tailieunhanh - Guide for Applying the Risk Management Framework to Federal Information Systems

The Rio+20 United Nations Conference on Sustainable Development marks 20 years since the historic Earth Summit1 that was instrumental in laying the foundations and charting the course for contemporary sustainable development. This report looks at the issues that pertain to the management, development and use of fresh water resources. Its starting point is in the Earth Summit’s Agenda 21 recommendation for an integrated approach to the management of water resources. This report demonstrates that while there is still a long way to go, progress towards the goal of sustainable water resources management is undoubtedly being made | NIST Special Publication 800-37 Revision 1 National Institute of Standards and Technology . Department of Commerce Guide for Applying the Risk Management Framework to Federal Information Systems A Security Life Cycle Approach JOINT TASK FORCE TRANSFORMATION INITIATIVE T Y I N F O R M A T I O N S E C U R I T Y Computer Security Division Information Technology Laboratory National Institute of Standards and Technology Gaithersburg MD 20899-8930 February 2010 of . Department of Commerce Gary Locke Secretary National Institute of Standards and Technology Patrick D. Gallagher Director Special Publication 800-37 Guide for Applying the Risk Management Framework to Federal Information Systems A Security Life Cycle Approach Reports on Computer Systems Technology The Information Technology Laboratory ITL at the National Institute of Standards and Technology NIST promotes the . economy and public welfare by providing technical leadership for the nation s measurement and standards infrastructure. ITL develops tests test methods reference data proof of concept implementations and technical analyses to advance the development and productive use of information technology. ITL s responsibilities include the development of management administrative technical and physical standards and guidelines for the cost-effective security and privacy of other than national security-related information in federal information systems. The Special Publication 800-series reports on ITL s research guidelines and outreach efforts in information system security and its collaborative activities with industry government and academic organizations. PAGE ii Special Publication 800-37 Guide for Applying the Risk Management Framework to Federal Information Systems A Security Life Cycle Approach Authority This publication has been developed by NIST to further its statutory responsibilities under the Federal Information Security Management Act FISMA Public Law . 107-347. NIST is responsible for .