Assessing Federal and Commercial Information Security Needs

摘要

The study assesses the current and future information technology (IT) securityneeds of the commercial, civil, and military sectors. The primary objectives were to: determine a basic set of information protection policies and control objectives that pertain to the secure processing needs of organizations within all sectors; and identify protection requirements and technical approaches that are used, desired or sought so they can be considered for future federal standards and guidelines. The findings of the study address the basic security needs of IT product users, including system developers, end users, administrators, and evaluators. Security needs have been identified based on actual existing and well-understood security organizational practices.