nucleation

LIT-1206: Security and Privacy Controls for Information Systems and Organizations

1 min read

Properties4
StatusDeferred — filed 2026-10-18; reading stopped at a skim on 2026-10-29 (NOTE-1375), from NIST's own PDF: the front matter, Chapters One and Two, and from the catalogue AC-3(2), AC-5, AC-6, AC-7, AU-9, CM-5(4), MP-6(7) and PM-12, about a tenth of 492 pages. A catalogue is consulted rather than read through; the controls the record cites are read, and they name collusion as the risk separation of duties leaves.
Version2
Tagssociety-and-governance
Cited as “paper” byNOTE-1375 — Joint Task Force — NIST SP 800-53 Revision 5

Graph View

Joint Task Force (2020). Security and Privacy Controls for Information Systems and Organizations. NIST Special Publication 800-53, Revision 5. Gaithersburg, MD: National Institute of Standards and Technology. doi:10.6028/NIST.SP.800-53r5.

Skimmed on 2026-10-29 (NOTE-1375): Chapters One and Two and the controls the record cites. The rest of the catalogue is unread.

Why this is here

A41 of the exchange cited “NIST’s security-control framework”, which “explicitly includes separation of duties and least privilege”, as the concrete form of allocating authority so that no compromised member can act alone. Ak named no document; this is the current catalogue. Bears on CLAIM-359 and CASE-108.

Backlinks