[Verse 1] Twenty families of controls to guide your way From Access Control to Supply Chain every day AC, AT, AU - the alphabet begins CA, CM, CP - where security wins Each control has a number and a baseline too Low, Moderate, High - depends on what you do [Chorus] Eight hundred fifty-three, the catalog we need Twenty families strong, security's our creed Base controls and enhancements, tailor to your site NIST gives us the framework to get security right Reference in your policy, implement with care Eight hundred fifty-three, controls beyond compare [Verse 2] Identity and Authentication, that's IA Incident Response when things go astray Maintenance and Media Protection keep us sound Personnel Security, trusted people all around Privacy controls with PT designation Risk Assessment guides your organization [Chorus] Eight hundred fifty-three, the catalog we need Twenty families strong, security's our creed Base controls and enhancements, tailor to your site NIST gives us the framework to get security right Reference in your policy, implement with care Eight hundred fifty-three, controls beyond compare [Bridge] Physical and Environmental, Planning too Program Management, what managers must do System Acquisition, Communications secure System Information Integrity for sure When you write your policy, here's the way to go "This implements requirements of controls below" [Verse 3] State the family and the numbers that apply XX dash one, XX dash two, reaching for the sky Choose your baseline level, Low or Moderate High impact systems need the strongest advocate Enhancements are optional but they give you more Layered security from ceiling to the floor [Final Chorus] Eight hundred fifty-three, revision number five Twenty families working to keep your data alive From Access to Supply Chain, every family's role NIST eight hundred fifty-three, security's our goal Reference in your policy, implement with pride Eight hundred fifty-three, your cybersecurity guide [Outro] Twenty families strong Security belongs Eight hundred fifty-three Your guide to being free From cyber threats today The NIST SP way
← 3 HIPAA Security Rule | 6 PIPEDA and Canadian Privacy Requirements →