Skip to main content

RMF Publications

LAWS AND EXECUTIVE ORDERS

FEDERAL INFORMATION PROCESSING STANDARDS (FIPS) PUBLICATIONS

NIST SPECIAL PUBLICATIONS (SP)

SP 800-12 (An Introduction to Information Security), June 2017
SP 800-18 (Security Plans),  Feb  2006
SP 800-30 (Risk Assessment), September 2012
SP 800-34 (Contingency Planning), May 2010
SP 800-37 Rev 2 (Risk Management Framework), December 2018
SP 800-39 (Organizational Risk Management), March 2011
SP 800-53 Rev. 4 (Security and Privacy Controls for Federal Information Systems and Organizations), January 2014
SP 800-53A Rev 4 (Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans), December 2014
SP 800-53B Rev 4 (Control Baselines for Information Systems and Orgainzations), October 2020
SP 800-53 Rev. 5 (Security and Privacy Controls for Information Systems and Organizations), September 2020

Analysis of updates between 800-53 Rev. 5 and Rev. 4, by MITRE Corp. for ODNI, December 2020 (xls)
Mapping: Appendix J Privacy Controls (Rev. 4) to Rev. 5, December 2020 (xls)
Mappings: Cybersecurity Framework and Privacy Framework to Rev. 5 (xls), December 2020 (xls)

SP 800-55 Rev 1 (Performance Measurement Guide for Information Security), July 2008
SP 800-59 (National Security Systems), August 2003
SP 800-60 Rev. 1 (Security Categorization), Volume 1, August 2008
SP 800-60 Rev. 1 (Security Categorization), Volume 2, August 2008
SP 800-61 Rev. 2(Incident Response Planning), August 2012
SP 800-137 (Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations), September 2011 
SP 800-137A (Assessing Information Security Continuous Monitoring (ISCM) Programs: Developing an ISCM Program Assessment), May 2020 
IR 7298 (Glossary of Key Information Security Terms) 

COMMITTEE ON NATIONAL SECURITY SYSTEMS (CNSS) PUBLICATIONS

DEPARTMENT OF DEFENSE DIRECTIVES AND INSTRUCTIONS

DEPARTMENT OF DEFENSE MEMOS

INTELLIGENCE COMMUNITY (IC) PUBLICATIONS

DISA CLOUD COMPUTING SUPPLEMENTAL GUIDANCE AND INFORMATION

DEFENSE COUNTERINTELLIGENCE AND SECURITY AGENCY (DCSA) PUBLICATIONS

See also:

Recent Posts / View All Posts

Managing the Recent Cisco Vulnerabilities from a NIST 800-53 Security Controls Perspective

| NIST 800-53, Risk Management, Security Controls Implementation and Assessment, Security Technical Implementation Guides | No Comments
By, Amanda Lowell, Security+ CE, RDRP Special thanks to my colleagues Kathryn Daily and Sam Bodine for contributing to and helping edit this article!In the last few weeks, two different vulnerabilities found in Cisco’s software were disclosed to the public. Before you click away, thinking, “Well, I don’t own any…

Cybersecurity Framework is Getting an Update!

| Cybersecurity Framework | No Comments
By, Kathryn Daily, CISSP, CGRC, RDRP Over a decade ago NIST published the Cybersecurity Framework as a base set of standards, guidelines, and best practices to manage cybersecurity risks for critical infrastructure.  While it is currently voluntary for critical infrastructure, Executive Order 13800, May 11, 2017, required federal agencies to,…

RMF and Toilet Tissue

| Uncategorized | No Comments
by Lon J. Berman, CISSP, RDRP The year 2020 will be remembered for lots of things, not the least of which was the “great toilet tissue shortage.” Who can forget running from store to store, only to be confronted with empty shelves? 2020 was also the year the term “supply…
Close Menu