fisma certification and accreditation handbook phần 2 potx

... the www.syngress.com 28 Chapter 3 • Understanding the Certification and Accreditation Process 409_Cert_Accred_03.qxd 11 /2/ 06 1 :28 PM Page 28 Understanding the Certification and Accreditation Process “You ... review the packages according to the same standards. Writing the handbook is a big job. A good handbook is likely to be around 20 0 pages long.The handbook has to incl...

Ngày tải lên: 14/08/2014, 18:20

... to handhelds—for example, the rules for passwords and are not repeated in Table 10 .2. Additional rules that handhelds may require are listed in Table 10 .2. Table 10 .2 Rules of Behavior for Handhelds End-User ... classifications and handling instructions clearly marked on all media? www.syngress.com Performing and Preparing the Self-Assessment • Chapter 8 129 Continued 409_Cert_Accr...

Ngày tải lên: 14/08/2014, 18:20

... . . . . .22 2 Books on Privacy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22 2 Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22 2 Chapter ... . . . . . . . . . .21 2 Privacy Laws, Regulations, and Rights . . . . . . . . . . . . . . . .21 2 OMB Memoranda . . . . . . . . . . . . . . . . . . . . . . . . . . .21 3 Laws and Regulations ....

Ngày tải lên: 14/08/2014, 18:20

... enforced as required? www.syngress.com 122 Chapter 8 • Performing and Preparing the Self-Assessment Continued 409_Cert_Accred_08.qxd 11 /2/ 06 1:51 PM Page 122 Table 8.3 continued Management Assurance ... security ■ Physical and environmental operations and safeguards ■ Administration and implementation ■ Preventative maintenance ■ Contingency and disaster recovery planning ■ Tra...

Ngày tải lên: 14/08/2014, 18:20

... Act of 20 02. ” Memorandum for Heads of Executive Departments and Agencies. United States Office of Management and Budget. September 26 , 20 03 (http://www.whitehouse.gov/omb/memo- randa/m03 -22 .html). 7.“Management ... January 20 , 20 04 (www.intranetjournal.com/articles/ 20 0401/ij_01 _20 _04a.html). Taylor, Laura.“Security Scanning 101.” Jupiter Media, September 23 , 20 02 (ww...

Ngày tải lên: 14/08/2014, 18:20

... Rothstein Associates, March 20 02. ISBN: 19313 321 26. www.syngress.com 25 2 Chapter 15 • Preparing the Business Impact Assessment 409_Cert_Accred_15.qxd 11/3/06 2: 42 PM Page 25 2 We can also write the ... September 20 00. ISBN: 0964164876. Hiles, Andrew. Business Continuity—Best Practices. Rothstein Associates, December 20 03. ISBN: 19313 322 23. Hiles, Andrew. Enterprise Risk Assess...

Ngày tải lên: 14/08/2014, 18:20

... apply to your information systems. FIPS PUB 20 0 can be found at http://csrc.nist.gov/publications/ fips/fips200/FIPS -20 0-final-march.pdf#search= %22 FIPS %20 200 %22 . It is certainly possible that not all ... March 15, 20 05. ISBN: 0750677953. Landoll, Douglas J., CRC. The Security Risk Assessment Handbook. December 12, 20 05. ISBN: 0849 329 981. Long, Johnny and Chris Hurley, with Ma...

Ngày tải lên: 14/08/2014, 18:20

... 128 .88.41 .2: 1 025 140 .21 6.41 .2: 80 CLOSE_WAIT TCP 128 .88.41 .2: 2180 140 .21 6.41 .2: 80 CLOSE_WAIT TCP 128 .88.41 .2: 1188 140 .21 6.41 .2: 80 CLOSE_WAIT (A socket is an IP address plus a port, e.g., 20 6 .20 8.163.15:80.) SE ... 335 409_Cert_Accred_19.qxd 11/3/06 2: 50 PM Page 335 409_Cert_Accred _20 .qxd 11/3/06 2: 54 PM Page 364 Configuration and Lockdown Guide,Version 2. 7, O...

Ngày tải lên: 14/08/2014, 18:20

... Package for Accreditation Continued 409_Cert_Accred _21 .qxd 11/3/06 2: 59 PM Page 390 The following resources may help you better understand Certification and Accreditation: ■ Certification and Accreditation ... disposal and decommissioning of media? www.syngress.com Evaluating the Certification Package for Accreditation • Chapter 21 403 409_Cert_Accred _21 .qxd 11/3/06 2: 59...

Ngày tải lên: 14/08/2014, 18:20

... Institute of Standards and Technology pursuant to paragraphs (2) and (3) of section 20 (a) of the National Institute of Standards and Technology Act (15 U.S.C. 27 8g–3(a)), prescribe standards and guidelines ... 93–1 02 Certification Agent, role in C&A process, 31– 32 Certification and Accreditation (C&A) addressing findings, 4 12 416 audits, report cards, 6–7 Busi...

Ngày tải lên: 14/08/2014, 18:20