DZP Group elected to adopt the most comprehensive and widely recognized framework NIST 800-53rev4 for both public and private entities along with guidance from other NIST Frameworks in our case 800-171 that was derived from 800-53rev4.

The 800-171 Framework provides guidance on policy creation and implementation for Controlled Unclassified Information (CUI). DLZP determined it was less complicated to adopt a single classification standard and set of controls setting the bar to the highest measure than attempt to take a varied approach to data classification with several layers. Thus, 800-171 adoption provides a single high-hurdle to measure our processes against and maps to both 800-53rev4 and ISO/SEC 27001 Frameworks. These controls are easily achievable within the Amazon Web Service cloud solutions services.

Each Policy Area below shall consist of the Policy its Control Objectives, assertions that define the control objective measures and the relevant test(s) to validate assertion compliance.

Policy Area >>> Policy(s) >>> Control Objective(s) >>> Test(s) >>> Assertion(s) 

DLZP Group uses 800-171 as our default minimum standards. Where requested by client contract we will match the compliance frameworks that their business or industry is measured by incorporating additional NIST 800-53rev4 measures to satisfy client requirements.

Functional Teams responsible for various Compliance Framework Sections