Recommended Security Controls to Protect Information Systems
I-WAYS Digest of Electronic Commerce Policy and Regulation · 2005
The National Institute of Standards and Technology (NIST) of the US Department of Commerce, is responsible for developing standards and guidelines, including minimum requirements, for providing adequate information security for all agency operations, but also may be used by non-governmental organizations on a voluntary basis and is not subject to copyright. In February 2005, NIST released a Special Publication 800-53 entitled Recommended Security Controls to Protect Information Systems ( http://csrc.nist.gov/publications/nistpubs/800-53/SP800-53.pdf ). The following are excerpts from the report.