This publication provides a catalog of security and privacy controls for
information systems and organizations to protect organizational
operations and assets, individuals, other organizations, and the Nation
from a diverse set of threats and risks, including hostile attacks,
human errors, natural disasters, structural failures, foreign
intelligence entities, and privacy risks. (Link).
