NIST SP 800-53

The National Institute of Standards and Technology (NIST), within the U.S. Department of Commerce, creates standards and guidelines pertaining to information security. NIST developed Special Publication 800-53 (NIST SP 800-53) to build on statutory responsibilities laid out in the Federal Information Security Management Act (FISMA), Public Law (P.L.) 107-347, which is a federal law that requires U.S. government agencies to create, review, and report on agency-wide practices that prioritize information security. NIST 800-53 mandates specific security and privacy controls required for federal government and critical infrastructure.

Through an independent, third-party assessment, Google Cloud has received an attestation letter confirming that a subset of our Google Cloud and Google Workspace services are operating in compliance with NIST SP 800-53 controls.