Risk Management Framework

Chapter 10

RMF Phase 2

Selecting Security Controls

Abstract

This chapter introduces the second phase of the RMF: selecting the correct security controls.

Keywords

NIST SP 800-53

security controls

tailoring

ongoing monitoring

system security plan

Table of Contents

Chapter Overview and Key Learning Points

Selecting Security Controls

Dissecting Security Controls

The Control Section

Supplemental Guidance

Control Enhancement Section

Reference Section

Priority and Baseline Allocations Section

Task 1, Phase 2: Common Control Identification

Task 2, Phase 2: Security Control Selection

Task 3, Phase 2: Developing a Monitoring Strategy

Task 4, Phase 2: Reviewing and Approving the Systems Security Plan (SSP)

Chapter 10 Lab Exercises: Selecting Security ...