Integrating Privacy Protections into National Security Systems
summary
The committee updates CNSSI 1253 to fold NIST 800-53 Rev 5 privacy into national security systems by creating a baseline plus layered overlays: an accountability overlay with 91 additional controls, low (+30), moderate (+49), high (+5), and a privacy enhancing optional overlay of extra-credit controls. A 12-person cross-disciplinary team performs a control-by-control manual review, adds Privacy Implementation Considerations for security controls that create PII risk, and requires SAOP/designee sign-off; CNSSI 1253 is mandatory for all national security systems.
AI-written summary · about
chapters (6)
- 0:00Introduction to privacy in national security
- 2:30Federal privacy protection approach
- 11:34Privacy overlays for PII systems
- 20:56Risk management framework integration
- 35:31Q&A on privacy frameworks and policies
- 49:07Closing remarks and resources
related talks
35mRevolutionizing Cyber Defense: The NIST CSF 2.0 Advantage
40mCompliance Made Easy—Simplify Your Approach to Privacy
50mPrivacy Standards in the Context of Information Security
48mUnderstanding CMMC and NIST 800-171 for CUI
29mMeasuring Cybersecurity Maturity with the NIST CSF
34mCNCF SIG-Security Intro
46mThe Perfect Storm, What NIS2 and CRA Mean for Your IT Security Strategy
40mExtreme Makeover: Privacy Edition