Volume II: Appendices to Guide for Mapping Types of Information and Information Systems to Security Categories. Revision 1

摘要

Title III of the E-Government Act (Public Law 107-347), titled the Federal Information Security Management Act (FISMA), tasked the National Institute of Standards and Technology (NIST) to develop: Standards to be used by all Federal agencies to categorize all information and information systems collected or maintained by or on behalf of each agency based on the objectives of providing appropriate levels of information security according to a range of risk levels; Guidelines recommending the types of information and information systems to be included in each such category; and Minimum information security requirements (i.e., management, operational, and technical security controls), for information and information systems in each such category.