The Inevitable IT Security Breach
2 Studies Show Why War Logs Leak Wasn't a Surprise…
Government Information Security Articles
NIST Issues Two Reports
 | Eligible |
Guide to Enterprise Telework, Common Configuration Scoring System
June 16, 2009 - Eric Chabrow, Executive Editor, GovInfoSecurity.comThe National Institute of Standards and Technology's Computer Security Division released two documents on Tuesday, a guide to enterprise telework and remote access security and a draft of proposed guidance on testing software security vulnerabilities.
According to NIST:
Special Publication 800-46 Revision 1, Guide to Enterprise Telework and Remote Access Security, is intended to help organizations understand and mitigate the risks associated with the technologies they use for telework. The guide emphasizes the importance of securing sensitive information stored on telework devices and transmitted across external networks, and it also provides recommendations for selecting, implementing, and maintaining the necessary security controls. Draft SP 800-46 Revision 1 is a comprehensive update to the original SP 800-46, which was published in 2002.
NIST Interagency Report 7502, The Common Configuration Scoring System (CCSS): Metrics for Software Security Configuration Vulnerabilities, is available for public comment. This report proposes a specification for CCSS, a set of standardized measures for the severity of software security configuration vulnerabilities. NIST IR 7502 also provides examples of how CCSS measures and scores would be determined. Once CCSS is finalized and its measures for products are available, organizations can use them to help make security decisions based on standardized, quantitative vulnerability data. Comments on the draft can be submitted to IR7502comments@nist.gov with "Comments IR 7502" in the subject line by July 17.
Next Related Article:
Topics of Interest
Messaging
Office of Management and Budget
- FISMA Author on Reform: Former Rep. Tom Davis
- Defining Information Security Metrics: Ron Ross of NIST
Mobile & Wireless
Latest Tweets & Mentions
GovInfoSecurity.com Research
Recent Blog Entries
Vendor Solutions
-
Solutions For:
Anti-Phishing, Authentication, Encryption and Key Management
-
Solutions For:
Compliance, Security Appliance, Vulnerability Assessment
Marketplace
Information Security Media Group - Family of Websites
Banking
Credit Unions
Government
Healthcare
Subscribe
- GovInfoSecurity NewsGet the RSS Feed
- Agency ReleasesGet the RSS Feed
- Latest ArticlesGet the RSS Feed
- WebinarsGet the RSS Feed
- GovInfoSecurity.com BlogGet the RSS Feed