Provides a set of baseline security controls and privacy controls that support the development of secure and resilient federal information systems. It is a regulatory standard that defines the minimum baseline of security controls for all U.S.
