From the course: NIST 800-53r5: Introduction to Security and Privacy Controls

Unlock this course with a free trial

Join today to access over 24,900 courses taught by industry experts.

Control families

Control families

From the course: NIST 800-53r5: Introduction to Security and Privacy Controls

Start my 1-month free trial Buy for my team

Control families

“

- Okay, so for our lesson 2.2, let's spend some time actually talking about the Control Families, what they mean, what they are. Again, they came from the security cut. They came from FIPS 200, that minimum security requirements. So in this lesson, pretty simple, you'll be able to list the controls, differentiate security between the security controls and the privacy controls. As I mentioned in Rev 4, they set up a whole set of privacy controls which are separate from the regular security controls. So here's the same table that I showed before, but we'll explain it a little bit more, are some of the ideas of these. So as I mentioned before, you have, say, the first one's access control, they call it AC, so that's the acronym. So AC1 would be the first control, AC 2, obviously, following like that, that's how this whole, this hierarchy of the controls are set up. So there's some that are technical, some that are more process-oriented, some of their policy, and there's some, the…

Contents