资源描述:
《Risk Management Guide for Information Technology Systems》由会员上传分享,免费在线阅读,更多相关内容在学术论文-天天文库。
1、SpecialPublication800-30RiskManagementGuideforInformationTechnologySystemsRecommendationsoftheNationalInstituteofStandardsandTechnologyGaryStoneburner,AliceGoguen,andAlexisFeringaNISTSpecialPublication800-30RiskManagementGuideforInformationTechnologySystemsRecommendati
2、onsoftheNationalInstituteofStandardsandTechnology1GaryStoneburner,AliceGoguen,and1AlexisFeringaCOMPUTERSECURITYComputerSecurityDivisionInformationTechnologyLaboratoryNationalInstituteofStandardsandTechnologyGaithersburg,MD20899-89301BoozAllenHamiltonInc.3190FairviewPar
3、kDriveFallsChurch,VA22042July2002U.S.DEPARTMENTOFCOMMERCEDonaldL.Evans,SecretaryTECHNOLOGYADMINISTRATIONPhillipJ.Bond,UnderSecretaryforTechnologyNATIONALINSTITUTEOFSTANDARDSANDTECHNOLOGYArdenL.Bement,Jr.,DirectorSP800-30PageiiReportsonComputerSystemsTechnologyTheInform
4、ationTechnologyLaboratory(ITL)attheNationalInstituteofStandardsandTechnologypromotestheU.S.economyandpublicwelfarebyprovidingtechnicalleadershipforthenation’smeasurementandstandardsinfrastructure.ITLdevelopstests,testmethods,referencedata,proof-of-conceptimplementation
5、s,andtechnicalanalysestoadvancethedevelopmentandproductiveuseofinformationtechnology.ITL’sresponsibilitiesincludethedevelopmentoftechnical,physical,administrative,andmanagementstandardsandguidelinesforthecost-effectivesecurityandprivacyofsensitiveunclassifiedinformatio
6、ninfederalcomputersystems.TheSpecialPublication800-seriesreportsonITL’sresearch,guidance,andoutreacheffortsincomputersecurity,anditscollaborativeactivitieswithindustry,government,andacademicorganizations.NationalInstituteofStandardsandTechnologySpecialPublication800-30
7、Natl.Inst.Stand.Technol.Spec.Publ.800-30,54pages(July2002)CODEN:NSPUE2Certaincommercialentities,equipment,ormaterialsmaybeidentifiedinthisdocumentinordertodescribeanexperimentalprocedureorconceptadequately.Suchidentificationisnotintendedtoimplyrecommendationorendorseme
8、ntbytheNationalInstituteofStandardsandTechnology,norisitintendedtoimplythattheentities,materials,orequipmentarenecess