"NIST IT Security Guidance - An Emerging Family:  How Do They Relate?"

The first phase of the FISMA Implementation Project focuses on the development of a suite of security standards and guidelines required by the legislation as well as other FISMA-related publications necessary to create a robust information security program and effectively manage risk to agency operations and agency assets. The suite of publications which will be discussed in this session include:

• FIPS Publication 199, Standards for Security Categorization of Federal Information and Information Systems

• NIST Special Publication 800-60, Guide for Mapping Types of Information and Information Systems to Security Categories

• NIST Special Publication 800-53, Recommended Security Controls for Federal Information Systems (Draft)

• NIST Special Publication 800-53A, Guide for Assessing the Security Controls in Federal Information Systems

• NIST Special Publication 800-37, Guide for the Security Certification and Accreditation of Federal Information Systems

• FIPS Publication 200, Security Controls for Federal Information Systems