Which SP includes recommendations for controls to mitigate malware attacks and improve an organization's malware program?

• A. SP 800-83
• B. SP 800-70 Rev2
• C. SP 800-53
• D. SP 800-66 Rev 1

Answer: (A)

Guidance for preventing and handling malware on desktops and laptops is being tested. NIST SP 800-83 provides targeted recommendations to mitigate malware, covering prevention, detection, incident response, and recovery to strengthen an organization’s malware program. It outlines practical controls such as endpoint protection deployment, timely patching, secure configuration and least privilege, user education, content filtering, and formal malware incident handling procedures. This focused guidance directly addresses reducing malware risks and improving how an organization manages malware.

The other publications serve broader or different purposes. One offers security configuration checklists for IT products, not a malware-focused program. Another provides a broad catalog of security and privacy controls, not specifically about malware prevention and handling. The last is HIPAA-specific guidance, not general malware program improvements.