-
NIST 800-38
Adequate security The purpose of the #Select step is to select, tailor, and document the controls necessary to protect the information system and organization commensurate with the risk to organizational operations and assets, individuals, other organizations, and the Nation. Security protections commensurate with the risk resulting from the unauthorized access, use, disclosure, disruption, modification, or…