NIST SP

Question 1

NISTIRs

Answer 1

NIST Interagency Reports

Question 2

ITL

Answer 2

Information Technology Laboratory Bulletins

Question 3

FIPs 199

Answer 3

Security Categorization

Question 4

FIPs 200

Answer 4

Minimum Security Requirements

• Promotes secure IS
• Establish minimum levels
• Selecting and specifying controls

Question 5

NIST SP 800-18 rev 1

Answer 5

Security Planning

steps of developing SSP

Question 6

NIST SP 800-30 Rev 1

Answer 6

Risk Assessment

Guidance on conducting Risk Assessment

Question 7

NIST SP 800-37

Answer 7

Guide for applying RMF

Question 8

NIST SP 800-39

Answer 8

Risk Mgmt

Question 9

NIST SP 800-53

Answer 9

Recommended Security Controls

Question 10

NIST SP 800-53A

Answer 10

Security Control Assessment

*Building SAP, procedures

Question 11

NIST SP 800-59

Answer 11

National Security Systems

Guideline to identify IS as national security system

Question 12

NIST SP 800-60

Answer 12

Security Category Mapping

Helps mapping impact level of the types of information and information systems

Question 13

NIST SP 800-70

Answer 13

Guidelines for Checklists

*Configuration checklists

Question 14

NIST SP 800-137

Answer 14

Continuous Monitoring

Question 15

RMF Guidance Review

Answer 15

Phase 1 (Categorize) - FIPs 199 and NIST SP 800-60

Phase 2 (Select) - FIPs 200 and NIST SP 800-53

Phase 3 (Implement) - NIST SP 800-70

Phase 4 (Assess) - NIST SP 800-53A

Phase 5 (Authorize) - NIST SP 800-37

Phase 6 (Monitoring) - NIST 800-37 and NIST SP 800-53A