08 Aug Security and Privacy Controls in Federal Information Systems and Organizations

eview the following special publications, then pick one and explain in a real-world scenario how a security professional would use this resource. Express why it is beneficial.

1. SP 800-37, Rev. 1: Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach (2010)
2. SP 800-39: Managing Information Security Risk: Organization, Mission, and Information System View (2011)
3. SP 800-53, Rev. 4: Security and Privacy Controls in Federal Information Systems and Organizations (2013)
4. ISO 27001: 2013 Information Security Management System Specification

Engage your classmates in a discussion by reviewing their answers and provide additional input.

Related Tags