NIST SP80053A rev1.pdf

INTRODUCTION THENEEDTOASSESSSECURITYCONTROLEFFECTIVENESSININFORMATIONSYSTEMS TToday’sinformationsystems9arecomplexassemblagesoftechnology(i.e.,hardware, software,andfirmware),processes,andpeople,workingtogethertoprovideorganizations withthecapabilitytoprocess,s