Recent Changes to NIST 800-53 References in Audits

Summary

In order to increase the granularity of the NIST 800-53 references in Tenable audit files the associated references have been slightly changed. Previously, the 800-53 references reported in the audit results were limited to only the parent ID (CM-6, IA-5, etc.). These have been extended to also include the sub-control value (IA-5(1)). This change will allow customers leveraging these references to be more granular in their selections and grouping of results by 800-53 references.

Impact

Customers currently using the NIST 800-53 references will need to verify that their processes can accept the more granular items.

Target Release Date

27 April 2020

Additional Notes:

These changes affect all current audits where 800-53 references are being assigned and will be applied to all audits as applicable in the future.

 __________________________________

Tenable Research Release Highlights are posted in advance of significant new releases or updates to existing plugins or audit files that are important for early customer notification.