Nist 800 83

Special Publications in the 800 series present documents of general interest to the computer security community.

The NIST Handbook Intro to Computer Security

Telecommunications Security Guidelines for Telecommunications Management Network

Generally Accepted Principles and Practices for Securing Information Technology Systems

Creating a Patch and Vulnerability Management Program

Guidelines on Firewalls and Firewall Policy

Guidelines on Securing Public Web Servers

Guidelines on Electronic Mail Security

Security Guide for Interconnecting IT Systems

Guide to Securing Legacy IEEE 802.11 Wireless Networks

Building an IT Security Awareness and Training Program

Border Gateway Protocol Security

Recommendation for Key Management

Risk Assessment Methodology Does Not point out specific privacy requirements includes Health care privacy issues

Guide to Malware Incident Prevention and Handling

Guide to Integrating Forensic Techniques into Incident Response

Guidelines for Secure Deployment of IPv6

The NIST SP 800-xx provides a catalog of controls that support the development of secure and resilient federal information systems. These controls are the operational, technical, and management safeguards used by information systems to maintain the integrity, confidentiality, and security of federal information systems. NIST guidelines adopt a multi-tiered approach to risk management through control compliance. SP 800-xx works alongside SP 800-37, which was developed to provide federal agencies and contractors with guidance on implementing risk management programs. SP 800-xx focuses on the controls which can be used along with the risk management framework outlined in 800-37

NIST SP 800-xx provide guidelines for applying the RISK MANAGEMENT Framework to federal information systems

While designed for federal systems, NIST SP 800-xx has been used as the GUIDELINE for CONTINGENCY PLANNING planning throughout much of the private sector.

NIST SP 800-xx Performance Measurement Guide for Information Security guidance on how an organization, through the use of metrics, identifies the adequacy of in-place security controls, policies, and procedures. It provides an approach to help management decide where to invest in additional security protection resources or identify and evaluate nonproductive controls