Management activities

As in earlier NIST documents, especially SP 800-18, security controls are broken into the three familiar general classes of security controls - management, operational, and technical. New to the certification and accreditation criteria is the concept of critical elements, initially defined in SP 800-26. ................
................