Office of Personnel Management

The box at right lists the 17 NIST information security control families. The mandatory guidance in section 2.3 of this volume is arranged according to these security control families. To uniquely identify each one, a numeric identifier has been added to the control family abbreviation. For example, CP-9 is the ninth control in the Contingency ... ................
................