The National Institute of Standards and Technology's Computer Security Division today released the draft of a new Federal Information Processing Standard, FIPS 199, which dictates how agencies should categorize their systems based on the security risk faced by each. . .. The National Institute of Standards and Technology's Computer Security Division today released the draft of a new Federal Information Processing Standard, FIPS 199, which dictates how agencies should categorize their systems based on the security risk faced by each . The standard is the first step in several requirements generated by NIST under the Federal Information Security Management Act (FISMA) of 2002, all aimed at setting minimum security requirements for all government systems not related to national security. The draft outlines three categories of risk, which are based on the potential impact of a breach in three areas: the confidentiality, integrity and availability of the information in the system. The link for this article located at FCW is no longer available. . The NIST Computer Security Division has unveiled a draft FIPS 199 version, classifying systems by security risks influencing regulatory frameworks. NIST FIPS 199,Risk Governance,Systems Security,Data Classification. . Anthony Pell
Get the latest Linux and open source security news straight to your inbox.