Eagerly awaited NIST ‘catalog’ outlines security, privacy controls for organizations

The National Institute of Standards and Technology has issued a highly anticipated publication intended to provide organizations with “the first comprehensive catalog” of security and privacy controls, an overhaul of the agency’s foundational guidance for information systems that was seven years in the making.

“NIST SP 800-53, Revision 5 is not just a minor update but rather a complete renovation--addressing both structural issues and technical content,” NIST leaders said in a blog post Wednesday. “The update represents a...