NIST “Special Publication 800-52”

The National Institute of Standards and Technology (NIST) is responsible for developing standards and guidelines, including minimum requirements, and for providing adequate information security for all Federal agencies’ operations and assets. In 2013, NIST made the final updates to their complete catalog of information security requirements, Special Publication 800-53 Revision 4 – Security and Privacy Controls for Federal Information Systems and Organizations. The catalog is BIG – it contains hundreds of information security and data privacy requirements organized into 17 different topic categories. Even organizations that are not required to comply with Federal information security laws still reference the NIST standards for guidance on all things security.

Research “Information Security Policy” according to NIST. Look up “Special Publication 800-52” Write a one to two-page paper summary (700 – 1000 words) of:

NIST information security policy
Compare NIST information security policy to the what you have learned in this module
Your assessment of both approaches

Used attached pages as one of the sources, the book is:
Greene, S. (2014). Security Program and Polices; Principles and Policies. Indiana: Pearson Education, Inc.