Eduardo Takamura

Dec 6, 2023 | nist.gov | Jeremy Licata |Victoria Yan Pillitteri |Eduardo Takamura

In 2017, NIST published a methodology for supporting the automation of SP 800-53 control assessments in the form of IR 8011. IR 8011 is a multi-volume series that starts with an overview of the methodology (volume 1) and provides guidance and specifications for automating the assessment of controls that support specific information security continuous monitoring security capabilities, one volume per capability. Four volumes have been released so far, and more volumes are in development.