Understanding Controls

Overview
This activity will get you familiar with how to understand and implement controls.
Instructions

1. Go to the NIST SP 800-53 Rev. 5.1.1 website and select two (2) controls in two separate control families (e.g. “AC,” and “AT”) that changes recommendations based on impact (e.g. CA-02 would work, but not AC-01 or AT-06 because they have the same recommendation for all the security baselines.) Create slides for each control with answers to the following questions:
2. Identify the control you are using. Provide a link for the class to view it on the NIST website and discuss the control’s purpose and scope.
3. Discuss how this control increases in stringency as the security impact increases. (Discuss changes at each level.)
4. Discuss the costs of implementing this control at each security impact level.
   Assignment Guidelines
   • Add a new slide in VoiceThread with your video response to the above prompt. This video should be 2-3 minutes in length.
   • Respond to two peers with substantive observations and/or questions about the content of their presentation.
   • Any use of sources, including required readings, must be appropriately cited. Plagiarism of any type, including use of AI, will result in a zero for the assignment and further disciplinary action according to the Student Handbook.
   • This activity/assignment is worth 35. It will be graded according to the Engagement Rubric.