NIST Risk Management Framework - Selection of Security Control

[@poisonapple146]

This was very helpful to me in my cyber studies, thank you 🙏

[@allen-r8v]

I really appreciate your efforts! I need some advice: I have a SafePal wallet with USDT, and I have the seed phrase. (air carpet target dish off jeans toilet sweet piano spoil fruit essay). Could you explain how to move them to Binance?

[@phyllisobeng4763]

Hello D-vine, which one is the predictive, preventive, and detective? Am kind of confused with those controls; as to whether is control class or types. What exactly are those please

[@DVineConsulting]

P N we have Preventive, Detective, Corrective, Deterrent and Compensating Controls. This are classification of controls by time of occurrence, relative to security incident.

[@phyllisobeng4763]

@@DVineConsulting Thanks so much for this explanation. Means the world to me. God bless you sir

[@DVineConsulting]

@@phyllisobeng4763 You are welcome.

[@dmnick123ify]

Why do I need FIPS 200 if I have 800-53?

[@DVineConsulting]

FIPS 200 addresses the specification of minimum security control requirements and NIST 800-53 is the publication that is used for selecting the security controls.

[@dmnick123ify]

@@DVineConsulting Oh ok. So FIPS 200 is the mandatory standard, that tells you the controls you should have. Then 800-53 has the actual controls to satisfy what FIPS200 mandates?

[@DVineConsulting]

@@dmnick123ify Yes, not only that it tells you the controls you should have but also the specific requirements for each control.