United States of America: NIST opened consultation on Assessing Security and Privacy Controls in Information Systems and Organisations draft (SP 800-53A)

On 3 August 2021, the consultation on the Assessing Security and Privacy Controls in Information Systems and Organisations draft was opened by the National Institute of Standards and Technology (NIST). The consultation period will run until 1 October 2021. In particular, the draft provides a framework to assess the organisations' enhanced security requirements. Moreover, the draft guides the organisation to improve the efficiency of the assessment procedures. Finally, this improvisation should be achieved partly through automation and retrospective monitoring of the authorisation processes.