NIST OLIR Project - SCF Controls

The SCF is pleased to be a participant in the NIST National Online Informative References (OLIR) Program. NIST accepted the proposed OLIRs between the SCF and both NIST CSF v1.1 and NIST SP 800-171 R2 and those can be accessed at the OLIR Information Reference Catalog.

It is important to point out that this is not an endorsement by NIST. The NIST OLIR Project is a NIST effort to facilitate Subject Matter Experts (SMEs) in defining standardized Online Informative References (OLIRs) between elements of their creation (e.g., SCF controls) and NIST publications (e.g., NIST CSF, NIST SP 800-171, etc.). If you would like to learn more about the NIST OLIR Program, please read NIST IR 8278, National Online Informative References (OLIR) Program: Program Overview and OLIR Uses, that explains what OLIRs are, what benefits they provide, how anyone can search and access OLIRs, and how SMEs can contribute OLIRs.

Why Does It Matter?

The intent of the SCF’s participation in the NIST OLIR Program is to provide greater assurance in the mappings between the SCF and select NIST publications, due to the public comments / response component of the program. Increased visibility and communication can help eliminate uncertainties or questions, which can lead to increased assurance in the quality of the SCF mapping.

What Is Contained In OLIR Documents?

The mapping between the NIST publications and SCF contain:

• Focal Document Element (e.g., NIST CSF or NIST SP 800-171 control #)
• Focal Document Element Description (e.g., NIST CSF or NIST SP 800-171 control description)
• Rationale
• Relationship
• Reference Document Element (e.g., SCF control #)
• Reference Document Element Description (e.g., SCF control description)
• Fulfillment (does the reference control satisfy the focal document element – yes or no)

NIST OLIR Submissions

SCF-Submitted Informative References (crosswalk mappings):

• SCF v2023.2 to NIST CSF v1.1
• SCF v2023.2 to NIST SP 800-171 R2