Guide to Information Technology Security Services. Recommendations of the National Institute of Standards and Technology

摘要

The guide provides assistance with the selection, implementation, and management of Information Technology (IT) security services by guiding organizations through the various phases of the IT security services life cycle. This life cycle provides a framework that enables the IT security decision makers to organize their IT security efforts--from initiation to closeout. The systematic management of the IT security services process is critically important. Failure to consider the many issues involved and to manage the organizational risks can seriously impact the organization. IT security decision makers must think about the costs involved and the underlying security requirements, as well as the potential impact of their decisions on the organizational mission, operations, strategic functions, personnel, and service provider arrangements.