Posts Tagged ‘Risk Management’
National Institute of Standards and Technology (NIST) – Security and Privacy Controls for Federal Information Systems and Organizations
Latest Daft – Comments on SP 800-53, Revision 4 should be sent by March 1, 2013, to sec-cert@nist.gov.
NIST -Security and Privacy Controls for Federal Information Systems and Organizations
“…Through the process of risk management, leaders must consider risk to US interests from adversaries using cyberspace to their advantage and from our own efforts to employ the global nature of cyberspace to achieve objectives in military, intelligence, and business operations… “
“…For operational plans development, the combination of threats, vulnerabilities, and impacts must be evaluated in order to identify important trends and decide where effort should be applied to eliminate or reduce threat capabilities; eliminate or reduce vulnerabilities; and assess, coordinate, and deconflict all cyberspace operations…”
“…Leaders at all levels are accountable for ensuring readiness and security to the same degree as in any other domain…”
— THE NATIONAL STRATEGY FOR CYBERSPACE OPERATIONS OFFICE OF THE CHAIRMAN, JOINT CHIEFS OF STAFF, U.S. DEPARTMENT OF DEFENSE
.... IT administrators can now choose to allow, block or restrict access to applications by department, job function, time and day, as well as create usage reports.
Read the rest of this entry »
Tags: Cyber War, Human Element, Risk, Risk Management, Security, Social Media, SpearPhishing | 
Comments Closed
Tags: Assets, Cyber War, databreach, Human Element, IT Controls, Risk, Risk Management, SCADA, SQL Injection, XSS | Comments Closed
- Impact! Interior Design Solutions
- Symantec – Internet Security Threat Report 2013
- NIST – Managing Identity Requirements for Remote Users of Information Systems to Protect System Security and Information Privacy
- National Institute of Standards and Technology (NIST) – Security and Privacy Controls for Federal Information Systems and Organizations
- Know your Enemies – Know Yourself – Art of War
- Symantec: Annual Study: U.S. Cost of a Data Breach
- National Institute of Standards and Technology – Glossary of Key Information Security Terms
- Ponemon Institute – 2012 Cost of Cyber Crime Study
- Ponemon Institute – Third Annual Benchmark Study on Patient Privacy & Data Security
- Stuxnet-style SCADA attack kept quiet after US gov tests