Guidelines for Contingency Planning NASA (National Aeronautics and Space Administration) ADP Security Risk Reduction Decision Studies

摘要

This report presents guidance to NASA Computer Security Officials for determining the acceptability or unacceptability of ADP security risks based on the technical, operational and economic feasibility of potential safeguards. The report also views the risk management process as a specialized application of the systems approach to problem solving and information systems analysis and design. Guidance is presented on reporting the results of the risk reduction analysis to management. Report formats for the risk reduction study are provided.