National Institute of Standards and Technology Guidelines Authoritative Source Content

The National Institute of Standards and Technology (NIST) is a part of the U.S. Department of Commerce. NIST's mission is to promote U.S. innovation and industrial competitiveness by advancing measurement science, standards, and technology in ways that enhance economic security and improve our quality of life.

RSA Archer provides authoritative source content for several NIST guidelines including:

• NIST Cybersecurity Framework
• NIST SP 800-30 Risk Management Guide for Information Technology Systems
• NIST SP 800-30 Rev 1 Guide for Conducting Risk Assessments
• NIST SP 800-37 Rev 1 Guide for Applying the Risk Management Framework to Federal Information Systems
• NIST SP 800-39 Guide for Managing Information Security Risk
• NIST SP 800-53 Security and Privacy Controls for Federal Information Systems and Organizations Revision 4
• NIST SP 800-82 Guide to Industrial Control Systems (ICS) Security Revision 2

Languages

This content is available in English only.

Mappings

The following standards have mappings for the NIST guidelines to the RSA Archer Control Standard Library are available in the authoritative source content pack:

• NIST SP 800-30 Risk Management Guide for Information Technology Systems
• NIST SP 800-53 Security and Privacy Controls for Federal Information Systems and Organizations Revision 4
• NIST SP 800-82 Guide to Industrial Control Systems (ICS) Security Revision 2

The following guidelines do not have control standard mappings:

• NIST SP 800-30 Rev 1 Guide for Conducting Risk Assessments
• NIST SP 800-37 Rev 1 Guide for Applying the Risk Management Framework to Federal Information Systems
• NIST SP 800-39 Guide for Managing Information Security Risk

Content Source

Links to the content sources are provided, where available, with the individual booklet listing above.

Licensing Restrictions

The NIST authoritative source content is available with the use of the RSA Archer Policy Program Management, RSA Archer Controls Monitoring Program Management, and/or RSA Archer Authorization and Assessment use cases. No additional license is required.

For Additional Support

To learn more about this content, please contact your Account Rep for additional details. To obtain this content or for technical support questions, please open a support case or contact RSA Archer at archersupport@rsa.com for more information.