Federal Cybersecurity & Privacy Professionals Forum
Federal Cybersecurity & Privacy Professionals
Forum
December 2nd, 2021
info@
icon
icon
Today's Agenda
I. FedRAMP NIST 800-53 Rev 5
Transition Schedule
II. FedRAMP NIST 800-53 Rev 5
Baseline Development
2
FedRAMP NIST 800-53 Rev 5 Transition Schedule
icon
Step 1
FedRAMP reviewed all NIST Rev5 baseline controls and used threat-based scoring data to inform recommendations for removal and addition of controls to each baseline
Working with the JAB and other government stakeholders to develop an initial draft of the FedRAMP baselines (high, moderate and low)
icon
Step 2
Release Draft FedRAMP Baselines for Public Comment
Share draft baseline updates for public comment by FedRAMP stakeholders and partners.
(Targeting Q1 2022 December)
icon
Step 3
Update FedRAMP Baselines and Documentation Based on Public Comments
Review and adjudicate public comments. Update and finalize FedRAMP baselines with the JAB and other government Stakeholders.
(Targeting Q2 2022 March)
icon
Step 4
Release Final Rev5 FedRAMP Baseline Documentation Updates and CSP Implementation Plan
Release the updated FedRAMP baselines, templates, and documents, and provide an implementation plan with timelines for CSPs.
(Targeting Q3 2022 May)
Implementation plan likely to give CSPs at least 6 months or to next Annual Assessment to transition (and assess), whichever is longer
3
FedRAMP NIST 800-53 Rev 5 Baseline Development
FedRAMP applied the threat-based methodology only to the controls that FedRAMP added above the NIST Baseline (i.e. delta controls) to inform control selection.
Keep
Remove
Additional FedRAMP controls with a protection
value in the top 80% of controls scored
Additional FedRAMP
controls with a protection value in the bottom 20%
of controls scored.
As a result of applying the threat based model, the additional FedRAMP controls will be reduced for Moderate and High baselines.
Note, no changes are proposed to the NIST Rev 5 baseline.
Low Moderate
High
NIST
149 287 370
Delta Controls
using threat scoring
+0
+16
+20
Total
149 303 390
4
Thank You
Learn more at @FEDRAMP
................
................
In order to avoid copyright disputes, this page is only a partial summary.
To fulfill the demand for quickly locating and searching documents.
It is intelligent file search solution for home and business.
Related download
- nist sp 800 53 rev 4 talatek llc
- nist sp 800 53 revision 5 status update
- what s new in draft nist special publication 800 53
- dcsa nisa working group update national archives
- high value asset control overlay cisa
- requirements mappings to cnssi 1253 nist sp 800 53 controls
- federal cybersecurity privacy professionals forum
- nist sp 800 53 revision 5 security and privacy controls
- hipaa ferpa privacy technical nist cis critical security
- nist sp 800 53 appendix j privacy controls
Related searches
- nist cybersecurity risk assessment template
- cybersecurity resources for small businesses
- best cybersecurity stocks to buy
- cybersecurity policy for small business
- cybersecurity risk assessment template
- cybersecurity for businesses
- cybersecurity policy and procedures
- cybersecurity protection small business
- small business cybersecurity act
- privileged user cybersecurity responsibility
- cybersecurity architect
- cybersecurity position descriptions