Government Documents, Laws, Testimonies or Reports
Standards for Security Categorization of Federal Information and Information Systems (FIPS-199)
| Title: | Standards for Security Categorization of Federal Information and Information Systems (FIPS-199) (ID: CSD5355) | | Source: | National Institute of Standards and Technology | | Origin: | Contributed by Organizations or Campuses (02/18/2004) | | Type: | Government Documents, Laws, Testimonies or Reports | | Abstract: | The E-Government Act of 2002 (Public Law 107-347), recognized the importance of information security to the economic and national security interests of the United States. Title III of the E-Government Act, entitled the Federal Information Security Management Act of 2002 (FISMA), tasked NIST with responsibilities for standards and guidelines, including the development of: - Standards to be used by all federal agencies to categorize all information and information systems collected or maintained by or on behalf of each agency based on the objectives of providing appropriate levels of information security according to a range of risk levels; - Guidelines recommending the types of information and information systems to be included in each category; and - Minimum information security requirements (i.e., management, operational, and technical controls), for information and information systems in each such category. | | View this resource: | |
JSTOR Amicus Brief
| Title: | JSTOR Amicus Brief (ID: CSD5225) | | Source: | JSTOR | | Origin: | Contributed by the EDUCAUSE Policy Office (10/18/2007) | | Type: | Government Documents, Laws, Testimonies or Reports | | Abstract: | EDUCAUSE joined a broad coalition in filing an amicus, or friend of the court, brief on behalf of the National Geographic Society which seeks permission to reproduce a print collective work in electronic format. At issue is ensuring the availability, preservation and dissemination of prior research which is essential for scholarly advancement. Oral arguments are expected to take place in the Eleventh Circuit Court during the week of February 25th, 2008, with a decision rendered at some point thereafter. | | View this resource: | |
The School Safety and Law Enforcement Improvement Act of 2007
| Title: | The School Safety and Law Enforcement Improvement Act of 2007 (ID: CSD5198) | | Source: | IACLEA | | Origin: | Contributed by Organizations or Campuses (10/16/2007) | | Type: | Government Documents, Laws, Testimonies or Reports | | Abstract: | Recently in response to the tragedy at Virginia Tech, Chairman Patrick Leahy of the Senate Judiciary Committee has combined several pre-existing bills into a comprehensive package that would provide for improvements in school safety and law enforcement. This legislation was approved by Committee and is waiting for full consideration by the Senate. This bill, The School Safety and Law Enforcement Improvement Act of 2007 (SSLEIA), would establish a National Center for Campus Public Safety to foster collaboration among campus safety stakeholders by serving as a focal point for research, model policies and best practices, education, and public policy formulation to enhance the safety and security of U.S. college and university campuses. And it would also establish a $50 million grant program for institutions of higher education to use for their campus public safety offices, in a 50-50 match | | View this resource: | |
Information Technology (IT) Security Essential Body of Knowledge (EBK): A Competency and Functional Framework for IT Security Workforce Development
| Title: | Information Technology (IT) Security Essential Body of Knowledge (EBK): A Competency and Functional Framework for IT Security Workforce Development (ID: CSD5182) | | Origin: | Contributed by Organizations or Campuses (10/03/2007) | | Type: | Government Documents, Laws, Testimonies or Reports | | Abstract: | This federal register notice informs the public and interested stakeholders that the Department of Homeland Security (DHS) is making available for public review and comment ``Information Technology (IT) Security Essential Body of Knowledge (EBK): A Competency and Functional Framework for IT Security Workforce Development.'' This framework is intended to assist the public, private, and academic sectors with strategic IT security workforce development initiatives including professional development, training and education. The EBK is not an additional set of DHS guidelines, and it is not intended to represent a standard, directive, or policy by DHS. Instead, it further clarifies key IT security terms and concepts for well-defined competencies, identifies notional security roles, defines four primary functional perspectives, and establishes an IT Security Role, Competency, and Functional Matrix. | | View this resource: | |
Security Metrics Guide for Information Technology Systems
| Title: | Security Metrics Guide for Information Technology Systems (ID: CSD5070) | | Author(s): | Joan Hash (National Institute of Standards and Technology), John Sabato (National Institute of Standards and Technology), Laurie Graffo (National Institute of Standards and Technology), Marianne Swanson (National Institute of Standards and Technology), and Nadya Bartol (National Institute of Standards and Technology) | | Origin: | Contributed by Organizations or Campuses (07/23/2003) | | Type: | Government Documents, Laws, Testimonies or Reports | | Abstract: | This document provides guidance on how an organization, through the use of metrics, identifies the adequacy of in-place security controls, policies, and procedures. It provides an approach to help management decide where to invest in additional security protection resources or identify and evaluate nonproductive controls. It explains the metric development and implementation process and how it can also be used to adequately justify security control investments. The results of an effective metric program can provide useful data for directing the allocation of information security resources and should simplify the preparation of performance-related reports.
| | View this resource: | |
|