NIST 800-53A: Guide for Assessing the Security Controls in ...
NIST 800-53A: Guide for Assessing the Security Controls in
Federal Information Systems
Samuel R. Ashmore Margarita Castillo Barry Gavrich
CS589 Information & Risk Management
New Mexico Tech Spring 2007
Assessing Security Controls
Introduction Framework and Methods Assessment Process Assessment Procedures Assessment Expectations Sample Assessment References Questions
Introduction
Security Assessments Performed Throughout System Development Life Cycle (SDLC) Phases
System initiation Development and acquisition Implementation Operational and maintenance Disposal
Assessments Performed Relative to System Risk, Minimally on an Annual Basis, A-130
Introduction
Security Control Types:
Management Operational Technical safeguards
Rely on Additional Input From:
Security categorization from SP800-53 / FIPS 199 Level of assurance required for operation
Additional Assessment Documents
SP800-37, Guide for Security C&A Common Criteria, FIPS 140-2
Framework of Assessment Procedures
Framework: Input, Processing, and Output
Input: 800-53, and FIPS 199 Policy, procedures, security requirements Specific protection-related actions Specific items: hardware, software, firmware
................
................
In order to avoid copyright disputes, this page is only a partial summary.
To fulfill the demand for quickly locating and searching documents.
It is intelligent file search solution for home and business.
Related download
- nist sp 800 53 rev 4 talatek llc
- nist sp 800 53 revision 5 status update
- what s new in draft nist special publication 800 53
- dcsa nisa working group update national archives
- high value asset control overlay cisa
- requirements mappings to cnssi 1253 nist sp 800 53 controls
- federal cybersecurity privacy professionals forum
- nist sp 800 53 revision 5 security and privacy controls
- hipaa ferpa privacy technical nist cis critical security
- nist sp 800 53 appendix j privacy controls