U.S. Department of Health and Human Services
Common events should trigger administrators to recheck controls.
NIST SP 800-53 is updated periodically, based on comments from the IT security community to ensure the document reflects the most current controls used in practice. System administrators should verify they are using the most recent list of NIST SP 800-53 controls and test the system against any new controls.
Other triggers signal that it is time to review whether current controls meet security needs. These include routine changes in the immediate environment, such as:
New or modified hardware
New or modified software (including applications and operating systems)
New threats introduced to the environment
Page 1 of 5
Using Security Controls
Triggers for Updating Controls