Security News > 2020 > March > NIST Updates Flagship SP 800-53 Security and Privacy Controls
The National Institute for Standards and Technology has published the draft version of SP 800-53: Security and Privacy Controls for Information Systems and Organizations.
The publication provides a catalog of security and privacy controls that will help protect organizational operations and assets.
Adds Bob Post, managing principal at security advice firm Coalfire, "Providing the controls in the Open Security Controls Assessment Language supports the much-needed shift to automation by moving away from proprietary frameworks to standardized, machine-readable formats."
"The expansion of privacy-related controls and their integration into the overall security catalog emphasizes that privacy is no longer an 'add-on'," comments Post.
"We have always believed in security and privacy being one. That has been difficult to convey when compared to tools that disregard privacy for the sake of monitoring and control. Hopefully," he added, "This sees a shift in how the industry views the implementation of security to be more friendly to personal rights."