National Institute of Standards and Technology Guidelines Authoritative Source Content

[SusanReadMiller]

The National Institute of Standards and Technology (NIST) is a part of the U.S. Department of Commerce. The NIST mission is to promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve quality of life. 

Languages

This content is available in English only.

Mappings

The following standards have mappings for the NIST guidelines to the Archer Control Standard Library in the authoritative source content pack:

• NIST FIPS 140-2 Security Requirements for Cryptographic Modules
• NIST Privacy Framework 1.0
• NIST SP 800-37 Guide for Applying the Risk Management Framework to Federal Information Systems Revision 2
• NIST SP 800-53 Security and Privacy Controls for Federal Information Systems and Organizations Revision 4
• NIST SP 800-53 Security and Privacy Controls for Federal Information Systems and Organizations Revision 5
• NIST SP 800-82 Guide to Industrial Control Systems (ICS) Security Revision 2
• NIST SP 800-171 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations Revision 2
• NIST SP 800-172 Enhanced Security Requirements for Protecting Controlled Unclassified Information
  
  

The following guidelines do not have control standard mappings:

• NIST FIPS 140-3 Security Requirements for Cryptographic Modules
• NIST SP 800-30 Guide for Conducting Risk Assessments Revision 1
• NIST SP 800-39 Guide for Managing Information Security Risk
  
  

Content Source

Links to the content sources are provided with the individual booklet listings below.

• NIST Cybersecurity Framework 1.1 
• NIST FIPS 140-2 Security Requirements for Cryptographic Modules
• NIST FIPS 140-3 Security Requirements for Cryptographic Modules
• NIST Privacy Framework 1.0
• NIST SP 800-30 Guide for Conducting Risk Assessments Revision 1
• NIST SP 800-37 Guide for Applying the Risk Management Framework to Federal Information Systems Revision 2
• NIST SP 800-39 Guide for Managing Information Security Risk
• NIST SP 800-53 Security and Privacy Controls for Federal Information Systems and Organizations Revision 4
• NIST SP 800-53 Security and Privacy Controls for Federal Information Systems and Organizations Revision 5
• NIST SP 800-82 Guide to Industrial Control Systems (ICS) Security Revision 2
• NIST SP 800-171 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations Revision 2
• NIST SP 800-172 Enhanced Security Requirements for Protecting Controlled Unclassified Information
  
  

Licensing Restrictions

The NIST authoritative source content is available with the use of the Archer Policy Program Management, Archer IT Policy Program Management, and/or Archer Authorization and Assessment use cases. No additional license is required.

For More Information

To learn more about a specific NIST Authoritative Source Content offering:

• Review the Archer Content Import Tip Sheet for instructions on how to import content; and
• Download the NIST FIPS 140-2 Authoritative Source Content Package
• Download the NIST FIPS 140-3 Authoritative Source Content Package
• Download the NIST Cybersecurity Framework Authoritative Source Content Package
• Download the NIST Privacy Framework Authoritative Source Content Package
• Download the NIST SP 800-30 Guide for Conducting Risk Assessments Content Package Revision 1
• Download the NIST SP 800-37 Authoritative Source Content Package
• Download the NIST SP 800-39 Guide for Managing Information Security Risk Authoritative Source Content Package
• Download the NIST SP 800-53 Security and Privacy Controls for Federal Information Systems and Organizations Revision 4 Authoritative Source Content Package
• Download the NIST SP 800-53 Security and Privacy Controls for Federal Information Systems and Organizations Revision 5 Authoritative Source Content Package
• Download the NIST SP 800-82 R2 Authoritative Source Content Package 
• Download the NIST SP 800-171 Authoritative Source Content Package
• Download the NIST SP 800-172 Authoritative Source Content Package
  
  

For Additional Support

To learn more about this content, please contact your Account Rep for additional details. For technical support questions, please open a support case.