Summary of NIST SP 800-53 Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations
Open accessAbstract
This white paper provides an overview of NIST Special Publication (SP) 800-53 Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations, which was published April 30, 2013.
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
Encryption, access controls, and security audits protect data from unauthorized access.
“Protects data from unauthorized access”
From AI Fairness in Data Management and Analytics: A Review on Challenges, Methodologies and Applications (2023) · cites this paper as [254]
Safeguarding data from breaches prevents data manipulation and tampering.
“Prevents data manipulation and tampering”
From AI Fairness in Data Management and Analytics: A Review on Challenges, Methodologies and Applications (2023) · cites this paper as [254]
Encryption, access controls, and security audits have implementation costs.
“Implementation costs”
From AI Fairness in Data Management and Analytics: A Review on Challenges, Methodologies and Applications (2023) · cites this paper as [254]
Safeguarding data from breaches has potential usability impact.
“Potential usability impact”
From AI Fairness in Data Management and Analytics: A Review on Challenges, Methodologies and Applications (2023) · cites this paper as [254]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Cited by
Sorted by citations
Guide to Industrial Control Systems (ICS) Security
Stouffer, K., Pillitteri, V., Lightman, S., Abrams, M., & Hahn, A. (2015) · doi:10.6028/nist.sp.800-82r2 · Cited by 1,377 · see citing works
AI Fairness in Data Management and Analytics: A Review on Challenges, Methodologies and Applications
Chen, P., Wu, L., & Wang, L. (2023) · Applied Sciences · doi:10.3390/app131810258 · Cited by 155 · see citing works
Cichonski, J., Franklin, J. M., & Bartock, M. (2017) · doi:10.6028/nist.sp.800-187 · Cited by 33 · see citing works
Criticality analysis process model: prioritizing systems and components
Paulsen, C., Boyens, J. M., Bartol, N., & Winkler, K. (2018) · doi:10.6028/nist.ir.8179 · Cited by 30 · see citing works
Guide to Application Whitelisting
Sedgewick, A., Souppaya, M., & Scarfone, K. A. (2015) · doi:10.6028/nist.sp.800-167 · Cited by 27 · see citing works
A Framework for the Interoperability of Cloud Platforms: Towards FAIR Data in SAFE Environments
Grossman, R. L., Boyles, R., Davis‐Dusenbery, B. N., et al. (2024) · Scientific Data · doi:10.1038/s41597-024-03041-5 · Cited by 23 · see citing works
“Many US government agencies follow NIST SP 800-53, and a designated government official issues an Authority to Operate (ATO) when appropriate after the evaluation of a system 11 .”
BackgroundMethodInfluentialBhukya, C. R., Thakur, P., Mudhivarthi, B. R., & Singh, G. K. (2023) · Sensors · doi:10.3390/s23198107 · Cited by 22 · see citing works
“And there are numerous other individual standards, like the NIST Cybersecurity Framework, like NIST 800-53 Rev 4 [42], the Information Technology Infrastructure Library, ITIL v3.”
BackgroundSecurity Considerations for a Central Bank Digital Currency
Hansen, T. R., & Delak, K. M. (2022) · FEDS Notes · doi:10.17016/2380-7172.2970 · Cited by 20 · see citing works
The Biomedical Research Hub: a federated platform for patient research data
Barnes, C., Bajracharya, B., Cannalte, M., et al. (2021) · Journal of the American Medical Informatics Association · doi:10.1093/jamia/ocab247 · Cited by 15 · see citing works
“All data resources and applications operate following the policies, procedures, and controls of NIST SP 800-53.(7) The resources all use a small, core set of software services called framework services with open APIs (see Figure 1).”
MethodGoverning Blocks: Building Interagency Consensus to Coordinate Humanitarian Aid
Awan, F., & Nunhuck, S. (2020) · Journal of Science Policy & Governance · doi:10.38126/jspg160201 · Cited by 13 · see citing works
Security considerations and requirements for Cloud computing
Ghaffari, F., Gharaee, H., & Forouzandehdoust, M. R. (2016) · International Symposium on Telecommunications · doi:10.1109/istel.2016.7881792 · Cited by 8 · see citing works
“developed by NIST, Cloud computing is a model for enabling convenient, on-demand network access to a shared pool of configurable computing resources that can be rapidly provisioned and released with minimal management effort or service provider interaction.”
InfluentialImplementing DevSecOps Pipeline for an Enterprise Organization
Chavan, N., Bharambe, N., Deshmukh, S., Ahire, D., & Jain, P. A. R. (2022) · International Journal of Advanced Research in Science Communication and Technology · doi:10.48175/ijarsct-4883 · Cited by 7 · see citing works
A Specification-Based Intrusion Prevention System for Malicious Payloads
Werth, A. W., & Morris, T. H. (2019) · Advances in intelligent systems and computing · doi:10.1007/978-3-030-31239-8_13 · Cited by 7 · see citing works
Steinbart, P. J., Raschke, R. L., Gal, G., et al. (2015) · SSRN Electronic Journal · doi:10.2139/ssrn.2685943 · Cited by 7 · see citing works
Iyer, S., Jones, K. M., Robinson, J. O., Provenza, N. R., Duncan, D., Lázaro‐Muñoz, G., McGuire, A. L., Sheth, S. A., & Majumder, M. A. (2024) · eLife · doi:10.7554/elife.94000 · Cited by 8 · see citing works
“…the lines of the database of Genotypes and Phenotypes (dbGaP) (https://www.ncbi.nlm.nih.gov/gap/) or the National Institute of Standards and Technology (NIST) 800-53 Security and Privacy Controls for Information Systems and Organizations framework at the Moderate Level ( Dempsey et al., 2014 ).”
Security content automation protocol (SCAP) version 1.3 validation program test requirements
Cook, M., Quinn, S., Waltermire, D., et al. (2018) · doi:10.6028/nist.ir.7511r5 · Cited by 6 · see citing works
Tan, V. Y. F., Cheh, C., & Chen, B. (2021) · IEEE International Symposium on Software Reliability Engineering Workshops (ISSREW) · doi:10.1109/issrew53611.2021.00046 · Cited by 5 · see citing works
Zhang, W., Chen, Y., Cybulski, T. R., et al. (2014) · ACM SIGSAC Conference on Computer and Communications Security (CCS) · doi:10.1145/2660267.2660341 · Cited by 5 · see citing works
Securing IEDs against cyber threats in critical substation automation and industrial control systems
Weerathunga, P. E., & Cioraca, A. (2017) · Conference for Protective Relay Engineers · doi:10.1109/cpre.2017.8090048 · Cited by 3 · see citing works
Baidur, O. (2022) · Cybersecurity Education Science Technique · doi:10.28925/2663-4023.2022.17.3145 · Cited by 2 · see citing works
Security countermeasures in the cyber-world
Bendovschi, A., & Al-Nemrat, A. (2016) · doi:10.1109/icccf.2016.7740440 · Cited by 1 · see citing works
“According to Hastie et al. (2008), logistic regression analysis is “used mostly as a data analysis and inference tool, where the goal is to understand the role of the input variables in explaining the outcome” [12].”
BackgroundMethodTrunnell, M., Frankenberger, C. A., Hota, B. N., Hughes, T., Martinov, P., Ravichandran, U., Shah, N. S., Grossman, R. L., Frankenberger, C. A., Grossman, R. L., et al. (2024) · JAMIA Open · doi:10.1093/jamiaopen/ooae025 · Cited by 1 · see citing works
“The PRC follows the policies, procedures and controls for a NIST SP 800-53 release 4 Moderate system (7).”
MethodThe Value of Threat Models in Enterprise Security Testing of Database Systems & Services
Williams, T. D. (2015) · Cited by 1 · see citing works
Research on a Cybersecurity Review System with Suggestions
(2016) · Strategic Study of CAE · doi:10.15302/j-sscae-2016.06.008
ANALYSIS OF METHODS OF ASSESSING THE EFFICIENCY OF INTRA-BANKING CYBERSECURITY SYSTEM
Gritsenko, K. (2020) · Market Infrastructure · doi:10.32843/infrastruct41-52
Dawson, M. E., Walker, D., Vassilakos, A., et al. (2022) · Advances in information security, privacy, and ethics book series · doi:10.4018/978-1-7998-8693-8.ch002
- Authors
- Dempsey, K., Witte, G., & Rike, D.
- Affiliations
- National Institute of Standards and Technology (US)
- ORCID
- Witte, Greg
- Published
- 2014-02
- OpenAlex
- W2694313985
- Cited by
- 26
- References
- 0
- Citations by year
- 2024: 3 · 2023: 2 · 2022: 4 · 2021: 2 · 2020: 2 · 2019: 1 · 2018: 2 · 2017: 2 · 2016: 3 · 2015: 4 · 2014: 1
- Type
- report
- Language
- en
- Open access
- gold
- doi.org
- Topics
- Physical Sciences › Computer Science › Information Systems › Information and Cyber Security
- Social Sciences › Sociology and Political Science › Privacy, Security, and Data Protection
- Social Sciences › Business, Management and Accounting › Management Information Systems › Information Technology Governance and Strategy
- Keywords
- security countermeasures, privacy control, federal information systems, information security, privacy, risk management
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
