CSF 1.1 Federal Resources

Resources relevant for U.S. Federal Agencies.

• Mappings between 800-53 Rev. 5 and other frameworks and standards (NIST Cybersecurity Framework and NIST Privacy Framework; ISO/IEC 27001 [updated 1/22/21])
• Mappings between NIST Special Publication (SP) 800-171 Revision 1 Controlled Unclassified Information (CUI) Requirements and the Cybersecurity Framework Subcategories:
  • An Online Informative Reference mapping of SP 800-171 Revision 1 to the Cybersecurity Framework Version 1.1
  • A mapping of SP 800-171 Revision 1 to the Cybersecurity Framework Version 1.0 (published in 2017)
• NIST Engineering Laboratory’s Baseline Tailor  
  (A software tool for using the United States government's Cybersecurity Framework and for tailoring the NIST Special Publication (SP) 800-53 Revision 4 security controls.) 
• NISTIR 8170: The Cybersecurity Framework: Implementation Guidance for Federal Agencies
• NIST's Security Measures for “EO-Critical Software” Use Under Executive Order (EO) 14028
• NIST Special Publication (SP) 800-37 Revision 2 (Final): Risk Management Framework for Information Systems and Organizations
• OMB Memorandum 17-25: Reporting Guidance for Executive Order on Strengthening the Cybersecurity of Federal Networks and Critical Infrastructure
• The  National Online Informative References (OLIR) Program is a NIST effort to facilitate subject matter experts defining online informative references (OLIRs) between cybersecurity elements of their documents and cybersecurity elements of other documents like the NIST Cybersecurity Framework