NIEF TPAT | TIP: NIEF Minimal Security Controls Profile for Criminal Apprehension Data

NIEF Minimal Security Controls Profile for Criminal Apprehension Data, v1.0

Minimal profile of security controls from NIST Special Publication 800-53 r4 for systems that handle the Criminal Apprehension information type, as defined by NIST Special Publication 800-60, Volume II, Revision 1, Section D.16.1. Criminal apprehension supports activities associated with the tracking and capture of groups or individuals believed to be responsible for committing Federal crimes. Systems that handle Criminal Apprehension information should operate at an impact level of LOW confidentiality, LOW integrity, and MODERATE availability, as recommended by NIST.

Identifier

https://trustmark.nief.org/tpat/tips/nief-minimal-security-controls-profile-for-criminal-apprehension-data/1.0/

Publication Date

2021-08-27

Issuing Organization

NIEF (https://nief.org/) View Contact

NIEF Support

help@nief.org

No telephone

No Mailing Address

Keywords

Security, NIEF, Criminal Apprehension

Legal Notice

This document and the information contained herein is provided on an "AS IS" basis, and NIEF disclaims all warranties, express or implied, including but not limited to any warranty that the use of the information herein will not infringe any rights or any implied warranties or merchantability or fitness for a particular purpose. In addition, NIEF disclaims legal liability for any loss incurred as a result of the use or reliance on the document or the information contained herein.

Tree View
Details View

Trust Expression:

TIP_NIEFMinimalSetofSecurityControlsforSystemswithaLOWLOWMODERATERiskProfile

References (1)

TIP NIEF Minimal Set of Security Controls for Systems with a LOW-LOW-MODERATE Risk Profile, v1.0
Description	Minimal profile of security controls from NIST Special Publication 800-53 r4 for systems that need to operate at a LOW-LOW-MODERATE impact level, as recommended by NIEF. Pertains to systems that operate at LOW confidentiality, LOW integrity, and MODERATE availability. Includes only those applicable security controls from NIST SP 800-53 r4 that have been marked by NIST as Priority P1. Incorporates security control downgrading guidance, as appropriate, based on recommendations on page 35 of NIST SP 800-53 r4.
ID	TIP_NIEFMinimalSetofSecurityControlsforSystemswithaLOWLOWMODERATERiskProfile

Sources (4)

SP800-53R4	NIST Special Publication 800-53 Revision 4, Security and Privacy Controls for Federal Information Systems and Organizations, National Institute of Standards and Technology, April 2013 (Includes updates as of 01-15-2014). Available at http://dx.doi.org/10.6028/NIST.SP.800-53r4.
NIEF	National Identity Exchange Federation
SP800-60V1R1	NIST Special Publication 800-60 Volume I, Revision 1, Guide for Mapping Types of Information and Information Systems to Security Categories, National Institute of Standards and Technology, August 2008. Available at https://doi.org/10.6028/NIST.SP.800-60v1r1.
SP800-60V2R1	NIST Special Publication 800-60 Volume II, Revision 1, Appendices to Guide for Mapping Types of Information and Information Systems to Security Categories, National Institute of Standards and Technology, August 2008. Available at https://doi.org/10.6028/NIST.SP.800-60v2r1.

Terms (1)

Term Name	Abbreviations	Definition
Null Term	Null	Just a spreadsheet test.

Also available as XML or JSON