A Guide to Procurement of Trusted Systems

A Guide to Procurement of Trusted Systems
Author: Joan Fowler
Publisher: DIANE Publishing
Total Pages: 163
Release: 1994-06
Genre:
ISBN: 0788110241

Designed for new or experienced automated information system developers, purchasers, or program managers who must identify and satisfy requirements associated with security-relevant acquisitions. Explains Contract Data Requirements Lists (CDRLs), and Data Item Description (DIDs), and their use in the acquisitions process. Charts and tables. References, glossary and acronyms.

A Guide to Procurement of Trusted Systems: An Introduction to Procurement Initiators on Computer Security Requirements

A Guide to Procurement of Trusted Systems: An Introduction to Procurement Initiators on Computer Security Requirements
Author:
Publisher:
Total Pages: 140
Release: 1992
Genre:
ISBN:

This document, the first of a four volume set on Trusted Systems Procurement, is a guideline designed for those who must identify and satisfy deliverable data requirements associated with security-relevant acquisitions of trusted, stand-alone systems. It identifies what must be complied with, what must be read, what must be written, and what others must be instructed to write. The detailed acquisition process, coupled with the technical complexity of computers, security, and contracting, represents an unsolvable mystery for many. The goal of this document is to help clarify the complex issues. It applies to AIS developers purchasers, or program managers who deliver systems to customers. It specifically supports acquisition of systems from commercial-off-the-shelf (COTS) products on the Evaluated Products List (EPL). It will help those responsible to develop plans and procedures for acquisition of trusted, stand-alone systems. Specifically, it will help identify security-relevant data to be delivered by a contractor.

A Guide to Procurement of Trusted Systems

A Guide to Procurement of Trusted Systems
Author:
Publisher: DIANE Publishing
Total Pages: 162
Release: 1993
Genre: Computer security
ISBN: 9781568063065

A guideline to help facilitate the acquisition of trusted computer systems in accordance with DoD 5200.28-STD, "Department of Defense Trusted Computer System Evaluation Criteria." Also includes information being developed for certification and accreditation guidance. Addresses the regulations and standards to be satisfied in providing a secure system. Tables.

Official (ISC)2 Guide to the SSCP CBK

Official (ISC)2 Guide to the SSCP CBK
Author: Diana-Lynn Contesti
Publisher: CRC Press
Total Pages: 610
Release: 2007-04-27
Genre: Computers
ISBN: 0203331575

The SSCP certification is the key to unlocking the upper ranks of security implementation at the world's most prestigious organizations. If you're serious about becoming a leading tactician at the front lines, the (ISC) Systems Security Certified Practitioner (SSCP) certification is an absolute necessity-demanded by cutting-edge companies worldwid

National Computer Security Conference, 1993 (16th) Proceedings

National Computer Security Conference, 1993 (16th) Proceedings
Author: DIANE Publishing Company
Publisher: DIANE Publishing
Total Pages: 568
Release: 1995-08
Genre:
ISBN: 9780788119248

Presentations of a conference. Covers a wide range of topics spanning the new draft Federal Criteria for Information Security, research and development activities, techniques for building secure computer systems and networks, and ethics issues. Papers and panels address harmonization of U.S. criteria for information technology security with international criteria, future techniques for integrating commercial off-the-shelf products into secure systems, access control and other networking challenges, etc. Numerous tables and figures.

A Guide to Procurement of Trusted Systems

A Guide to Procurement of Trusted Systems
Author: Melvin L. DeVilbiss
Publisher:
Total Pages: 60
Release: 1998-12-01
Genre:
ISBN: 9780788174490

Will help facilitate the acquisition of trusted computer systems in accordance with DoD Trusted Computer System Evaluation Criteria. Designed for new or experienced automated information system developers, purchasers, or program managers who must identify and satisfy requirements associated with security-relevant acquisitions. Topics addressed include the procurement process, request for proposal, evaluation factors for award, nonmandatory requirements and options, evidence availability, documentation cost, interpreting the TCSEC, standard solicitation language, and descriptions, specifications, and statements of work.

A Guide to Procurement of Trusted Systems: Computer Security Contract Data Requirements List and Data Item Description Tutorial

A Guide to Procurement of Trusted Systems: Computer Security Contract Data Requirements List and Data Item Description Tutorial
Author:
Publisher:
Total Pages: 159
Release: 1994
Genre:
ISBN:

A Guide to Procurement of Trusted Systems: Computer Security Contract Data Requirements List and Data Item Description Tutorial, Volume 3 of 4 in the Procurement Guideline Series, is written to be used by Federal Agencies to help facilitate the definition of computer security deliverables required in the acquisition of trusted products in accordance with DoD 5200.28-STD, Department of Defense Trusted Computer System Evaluation Criteria. It is designed for new or experienced automated information system developers, purchasers, or program managers who must identify and satisfy requirements associated with security-relevant acquisitions. The emphasis of this guideline is on the data requirements for products. Volume 3 specifies the data deliverables to meet security assurance needs by providing guidance on Contract Data Requirements Lists (CDRLs) and their associated Data Item Descriptions (DIDs).

Internet Security Dictionary

Internet Security Dictionary
Author: Vir V. Phoha
Publisher: Springer Science & Business Media
Total Pages: 250
Release: 2007-08-26
Genre: Computers
ISBN: 0387224475

The explosive growth of the Internet has spawned a new era of security concerns. This dictionary provides reliable definitions and descriptions of Internet security terms in clear and precise English. The dictionary covers five main areas: authentication; network- level security; firewall design and implementation, and remote management; Internet security policies, risk analysis, integration across platforms, management and auditing, mobile code security Java/Active X/scripts, and mobile agent code; and security in Internet commerce.

An Introduction to Computer Security

An Introduction to Computer Security
Author: Barbara Guttman
Publisher: DIANE Publishing
Total Pages: 289
Release: 1995
Genre: Computer networks
ISBN: 0788128302

Covers: elements of computer security; roles and responsibilities; common threats; computer security policy; computer security program and risk management; security and planning in the computer system life cycle; assurance; personnel/user issues; preparing for contingencies and disasters; computer security incident handling; awareness, training, and education; physical and environmental security; identification and authentication; logical access control; audit trails; cryptography; and assessing and mitigating the risks to a hypothetical computer system.