fisma certification and accreditation handbook phần 10 ppt

... Board), 304 certification See also Certification and Accreditation described, 3–4 determining level of, 93 102 Certification Agent, role in C&A process, 31–32 Certification and Accreditation (C&A) addressing ... Institute of Standards and Technology pursuant to paragraphs (2) and (3) of section 20(a) of the National Institute of Standards and Technology Act (15 U...

Ngày tải lên: 14/08/2014, 18:20

... agency, you will continually need to go back to the handbook and reference it.The handbook will have way too much information in it for you to read and absorb and remember in one fell swoop. However, if ... HJJJ863WD3E 008 2987GVTWMK 009 629MP5SDJT 010 IMWQ295T6T PUBLISHED BY Syngress Publishing, Inc. 800 Hingham Street Rockland, MA 02370 FISMA Certification & Accreditation...

Ngày tải lên: 14/08/2014, 18:20

... important memorandum on privacy to heads of departments and agencies.The memo can be viewed at www.whitehouse.gov/omb/memoranda/fy2006/m-06-15.pdf. The memorandum reminds heads of departments and agencies ... ________________________ Networks and Domains Affected: Incident Summary: (Be specific. List dates and times. Include how incident was detected and resolved and describe what...

Ngày tải lên: 14/08/2014, 18:20

... Understanding the Certification and Accreditation Process 409_Cert_Accred_03.qxd 11/2/06 1:28 PM Page 28 Understanding the Certification and Accreditation Process “You say it as you understand it.” —Johann ... review the packages according to the same standards. Writing the handbook is a big job. A good handbook is likely to be around 200 pages long.The handbook has to include ve...

Ngày tải lên: 14/08/2014, 18:20

... Process and Rationale for the C&A Level Recommendation The <Agency Name> Certification and Accreditation Program Handbook, <publica- tion date> pages ... security ■ Physical and environmental operations and safeguards ■ Administration and implementation ■ Preventative maintenance ■ Contingency and disaster recovery planning ■ Training and security awareness ■...

Ngày tải lên: 14/08/2014, 18:20

... Table 10. 1 also apply to handhelds—for example, the rules for passwords and are not repeated in Table 10. 2. Additional rules that handhelds may require are listed in Table 10. 2. Table 10. 2 Rules ... should agree to, some of which are listed in Table 10. 4. Rules from Table 10. 1 also apply to Privileged Users and are not repeated in Table 10. 4. Table 10. 4 Rules of Behavior fo...

Ngày tải lên: 14/08/2014, 18:20

... enrollment, and time and attendance, might be blocked. (This is an availability threat.) ■ If a virus proliferates throughout the Houston network, both the user enrollment system and the time and attendance ... want include a staff contact list, and contact lists for the vendors that make the equipment and software listed in your Business Impact Assessment and Hardware and Sof...

Ngày tải lên: 14/08/2014, 18:20

... Hossein. Handbook of Information Security,Volume 3,Threats, Vulnerabilities, Prevention, Detection, and Management. John Wiley & Sons, January 2006. ISBN: 0471648329. Jones, Andy, and Debi ... 2005. ISBN: 0750677953. Landoll, Douglas J., CRC. The Security Risk Assessment Handbook. December 12, 2005. ISBN: 0849329981. Long, Johnny and Chris Hurley, with Mark Wolfgang and Mike P...

Ngày tải lên: 14/08/2014, 18:20

... of firewalls and proxy servers are used and where they are deployed ■ What type of VPNs (SSL, IPSec) are used and where they are deployed ■ What type of routers and gateways are used and where they ... controls. Authentication and Identity Verification Identification and authorization (I&A) controls enable your information system and applications to prompt users for logon inf...

Ngày tải lên: 14/08/2014, 18:20

... PM Page 390 The following resources may help you better understand Certification and Accreditation: ■ Certification and Accreditation 101 www.intranetjournal.com/articles/200406/ij_06_23_04a.html ■ Clinger-Cohen ... promulgation, and adoption of, and compliance with, stan- dards developed under section 20 of the National Institute of Standards and Technology Act (15 www.syngress...

Ngày tải lên: 14/08/2014, 18:20