Federal agencies pursue cybersecurity common ground
InformationWeek
The National Institute of Standards and Technology's recently released recommendations for cybersecurity are the first step in a plan to create a common security framework for civilian, military, and intelligence agencies. The 237-page final version of NIST's Special Publication 800-53, "Recommended Security Controls for Federal Information Systems and Organizations," was released earlier this month. In parallel with that, NIST has been working with defense and intelligence agencies on certification and accreditation, enterprise-wide risk management, procedures to assess cybersecurity controls, and risk assessment. Documents addressing those areas are due over the next few months.