December 4, 2024
Author(s)
Katherine Schroeder, Hung Trinh, Victoria Pillitteri
This document provides guidance on how an organization can develop information security measures to identify the adequacy of in-place security policies, procedures, and controls. It explains the measures prioritization process and how to evaluate measures.