United States Government Publishing Office publisher pbl distributor dst United States Commerce Department National Institute of Standards and Technology (NIST) author aut Government Organization Joint Task Force. author aut text government publication eng GOVPUB Executive Agency Publications executive 2023-10-27 Commerce Department 2022-01-25 monographic New version deposited born digital 733 digital object pages C 13. https://www.govinfo.gov/app/details/GOVPUB-C13-50108754418a2f7a74f636e2f8ea96ed P0b002ee1c1bb3430 on1389890229 (OCoLC)1389890229 DGPO 2023-10-27 2026-06-27 GOVPUB-C13-50108754418a2f7a74f636e2f8ea96ed machine generated eng fdlp C13 GOVPUB-C13-50108754418a2f7a74f636e2f8ea96ed 50108754418a2f7a74f636e2f8ea96ed GOVPUB NIST Special Publications NOTE: THE “DATE ISSUED” ABOVE MAY DEFAULT TO JANUARY 1ST OF A GIVEN YEAR. TO THE VIEW THE MOST ACCURATE DATE OF ISSUE, REVIEW THE TITLE PAGE OF THE PUBLICATION. This series includes proceedings of conferences sponsored by NIST, NIST annual reports, and other special publications appropriate to this grouping such as wall charts, pocket cards, and bibliographies. National Institute of Standards and Technology Commerce Department. National Institute of Standards and Technology. 2022 2022-01-25 https://www.govinfo.gov/app/details/GOVPUB-C13-50108754418a2f7a74f636e2f8ea96ed https://www.govinfo.gov/content/pkg/GOVPUB-C13-50108754418a2f7a74f636e2f8ea96ed/pdf/GOVPUB-C13-50108754418a2f7a74f636e2f8ea96ed.pdf Assessment Assessment plan Assurance Control assessment FISMA Open Security Controls Assessment Language (OSCAL) Privacy controls Privacy requirements Risk Management Framework Security controls Security requirements United States. Federal Information Security Management Act of 2002 Joint Task Force creator Joint Task Force. National Institute of Standards and Technology (U.S.) Information Technology Laboratory mdu U.S. Dept. of Commerce, National Institute of Standards and Technology 2022-01-25. New version monographic 1 online resource (733 pages) : illustrations (color) text technical report eng This publication provides a methodology and set of procedures for conducting assessments of security and privacy controls employed within systems and organizations within an effective risk management framework. The assessment procedures, executed at various phases of the system development life cycle, are consistent with the security and privacy controls in NIST Special Publication 800-53, Revision 5. The procedures are customizable and can be easily tailored to provide organizations with the needed flexibility to conduct security and privacy control assessments that support organizational risk management processes and are aligned with the stated risk tolerance of the organization. Information on building effective security and privacy assessment plans is also provided with guidance on analyzing assessment results. Joint Task Force. January 2022. Title from PDF title page (viewed January 4, 2023). Includes bibliographical references. Approved by the NIST Editorial Review Board on 2022-01-20 Mode of access: World Wide Web. Systems requirements: Adobe Acrobat PDF reader. United States. Federal Information Security Management Act of 2002 Assessment Assessment plan Assurance Control assessment FISMA Privacy controls Open Security Controls Assessment Language (OSCAL) Privacy requirements Risk Management Framework Security controls Security requirements https://doi.org/10.6028/NIST.SP.800-53Ar5