How to Get a Security Assessment the NIST Way
Posted October 22nd, 2007 by rybolovThose cheeky devils over at NIST have an interesting read out in draft form: NISTIR 7328 (.pdf caveat). It’s a draft Interagency Report, but in reality it’s a how-to on being assessed and being the assessor.
I’ve given it a glance and it’s all the things that successful Security Test and Evaluation teams have been doing all along. I know there’s some kind of “take-away” (my MBA phrase for today) that works out in the private sector.
Similar Posts:
Posted in FISMA, NIST, Risk Management, What Works | No Comments »