USGovCert | Certification Journey Made Easy
NIST
The NIST framework helps organizations improve their cybersecurity practices and communicate effectively with stakeholders. It is not mandatory, but a set of best practices to reduce and manage cyber risks.
USGovCert tool supports following NIST standards
NIST 800-53 – Assessing Security and Privacy Controls in Federal Information Systems and Organizations
NIST 800-171 – Safeguard CUI in the IT Networks of Government Contractors and Sub-contractors
NIST 800-53
NIST 800-53 is a security compliance standard created by the U.S. Department of Commerce and the National Institute of Standards in Technology in response to the rapidly developing technological capabilities of national adversaries. It compiles controls recommended by the Information Technology Laboratory (ITL).
- Provides a structured set of privacy controls, based on best practices, that help organizations comply with applicable federal laws, executive orders, directives, instructions, regulations, policies, standards, guidance, and organization-specific issuances.
- These are designed to improve risk management for any organization or system that processes, stores or transmits information.
- NIST 800-53 has 21 domains
- USGovCert provides 22 predefined standard templates to ease the certification process.
NIST 800-171
NIST 800-171 provides recommended requirements for protecting the confidentiality of controlled unclassified information (CUI). It provides guidelines on how CUI should be securely accessed, transmitted, and stored in nonfederal information systems and organizations.
-
Its requirements fall into four main categories:
(a) Controls and processes for managing and protecting
(b) Monitoring and management of IT systems
(c) Clear practices and procedures for end users
(d) Implementation of technological and physical security measures - NIST 800-171 has 15 domains
- USGovCert provides 22 predefined standard templates to ease the certification process.
For detailed and up to date information on NIST visit https://www.nist.gov/cyberframework/getting-started