and Accountability

Front 16

"What does control class is ""IA"" in 800-53 Rev3?"

Back 16

Identification and Authentication

Front 17

"What does control class is ""SC"" in 800-53 Rev3?"

Back 17

System and Communications Protection

Front 18

CA-1

Back 18

Security Assessment and Authorization Policies and Procedure

Front 19

CA-2

Back 19

Security Assessments

Front 20

CA-3

Back 20

Information System Connections

Front 21

CA-4

Back 21

Security Certification

Front 22

CA-5

Back 22

Plan of Action and Milestones

Front 23

CA-6

Back 23

Security Authorization

Front 24

CA-7

Back 24

Continuous Monitoring

Front 25

PL-1

Back 25

Security Planning Policy and Procedures

Front 26

PL-2

Back 26

System Security Plan

Front 27

PL-3

Back 27

System Security Plan Update

Front 28

PL-4

Back 28

Rules of Behavior

Front 29

PL-5

Back 29

Privacy Impact Assessment

Front 30

PL-6

Back 30

Security-related Activity Planning

Front 31

PM-1

Back 31

Information Security Program Plan

Front 32

PM-2

Back 32

Senior Information Security Officer

Front 33

PM-3

Back 33

Information Security Resources

Front 34

PM-4

Back 34

Plan of Action and Milestones Process

Front 35

PM-5

Back 35

Information System Inventory

Front 36

PM-6

Back 36

Information Security Measures of Performance

Front 37

PM-7

Back 37

Enterprise Architecture

Front 38

PM-8

Back 38

Critical Infrastructure Plan

Front 39

PM-9

Back 39

Risk Management Strategy

Front 40

PM-10

Back 40

Security Authorization Process

Front 41

PM-11

Back 41

Mission/business Process Definition

Front 42

RA-1

Back 42

Risk Assessment Policy and Procedures

Front 43

RA-2

Back 43

Security Categorization

Front 44

RA-3

Back 44

Risk Assessment

Front 45

RA-4

Back 45

Risk Assessment Update

Front 46

RA-5

Back 46

Vulnerability Scanning

Front 47

SA-1

Back 47

System and Services Acquisition Policy and Procedures

Front 48

SA-2

Back 48

Allocation of Resources

Front 49

SA-3

Back 49

Life Cycle Support

Front 50

SA-4

Back 50

Acquisitions

Front 51

SA-5

Back 51

Information System Documentation

Front 52

SA-6

Back 52

Software Usage Restrictions

Front 53

SA-7

Back 53

User-installed Software

Front 54

SA-8

Back 54

Security Engineering Principles

Front 55

SA-9

Back 55

External Information System Services

Front 56

SA-10

Back 56

Developer Configuration Management

Front 57

SA-11

Back 57

Developer Security Testing

Front 58

SA-12

Back 58

Supply Chain Protection

Front 59

SA-13

Back 59

Trustworthiness

Front 60

SA-14

Back 60

Critical Information System Components

Front 61

AC-1

Back 61

Access Control Policy and Procedures

Front 62

AC-2

Back 62

Account Management

Front 63

AC-3

Back 63

Access Enforcement

Front 64

AC-4

Back 64

Information Flow Enforcement

Front 65

AC-5

Back 65

Separation of Duties

Front 66

AC-6

Back 66

Least Privilege

Front 67

AC-7

Back 67

Unsuccessful Login Attempts

Front 68

AC-8

Back 68

System Use Notification

Front 69

AC-9

Back 69

Previous Logon (Access) Notification

Front 70

AC-10

Back 70

Concurrent Session Control

Front 71

AC-11

Back 71

Session Lock

Front 72

AC-12

Back 72

Session Termination

Front 73

AC-13

Back 73

Supervision and Review Access Control

Front 74

AC-14

Back 74

Permitted Actions Without Identification Or Authentication

Front 75

AC-15

Back 75

Automated Marking

Front 76

AC-16

Back 76

Security Attributes

Front 77

AC-17

Back 77

Remote Access

Front 78

AC-18

Back 78

Wireless Access

Front 79

AC-19

Back 79

Access Control for Mobile Devices

Front 80

AC-20

Back 80

Use of External Information Systems

Front 81

AC-21

Back 81

User-based Collaboration and Information Sharing

Front 82

AC-22

Back 82

Publicly Accessible Content