Office of Personnel Management

Controls can be managerial, operational, or technical. NIST has identified 17 families or categories of controls to support the appropriate level of confidentiality, integrity, and availability of information. The guidance applies to electronic information systems and has not been developed to apply to information residing exclusively on paper ... ................
................