CIO Council's Security Assessment Framework for Federal Agencies

The federal CIO Council last week released the final version of an initial framework designed to let agencies determine where improvements are needed in their security programs. The council's security subcommittee developed the Federal Information Technology Security Assessment Framework to provide . . . The federal CIO Council last week released the final version of an initial framework designed to let agencies determine where improvements are needed in their security programs. The council's security subcommittee developed the Federal Information Technology Security Assessment Framework to provide agencies with a way to measure their systems' security against a five-level assessment. The framework is based on guidance from the Office of Management and Budget, the National Institute of Standards and Technology and the General Accounting Office.

The link for this article located at Federal Computer Week is no longer available.