Tuesday, May 7, 2019

Project 3 Information System Security Plans Research Paper

Project 3 development System Security Plans - Research Paper ExampleThen, with todays rapidly changing political, economic, and importantly technical milieu increasing the threat for the federal agencies, it becomes paramount for those agencies to adopt a strong trade protection system plan. In that direction, the study Technology Laboratory (ITL) at the National Institute of Standards and Technology (NIST) has developed guidelines on the ways to vocalise and adopt a security plan. NIST SP 800-53 contains the management, operational, and technical safeguards or countermeasures prescribed for an information system (Swanson, Hash & Bowen, 2006). Among the discordant parts of the NIST security plan, the focus will be on the four sections of General Description, System Environment, Laws, regulations, and policies, and lastly Security Control Selection. So, when a federal agency like Department of Defense (DoD) adopts a security plan, these four sections can contribute optimally to the process and so the discussion will about wherefore are these sections are important and how they can be applied in DoD.All federal agencies or systems including DoD reflect some to extreme level of sensitivity and because of that it requires protection for its physical IS system and its realistic data as part of secured and good management practice. In that direction, DoD adopted a risk-focused security plan and guidelines of NIST in 2014 after dropping its longstanding DoD Information Assurance Certification and Accreditation puzzle out (DIACAP). DoD transitioned to NIST considering its effectiveness, in-depth focus and at the same user-friendly nature. The NIST library of security controls (in NIST publication 800-53 Rev. 4), currently in use at most civilian agencies, are much larger and the controls more granular, yet easier to determine and implement, than DIACAP, say those familiar with both methods

No comments:

Post a Comment

Note: Only a member of this blog may post a comment.