Guidelines for the Security Certification and Accreditation of Federal Information Technology Systems Initial Public Draft

9780756730154

0756730155

Establishes a standard process, general tasks & specific subtasks to certify & accredit information technology (IT) systems supporting the executive branch of the federal government. It provides a new approach to certification & accreditation (C&A) that uses the standardized process to verify the correctness & effectiveness of security controls employed in an IT system to ensure adequate security is maintained. Chapters: introduction; the fundamentals; security controls & certification levels; & certification & accreditation process. References. Glossary. Acronyms. Sample accreditation letters. Produced by the the Information Technology Lab. at the Nat. Institute of Standards & Technology (NIST).