You work as a security engineer for BlueWell Inc. You want to use some techniques and
procedures to verify the effectiveness of security controls in Federal Information System. Which of
the following NIST documents will guide you?
A.
NIST Special Publication 800-53
B.
NIST Special Publication 800-59
C.
NIST Special Publication 800-53A
D.
NIST Special Publication 800-37
Explanation:
NIST has developed a suite of documents for conducting Certification &
Accreditation (C&A). These documents are as follows: 1.NIST Special Publication 800-37: This
document is a guide for the security certification and accreditation of Federal Information Systems.
2.NIST Special Publication 800-53: This document provides a guideline for security controls for
Federal Information Systems. 3.NIST Special Publication 800-53A. This document consists of
techniques and procedures for verifying the effectiveness of security controls in Federal
Information System. 4.NIST Special Publication 800-59: This document provides a guideline for
identifying an information system as a National Security System. 5.NIST Special Publication 800-60: This document is a guide for mapping types of information and information systems to security
objectives and risk levels.