Guide to Bluetooth Security

Guide to Bluetooth Security
Author: Karen Scarfone
Publisher: DIANE Publishing
Total Pages: 43
Release: 2009-05
Genre: Computers
ISBN: 1437913490

This document provides info. to organizations on the security capabilities of Bluetooth and provide recommendations to organizations employing Bluetooth technologies on securing them effectively. It discusses Bluetooth technologies and security capabilities in technical detail. This document assumes that the readers have at least some operating system, wireless networking, and security knowledge. Because of the constantly changing nature of the wireless security industry and the threats and vulnerabilities to the technologies, readers are strongly encouraged to take advantage of other resources (including those listed in this document) for more current and detailed information. Illustrations.

Glossary of Key Information Security Terms

Glossary of Key Information Security Terms
Author: Richard Kissel
Publisher: DIANE Publishing
Total Pages: 211
Release: 2011-05
Genre: Computers
ISBN: 1437980090

This glossary provides a central resource of definitions most commonly used in Nat. Institute of Standards and Technology (NIST) information security publications and in the Committee for National Security Systems (CNSS) information assurance publications. Each entry in the glossary points to one or more source NIST publications, and/or CNSSI-4009, and/or supplemental sources where appropriate. This is a print on demand edition of an important, hard-to-find publication.

Federal Information System Controls Audit Manual (FISCAM)

Federal Information System Controls Audit Manual (FISCAM)
Author: Robert F. Dacey
Publisher: DIANE Publishing
Total Pages: 601
Release: 2010-11
Genre: Business & Economics
ISBN: 1437914063

FISCAM presents a methodology for performing info. system (IS) control audits of governmental entities in accordance with professional standards. FISCAM is designed to be used on financial and performance audits and attestation engagements. The methodology in the FISCAM incorp. the following: (1) A top-down, risk-based approach that considers materiality and significance in determining audit procedures; (2) Evaluation of entitywide controls and their effect on audit risk; (3) Evaluation of general controls and their pervasive impact on bus. process controls; (4) Evaluation of security mgmt. at all levels; (5) Control hierarchy to evaluate IS control weaknesses; (6) Groupings of control categories consistent with the nature of the risk. Illus.

FISMA Compliance Handbook

FISMA Compliance Handbook
Author: Laura P. Taylor
Publisher: Newnes
Total Pages: 380
Release: 2013-08-20
Genre: Computers
ISBN: 0124059155

This comprehensive book instructs IT managers to adhere to federally mandated compliance requirements. FISMA Compliance Handbook Second Edition explains what the requirements are for FISMA compliance and why FISMA compliance is mandated by federal law. The evolution of Certification and Accreditation is discussed. This book walks the reader through the entire FISMA compliance process and includes guidance on how to manage a FISMA compliance project from start to finish. The book has chapters for all FISMA compliance deliverables and includes information on how to conduct a FISMA compliant security assessment. Various topics discussed in this book include the NIST Risk Management Framework, how to characterize the sensitivity level of your system, contingency plan, system security plan development, security awareness training, privacy impact assessments, security assessments and more. Readers will learn how to obtain an Authority to Operate for an information system and what actions to take in regards to vulnerabilities and audit findings. FISMA Compliance Handbook Second Edition, also includes all-new coverage of federal cloud computing compliance from author Laura Taylor, the federal government's technical lead for FedRAMP, the government program used to assess and authorize cloud products and services. - Includes new information on cloud computing compliance from Laura Taylor, the federal government's technical lead for FedRAMP - Includes coverage for both corporate and government IT managers - Learn how to prepare for, perform, and document FISMA compliance projects - This book is used by various colleges and universities in information security and MBA curriculums

Effective Cybersecurity

Effective Cybersecurity
Author: William Stallings
Publisher: Addison-Wesley Professional
Total Pages: 1081
Release: 2018-07-20
Genre: Computers
ISBN: 0134772954

The Practical, Comprehensive Guide to Applying Cybersecurity Best Practices and Standards in Real Environments In Effective Cybersecurity, William Stallings introduces the technology, operational procedures, and management practices needed for successful cybersecurity. Stallings makes extensive use of standards and best practices documents that are often used to guide or mandate cybersecurity implementation. Going beyond these, he offers in-depth tutorials on the “how” of implementation, integrated into a unified framework and realistic plan of action. Each chapter contains a clear technical overview, as well as a detailed discussion of action items and appropriate policies. Stallings offers many pedagogical features designed to help readers master the material: clear learning objectives, keyword lists, review questions, and QR codes linking to relevant standards documents and web resources. Effective Cybersecurity aligns with the comprehensive Information Security Forum document “The Standard of Good Practice for Information Security,” extending ISF’s work with extensive insights from ISO, NIST, COBIT, other official standards and guidelines, and modern professional, academic, and industry literature. • Understand the cybersecurity discipline and the role of standards and best practices • Define security governance, assess risks, and manage strategy and tactics • Safeguard information and privacy, and ensure GDPR compliance • Harden systems across the system development life cycle (SDLC) • Protect servers, virtualized systems, and storage • Secure networks and electronic communications, from email to VoIP • Apply the most appropriate methods for user authentication • Mitigate security risks in supply chains and cloud environments This knowledge is indispensable to every cybersecurity professional. Stallings presents it systematically and coherently, making it practical and actionable.

Framework for Designing Cryptographic Key Management Systems

Framework for Designing Cryptographic Key Management Systems
Author: Elaine Barker
Publisher: DIANE Publishing
Total Pages: 88
Release: 2011-05
Genre: Computers
ISBN: 1437980082

This Framework was initiated as a part of the NIST Cryptographic Key Management Workshop. The goal was to define and develop technologies and standards that provide cost-effective security to cryptographic keys that themselves are used to protect computing and information processing applications. A Framework is a description of the components (i.e., building blocks) that can be combined or used in various ways to create a ¿system¿ (e.g., a group of objects working together to perform a vital function). This Framework identifies and discusses the components of a cryptographic key management system (CKMS) and provides requirements for CKMS design specifications conforming to this Framework. Glossary of terms. Illus. A print on demand pub.

An Introduction to Computer Security

An Introduction to Computer Security
Author: Barbara Guttman
Publisher: DIANE Publishing
Total Pages: 289
Release: 1995
Genre: Computer networks
ISBN: 0788128302

Covers: elements of computer security; roles and responsibilities; common threats; computer security policy; computer security program and risk management; security and planning in the computer system life cycle; assurance; personnel/user issues; preparing for contingencies and disasters; computer security incident handling; awareness, training, and education; physical and environmental security; identification and authentication; logical access control; audit trails; cryptography; and assessing and mitigating the risks to a hypothetical computer system.

Contingency Planning Guide for Information Technology Systems: Recommendations of the National Institute of Standards and Technology

Contingency Planning Guide for Information Technology Systems: Recommendations of the National Institute of Standards and Technology
Author:
Publisher:
Total Pages: 108
Release: 2002
Genre:
ISBN:

NIST Special Publication 800-34, Contingency Planning Guide for Information Technology (IT) Systems provides instructions, recommendations, and considerations for government IT contingency planning. Contingency planning refers to interim measures to recover IT services following an emergency of System disruption. Interim measures may include the relocation of IT systems sod operators to an alternate site, the recovery of IT functions using alternate equipment, or the performance of IT functions using manual methods.

Security Controls Evaluation, Testing, and Assessment Handbook

Security Controls Evaluation, Testing, and Assessment Handbook
Author: Leighton Johnson
Publisher: Academic Press
Total Pages: 790
Release: 2019-11-21
Genre: Computers
ISBN: 0128206241

Security Controls Evaluation, Testing, and Assessment Handbook, Second Edition, provides a current and well-developed approach to evaluate and test IT security controls to prove they are functioning correctly. This handbook discusses the world of threats and potential breach actions surrounding all industries and systems. Sections cover how to take FISMA, NIST Guidance, and DOD actions, while also providing a detailed, hands-on guide to performing assessment events for information security professionals in US federal agencies. This handbook uses the DOD Knowledge Service and the NIST Families assessment guides as the basis for needs assessment, requirements and evaluation efforts. - Provides direction on how to use SP800-53A, SP800-115, DOD Knowledge Service, and the NIST Families assessment guides to implement thorough evaluation efforts - Shows readers how to implement proper evaluation, testing, assessment procedures and methodologies, with step-by-step walkthroughs of all key concepts - Presents assessment techniques for each type of control, provides evidence of assessment, and includes proper reporting techniques