NIST SP 800-53 ALIGNMENT & GAP ASSESSMENTS

The National Institute of Standards and Technology (NIST) developed the NIST SP 800-53 cybersecurity framework with the intention of improving the security of the Federal Government. While it is not a requirement for most private organizations to follow NIST SP 800-53, it is a respected and recognized framework that is robust enough for adoption by large enterprise. The framework is broken into 18 different families. These are Access Control, Audit and Accountability, Awareness and Training, Configuration Management, Contingency Planning, Identification and Authentication, Incident Response, Maintenance, Media Protection, Personnel Security, Physical and Environmental Protection, Planning, Program Management, Risk Assessment, Security Assessment and Authorization, System and Communications Protection, System and Information Integrity, System and Services Acquisition.  NIST SP 800-53 is very detailed and can be a great framework to strengthen the security of an organization.  However, it is generally used by large enterprise and is not always the best option for mid-market and emerging companies.

Not sure if NIST SP 800-53 is the right security framework for your adoption by your organization?  Contact Silent Sector for complementary consultation.