NIST finalizes first ‘patch release’ for security and privacy controls catalog using online reference tool

The National Institute of Standards and Technology has finalized a “patch release” for Special Publication 800-53, updating the massive catalog of privacy and security controls via its online Cybersecurity and Privacy Reference Tool for the first time.

The update includes “one new control and three supporting control enhancements related to identity providers, authorization servers, the protection of cryptographic keys, the verification of identity assertions and access tokens, and token management,” NIST said today in a FAQ highlighting major changes...