Watch this video on YouTube
Which NIST Special Publication provides guidelines on assessing security and privacy controls in information systems and organisations?