Excerpt Details
...Excerpt: This ITL Bulletin describes risk management methodology and how to integrate it into an information technology (IT) security program. This means effectively integrating it into an organization?s systems development life cycle (SDLC). Key to implementation of a successful enterprise-wid...

Excerpt Details
...Introduction: To assist federal agencies with effectively integrating security into the capital planning and investment control (CPIC) process, NIST?s Information Technology Laboratory has released Special Publication (SP) 800-65, Integrati...

Excerpt Details
...Executive Summary: Traditionally, information technology (IT) security and capital planning and investment control (CPIC) processes have been performed independently by security an...

Table of Contents Details
...TABLE OF CONTENTS Executive Summary..............................................................................................................ES-1 1. Introduction....................................

Excerpt Details
...Executive Summary: Some federal agencies, in addition to being subject to the Federal Information Security Management Act of 2002 (FISMA), are also subject to similar requirements ...

Table of Contents Details
... CONTENTS TABLE OF CONTENTS..............................................................................................................iv Executive Summary...................................................................................................................vi 1. Introduction.................................