Unit #3
Unit #3
MIS5214
Planning and Policy
1
Agenda
? Exercise: Information Security Policy Assessment ? NIST Risk Management Framework and FIPS 199 ? Use of NIST SP 800-60 Volume 1 and Volume 2 ? Exercise ? Finalize impact levels ? Exercise ? Determine and finalize impact levels ? Exercise ? Determine Information and Information System Types and
provisional security categorization ? Security Control Baselines ? review
? FIPS 200 and NIST 800-53 Security Control Baselines ? Security Control Families
? Risk Assessment Controls ? Exercise Find and assess risk assessment policy ? Next Time: Case Study 1
2
NIST Risk Management Framework
3
FIPS 199 ? Risk Assessment based on security objectives and impact ratings for information and information system
4
NIST Risk Management Framework
5
................
................
In order to avoid copyright disputes, this page is only a partial summary.
To fulfill the demand for quickly locating and searching documents.
It is intelligent file search solution for home and business.
Related download
- 4a hr 00 18 013 final report
- volume ii appendices to guide for mapping types of nist
- categorize step faqs nist
- data classification methodology connecticut
- categorize step tips and techniques for systems nist
- it security procedural guide lightweight security
- data classification and practices nist
- risk management handbook rmh chapter 12 security
- official use only security related information zimmer
- volume i guide for mapping types of information nist