PM-8: Critical Infrastructure Plan
Control Family:
Threats Addressed:
Baselines:
- Low
N/A
- Moderate
N/A
- High
N/A
- Privacy
- PM-8
- OT Low (SP 800-82r3)
N/A
- OT Moderate (SP 800-82r3)
N/A
- OT High (SP 800-82r3)
N/A
Previous Version:
- NIST Special Publication 800-53 Revision 4:
- PM-8: Critical Infrastructure Plan
Control Statement
Address information security and privacy issues in the development, documentation, and updating of a critical infrastructure and key resources protection plan.
Supplemental Guidance
Protection strategies are based on the prioritization of critical assets and resources. The requirement and guidance for defining critical infrastructure and key resources and for preparing an associated critical infrastructure protection plan are found in applicable laws, executive orders, directives, policies, regulations, standards, and guidelines.
OT Discussion
Organizations should be familiar with the protection requirements and guidance defined by Executive Orders, government sector-specific agencies (SSAs), and industry trade organizations.