• Security and privacy controls and assurance activities catalogue (ITSP.10.033)
• Suggested organizational security and privacy control and activity profile — Medium impact …
• IT Security Risk Management: A Lifecycle Approach (ITSG-33)
• Assessing security requirements for specified information (ITSP.10.171-01)
• Cryptographic algorithms for UNCLASSIFIED, PROTECTED A, and PROTECTED B information - ITSP.40.111