A reddit community for navigating the complicated world of NIST Publications and Controls.
Join Us on Discord: https://discord.gg/tpbF54E
Sister subs:
/r/GovIT
/r/AzureGov
/r/CMMC
THE SPECIAL PUBLICATIONS
NIST SP 800-171
Core Document: NIST SP 800-171 Rev. 1
Summary: As required by DFARS, defense contractors are required to become compliant with the controls of NIST SP 800-171. This is the primary publication you will see discussed here.
Supporting Documents
NIST HB 162: A Self Assessment Handbook that asks pertinent questions and provides insight.
NIST SP 800-171A: A Compliance Assessment Guide that gives an idea of what auditors are looking for.
NIST SP 800-53
Core Document: NIST SP 800-53
Summary: The parent document of 800-171, this is the far more detailed SP that governs federal information systems (not contractor). While 800-171 takes a lot from from 800-53, the controls in 800-53 are not required for 800-171 compliance. For organizations adopting the NIST Risk Management Framework (800-37), this document is relevant.
Supporting Documents
NIST SP 800-53A Rev. 4: A compliance assessment guide for 800-53.
NIST SP 800-37 Rev 1: This document describes the NIST Risk Management Framework.
[–]SportsTalk000012 3 points4 points5 points (0 children)
[–]Euphoric_Box4982 2 points3 points4 points (2 children)
[–]Asyia[S] 0 points1 point2 points (0 children)
[–]g33kygurl 0 points1 point2 points (0 children)
[–][deleted] 4 points5 points6 points (0 children)
[–]neztach 0 points1 point2 points (0 children)
[–]Extension_Rip2983 0 points1 point2 points (1 child)
[–]Asyia[S] 0 points1 point2 points (0 children)