NIST has released the final public draft of Special Publication (SP) 800-53 Revision 5, “Security and Privacy Controls for Information Systems and Organizations,” for public comment. The publication aims to strengthen the trustworthiness and resilience of information systems across all critical infrastructure sectors and economic interests in the United States. It covers a wide range of computing platforms, including general purpose systems, cyber-physical systems, cloud and mobile systems, industrial/process control systems, and IoT devices.
The major changes in this revision include integrating security and privacy controls into a single catalog, recognizing their essential relationship. This requires collaboration between security and privacy officials throughout the system development life cycle, particularly in control implementation. Feedback is requested on updates to the control catalog and the concept of including a collaboration index for each control, indicating the degree of collaboration needed for specific systems. The public comment period is open through May 15, 2020.
Keywords: computing platforms, security controls, protection
