A practical, scoped engagement for organisations seeking NIST SP 800-53 support.
How we work
The NIST SP 800-53 engagement follows the activities below. The scope and outputs are agreed with you before work starts.
01
Define system boundary and applicable control baseline.
02
Tailor and map controls to implementation owners.
03
Assess implementation and supporting evidence.
04
Document weaknesses, inherited controls and remediation actions.
05
Reassess agreed controls and maintain the action plan.
What you can expect
System boundary and tailored control mapping
Control implementation and evidence assessment
Remediation plan with control owners and residual issues
What we need to get started
System architecture, boundary and applicable baseline
Existing system security plans and inherited control information
System, security and assessment owners
NIST SP 800-53 / ENGAGEMENT PROCESS
From first discussion to delivery
Typical activities for this service. The agreed scope determines the work and outputs.
01
Define system boundary and applicable control baseline
02
Tailor and map controls to implementation owners
03
Assess implementation and supporting evidence
04
Document weaknesses, inherited controls and remediation actions
05
Reassess agreed controls and maintain the action plan
Where an independent certification or attestation applies, the relevant independent body makes its own assessment and decision. Scope and availability are agreed individually.
