1. SP 800-53 v4
Recommended Security Controls for Federal Information Systems
3 SECURITY CONTROL CLASSES
MANAGEMENT
55 Controls
OPERATIONAL
97 Controls
TECHNICAL
93 Controls
Program Management
16
Risk Assessment
5
Planning
6
Security Assessment
Authorization 8
System and Services
Acquisition 20
System and Communications
Protections 43
Identification and Authentication
11
Configuration Management
11
Awareness and Training
4
Audit and Accountability
16
Contingency Planning
12
Access Controls
23
Authored by; Jason P. Rusch - CISSP, CISM, CISA, CGEIT, GNSA | jason@infosec-rusch.com
Incident Response
11
Maintenance
6
Media Protection
8
Physical and Environmental
Protection 20
Personnel Security
8
System and Information Integrity
17
18 SECURITY CONTROL GROUPS
3 CONTROL PRIORITIES