NASA (National Aeronautics and Space Administration) Guidelines for Assuring the Adequacy and Appropriateness of Security Safeguards in Sensitive Applications

摘要

The Office of Management and Budget (OMB) Circular A-71, Transmittal Memorandum No. 1, requires that each agency establish a management control process to assure that appropriate administrative, physical and technical safeguards are incorporated into all new computer applications. In addition to security specifications the management control process should assure that the safeguards are adequate for the application. This document examines the security activities that should be integral to the system development life cycle and the software quality assurance process to assure that adequate and appropriate controls are incorporated into sensitive applications. Security for software packages is also discussed.