Nguồn ngoài
Using NIST for Security and Risk Assessment
A practical approach for applying NIST Special Publications (SP) guidance to Information (IT) and Operational (OT) technology systems. Methodology includes assessing and evaluating the security of systems containing Confidential but Unclassified Information (CUI).
- Tác giả
- Tom Dover
- Nhà xuất bản
- Butler County Community College
- Nguồn
- LibreTexts
- Giấy phép
- CC BY-NC
- Ngôn ngữ
- EN
Mục lục· 24 mục
- 01: Introduction
- 1.01: The Distributed Challenge of Security and Risk Assessment
- 1.02: Why use NIST
- 1.03: Regulatory and Legal Issues
- 1.04: FISMA
- 1.05: FIPS 199 and 200
- 1.06: Security Assessment Versus Risk Assessment- Whats the Difference
- 02: Security Assessment Using SP.800-171r2 and SP.800-172
- 2.01: Introduction
- 2.02: Process
- 2.03: Methodology
- 2.04: Design
- 2.05: Variables
- 2.06: Using the Assessment Workbook
- 03: Security Assessment using SP.800-213 and SP.800-213A
- 3.01: Introduction
- 3.02: Governance and Oversight
- 3.03: Challenges to Assessing IoT-MIoT
- 3.04: Using NIST SP.800-213A Capabilities for MIoT Security Assessment
- 3.05: Evaluation Process
- 3.06: Methodology - Design and Variables
- 3.07: Using the Assessment Workbook
- 3.08: Advantages and Benefits of Using NIST SP.800-213 and SP.800-213A for MIoT Assessment
- 04: VI. Assessment Workbook Downloads