Manage · Management Operations

Policy areas

Policy areas aligned with CJIS and NIST SP 800-53 Rev. 5, with additional NIST guidance for cloud services, operational technology and AI.

  • Access Control
  • Awareness and Training
  • Audit and Accountability
  • Assessment, Authorization, and Monitoring
  • Configuration Management
  • Contingency Planning
  • Identification and Authentication
  • Incident Response
  • Maintenance
  • Media Protection
  • Physical and Environmental Protection
  • Planning
  • Program Management
  • Personnel Security
  • Personally Identifiable Information Processing and Transparency
  • Risk Assessment
  • System and Services Acquisition
  • System and Communications Protection
  • System and Information Integrity
  • Supply Chain Risk Management
  • Information Exchange Agreements
  • Mobile Devices
  • Operational Technology Security
  • Security and Privacy in Public Cloud Computing
  • AI Risk Management

NIST SP 800-53 Rev. 5 · CJIS Security Policy · NIST SP 800-82 Rev. 3 · NIST SP 800-144 · NIST AI RMF