What Changed In This Release
- The terms "IT security" and "information security" were changed to "cybersecurity" to standardize terminology.
- Cybersecurity roles and responsibilities were updated to match the NICE Cybersecurity Workforce Framework (NIST SP 800-181).
- NIST SP 800-53 R5 (draft) controls were added, which allowed a more efficient organization of privacy-related controls, and NIST SP 800-53 R4 control objectives were wordsmithed for R5 changes.
- The Digital Security Governance section was renamed Security & Privacy Governance.
- 35 controls were deleted and incorporated into other controls, 80 new controls were added and 174 controls were renumbered.
Did You Purchase An Older Version Of This Product?
Releases from before 2024 are significantly out of date. Existing customers are encouraged to repurchase the current version at 50% of the original product price.
