fisma certification and accreditation handbook phần 8 ppsx

... 1 28. 88. 41.2:1025 140.216.41.2 :80 CLOSE_WAIT TCP 1 28. 88. 41.2:2 180 140.216.41.2 :80 CLOSE_WAIT TCP 1 28. 88. 41.2:1 188 140.216.41.2 :80 CLOSE_WAIT (A socket is an IP address plus a port, e.g., 206.2 08. 163.15 :80 .) SE ... of firewalls and proxy servers are used and where they are deployed ■ What type of VPNs (SSL, IPSec) are used and where they are deployed ■ What type of rou...

Ngày tải lên: 14/08/2014, 18:20

... VBP965T5T5 007 HJJJ863WD3E 0 08 2 987 GVTWMK 009 629MP5SDJT 010 IMWQ295T6T PUBLISHED BY Syngress Publishing, Inc. 80 0 Hingham Street Rockland, MA 02370 FISMA Certification & Accreditation Handbook Copyright ... Inc. Brands and product names mentioned in this book are trademarks or service marks of their respective companies. KEY SERIAL NUMBER 001 HJIRTCV764 002 PO 987 3D5FG 003...

Ngày tải lên: 14/08/2014, 18:20

... the www.syngress.com 28 Chapter 3 • Understanding the Certification and Accreditation Process 409_Cert_Accred_03.qxd 11/2/06 1: 28 PM Page 28 Understanding the Certification and Accreditation Process “You ... review the packages according to the same standards. Writing the handbook is a big job. A good handbook is likely to be around 200 pages long.The handbook has to include...

Ngày tải lên: 14/08/2014, 18:20

... technical, and operational controls of the infor- www.syngress.com 1 08 Chapter 8 • Performing and Preparing the Self-Assessment 409_Cert_Accred_ 08. qxd 11/2/06 1:51 PM Page 1 08 Table 7.12 Certification and ... security ■ Physical and environmental operations and safeguards ■ Administration and implementation ■ Preventative maintenance ■ Contingency and disaster recovery pl...

Ngày tải lên: 14/08/2014, 18:20

... and restore files? www.syngress.com 1 28 Chapter 8 • Performing and Preparing the Self-Assessment Continued 409_Cert_Accred_ 08. qxd 11/2/06 1:51 PM Page 1 28 Table 8. 4 continued Operational Assurance ... classifications and handling instructions clearly marked on all media? www.syngress.com Performing and Preparing the Self-Assessment • Chapter 8 129 Continued 409_Cert_Accred_...

Ngày tải lên: 14/08/2014, 18:20

... Security Incident Handling Guide. NIST Special Publication 80 0-61, January 2004 (http://csrc.nist.gov/publications/nistpubs /80 0-61/sp800-61.pdf ). “Digital Evidence: Standards and Principles (Draft).” ... 2000 (www.whitehouse.gov/omb/memoranda/m00-13.html). 4. Jacob J. Lew.“Instructions on Complying with President’s Memorandum of May 14, 19 98, ‘Privacy and Personal Information in Fe...

Ngày tải lên: 14/08/2014, 18:20

... enrollment, and time and attendance, might be blocked. (This is an availability threat.) ■ If a virus proliferates throughout the Houston network, both the user enrollment system and the time and attendance ... want include a staff contact list, and contact lists for the vendors that make the equipment and software listed in your Business Impact Assessment and Hardware and Sof...

Ngày tải lên: 14/08/2014, 18:20

... 2005. ISBN: 0750677953. Landoll, Douglas J., CRC. The Security Risk Assessment Handbook. December 12, 2005. ISBN: 084 9329 981 . Long, Johnny and Chris Hurley, with Mark Wolfgang and Mike Petruzzi. Penetration ... Hossein. Handbook of Information Security,Volume 3,Threats, Vulnerabilities, Prevention, Detection, and Management. John Wiley & Sons, January 2006. ISBN: 04716 483 29...

Ngày tải lên: 14/08/2014, 18:20

... coordinating the development of standards and guidelines under section 20 of the National Institute of Standards and Technology Act (15 U.S.C. 278g–3) with agencies and offices operating or exercising ... promulgation, and adoption of, and compliance with, stan- dards developed under section 20 of the National Institute of Standards and Technology Act (15 www.syngress.com 434 Appen...

Ngày tải lên: 14/08/2014, 18:20

... Institute of Standards and Technology pursuant to paragraphs (2) and (3) of section 20(a) of the National Institute of Standards and Technology Act (15 U.S.C. 278g–3(a)), prescribe standards and guidelines ... Board), 304 certification See also Certification and Accreditation described, 3–4 determining level of, 93–102 Certification Agent, role in C&A process, 31–32 Cer...

Ngày tải lên: 14/08/2014, 18:20