Security Control Families
The minimum security requirements cover designated
security control areas or families, with regard to
protecting the confidentiality, integrity, and availability of
federal information systems and the information processed,
stored, and transmitted by those systems. Families are
assigned to their respective classes based on the dominant
Fr
a
REE
a
EE
ry
.
characteristics of the controls in the families.
These families represent a broad-based, balanced
information security program that addresses the
management, operational, and technical aspects of
protecting federal information and information systems.
‘Some examples of security control families are: Access
Control (AC), Contingency Planning (CP), and Risk
Assessment (RA),
@
nyscl ang Erurcemarl Proacion
E
sand Connuniaons Proc
El ie
Fk IE
FI E
Ele ;
Ht
igi
@
CLE Me MaDe ore ae de Ne ee