Ads
related to: nist sp 800 34 revision- UK National Standard Body
Search standards.
Build quality in your business.
- Find industry standards
Browse standards by industries
Browse our most popular industries
- UK National Standard Body
Search results
Results From The WOW.Com Content Network
An Information System Contingency Plan (ISCP) is a pre-established plan for restoration of the services of a given information system after a disruption.. The US National Institute of Standards and Technology Computer Security Resource Center (CSRC) has published a Special Publication (SP) named SP 800-34 guiding organizations as to how an ISCP should be developed.
NIST Special Publication 800-53 is an information security standard that provides a catalog of privacy and security controls for information systems.Originally intended for U.S. federal agencies except those related to national security, since the 5th revision it is a standard for general usage.
Starting with Revision 3 of 800-53, Program Management controls were identified. These controls are independent of the system controls, but are necessary for an effective security program. Starting with Revision 4 of 800-53, eight families of privacy controls were identified to align the security controls with the privacy expectations of ...
Special Publications (SP) aside, most of the informative references requires a paid membership or purchase to access their respective guides. The cost and complexity of the framework has resulted in bills from both houses of Congress that direct NIST to create Cybersecurity Framework guides that are more accessible to small and medium businesses.
The primary document outlining the RMF is NIST Special Publication 800-37. [1] [3] The RMF steps link to several other NIST standards and guidelines, including NIST Special Publication 800-53.
It directs the organization to make use of NIST Special Publication 800-37, which implies that the Risk management framework (RMF) STEP 6 – AUTHORIZE INFORMATION SYSTEM replaces the Certification and Accreditation process for National Security Systems, just as it did for all other areas of the Federal government who fall under SP 800-37 Rev. 1.
The guidelines are provided by NIST SP 800-60 "Guide for Mapping Types of Information and Information Systems to Security Categories." [ 9 ] The overall FIPS 199 system categorization is the "high water mark" for the impact rating of any of the criteria for information types resident in a system.
Published in September 2006, the NIST SP 800-92 Guide to Computer Security Log Management serves as a key document within the NIST Risk Management Framework to guide what should be auditable. As indicated by the absence of the term "SIEM", the document was released before the widespread adoption of SIEM technologies.
Ad
related to: nist sp 800 34 revision