Guide for Assessing the Security Controls in Federal Information Systems and Organizations

by National Institute of Standards and Technology

Security control assessments are not about checklists, simple pass-fail results, or generating paperwork to pass inspections or audits-rather, security controls assessments are the principal vehicle used to verify that the implementers and operators of information systems are meeting their stated security goals and objectives.

402 pages, Paperback

First published March 30, 2014