The Experts below are selected from a list of 2403 Experts worldwide ranked by ideXlab platform

Mark Wilson - One of the best experts on this subject based on the ideXlab platform.

  • Information Security Handbook: A Guide for Managers - Recommendations of the National Institute of Standards and Technology
    2012
    Co-Authors: Pauline Bowen, Joan Hash, Mark Wilson
    Abstract:

    This Information Security Handbook provides a broad overview of information security program elements to assist managers in understanding how to establish and implement an information security program. Typically, the organization looks to the program for overall responsibility to ensure the selection and implementation of appropriate security controls and to demonstrate the effectiveness of satisfying their stated security requirements. The topics within this document were selected based on the laws and regulations relevant to information security, including the Clinger-Cohen Act of 1996, the Federal Information Security Management Act (FISMA) of 2002, and Office of Management and Budget (OMB) Circular A-130. The material in this handbook can be referenced for general information on a particular topic or can be used in the decision-making process for developing an information security program. The purpose of this publication is to inform members of the information security management team about various aspects of information security that they will be expected to implement and oversee in their respective organizations. In addition, the handbook provides guidance for facilitating a more consistent approach to information security programs across the federal government. Even though the terminology in this document is geared toward the federal sector, the handbook can also be used to provide guidance on a variety of other governmental, organizational, or institutional security requirements. The intended audience includes agency heads, CIOs, SAISOs (also commonly referred to as CISOs), and security managers. The handbook provides information that the audience can use in building their information security program strategy. While there are differences between federal and private sector environments, especially in terms of priorities and legal requirements, the underlying principles of information security are the same. The handbook is therefore useful to any manager who requires a broad overview of information security prActices.

  • SP 800-100. Information Security Handbook: A Guide for Managers
    2006
    Co-Authors: Pauline Bowen, Joan Hash, Mark Wilson
    Abstract:

    This Information Security Handbook provides a broad overview of information security program elements to assist managers in understanding how to establish and implement an information security program. Typically, the organization looks to the program for overall responsibility to ensure the selection and implementation of appropriate security controls and to demonstrate the effectiveness of satisfying their stated security requirements. The topics within this document were selected based on the laws and regulations relevant to information security, including the Clinger-Cohen Act of 1996, the Federal Information Security Management Act (FISMA) of 2002, and Office of Management and Budget (OMB) Circular A-130. The material in this handbook can be referenced for general information on a particular topic or can be used in the decision making process for developing an information security program. National Institute of Standards and Technology (NIST) Interagency Report (IR) 7298, Glossary of Key Information Security Terms, provides a summary glossary for the basic security terms used throughout this document. While reading this handbook, please consider that the guidance is not specific to a particular agency. Agencies should tailor this guidance according to their security posture and business requirements.

Pauline Bowen - One of the best experts on this subject based on the ideXlab platform.

  • Information Security Handbook: A Guide for Managers - Recommendations of the National Institute of Standards and Technology
    2012
    Co-Authors: Pauline Bowen, Joan Hash, Mark Wilson
    Abstract:

    This Information Security Handbook provides a broad overview of information security program elements to assist managers in understanding how to establish and implement an information security program. Typically, the organization looks to the program for overall responsibility to ensure the selection and implementation of appropriate security controls and to demonstrate the effectiveness of satisfying their stated security requirements. The topics within this document were selected based on the laws and regulations relevant to information security, including the Clinger-Cohen Act of 1996, the Federal Information Security Management Act (FISMA) of 2002, and Office of Management and Budget (OMB) Circular A-130. The material in this handbook can be referenced for general information on a particular topic or can be used in the decision-making process for developing an information security program. The purpose of this publication is to inform members of the information security management team about various aspects of information security that they will be expected to implement and oversee in their respective organizations. In addition, the handbook provides guidance for facilitating a more consistent approach to information security programs across the federal government. Even though the terminology in this document is geared toward the federal sector, the handbook can also be used to provide guidance on a variety of other governmental, organizational, or institutional security requirements. The intended audience includes agency heads, CIOs, SAISOs (also commonly referred to as CISOs), and security managers. The handbook provides information that the audience can use in building their information security program strategy. While there are differences between federal and private sector environments, especially in terms of priorities and legal requirements, the underlying principles of information security are the same. The handbook is therefore useful to any manager who requires a broad overview of information security prActices.

  • SP 800-100. Information Security Handbook: A Guide for Managers
    2006
    Co-Authors: Pauline Bowen, Joan Hash, Mark Wilson
    Abstract:

    This Information Security Handbook provides a broad overview of information security program elements to assist managers in understanding how to establish and implement an information security program. Typically, the organization looks to the program for overall responsibility to ensure the selection and implementation of appropriate security controls and to demonstrate the effectiveness of satisfying their stated security requirements. The topics within this document were selected based on the laws and regulations relevant to information security, including the Clinger-Cohen Act of 1996, the Federal Information Security Management Act (FISMA) of 2002, and Office of Management and Budget (OMB) Circular A-130. The material in this handbook can be referenced for general information on a particular topic or can be used in the decision making process for developing an information security program. National Institute of Standards and Technology (NIST) Interagency Report (IR) 7298, Glossary of Key Information Security Terms, provides a summary glossary for the basic security terms used throughout this document. While reading this handbook, please consider that the guidance is not specific to a particular agency. Agencies should tailor this guidance according to their security posture and business requirements.

Lisa Karen Westerback - One of the best experts on this subject based on the ideXlab platform.

  • Toward best prActices for strategic information technology management
    Government Information Quarterly, 2000
    Co-Authors: Lisa Karen Westerback
    Abstract:

    AbstrAct Federal agencies are under pressure to do more with less—to improve the services they provide to the public, with greater accountability for achieving results, more quickly and at lower cost. In a 1994 study of leading organizations, the General Accounting Office (GAO) identified 11 strategic information management (SIM) prActices, which became the foundation of the Clinger-Cohen Act of 1996. In 1997, the Federal Chief Information Officers (CIO) Council and the Industry Advisory Council prepared 20 case studies demonstrating the use of information technology to achieve a positive return on investment within the federal government. Focusing on these 20 case studies, this research first looked for evidence that supported or refuted each of GAO’s SIM prActices. Second, the research looked for best prActices that may be unique to a federal environment. Third, the study identified other best prActices.

Joan Hash - One of the best experts on this subject based on the ideXlab platform.

  • Information Security Handbook: A Guide for Managers - Recommendations of the National Institute of Standards and Technology
    2012
    Co-Authors: Pauline Bowen, Joan Hash, Mark Wilson
    Abstract:

    This Information Security Handbook provides a broad overview of information security program elements to assist managers in understanding how to establish and implement an information security program. Typically, the organization looks to the program for overall responsibility to ensure the selection and implementation of appropriate security controls and to demonstrate the effectiveness of satisfying their stated security requirements. The topics within this document were selected based on the laws and regulations relevant to information security, including the Clinger-Cohen Act of 1996, the Federal Information Security Management Act (FISMA) of 2002, and Office of Management and Budget (OMB) Circular A-130. The material in this handbook can be referenced for general information on a particular topic or can be used in the decision-making process for developing an information security program. The purpose of this publication is to inform members of the information security management team about various aspects of information security that they will be expected to implement and oversee in their respective organizations. In addition, the handbook provides guidance for facilitating a more consistent approach to information security programs across the federal government. Even though the terminology in this document is geared toward the federal sector, the handbook can also be used to provide guidance on a variety of other governmental, organizational, or institutional security requirements. The intended audience includes agency heads, CIOs, SAISOs (also commonly referred to as CISOs), and security managers. The handbook provides information that the audience can use in building their information security program strategy. While there are differences between federal and private sector environments, especially in terms of priorities and legal requirements, the underlying principles of information security are the same. The handbook is therefore useful to any manager who requires a broad overview of information security prActices.

  • SP 800-100. Information Security Handbook: A Guide for Managers
    2006
    Co-Authors: Pauline Bowen, Joan Hash, Mark Wilson
    Abstract:

    This Information Security Handbook provides a broad overview of information security program elements to assist managers in understanding how to establish and implement an information security program. Typically, the organization looks to the program for overall responsibility to ensure the selection and implementation of appropriate security controls and to demonstrate the effectiveness of satisfying their stated security requirements. The topics within this document were selected based on the laws and regulations relevant to information security, including the Clinger-Cohen Act of 1996, the Federal Information Security Management Act (FISMA) of 2002, and Office of Management and Budget (OMB) Circular A-130. The material in this handbook can be referenced for general information on a particular topic or can be used in the decision making process for developing an information security program. National Institute of Standards and Technology (NIST) Interagency Report (IR) 7298, Glossary of Key Information Security Terms, provides a summary glossary for the basic security terms used throughout this document. While reading this handbook, please consider that the guidance is not specific to a particular agency. Agencies should tailor this guidance according to their security posture and business requirements.

Jeffery W Seifert - One of the best experts on this subject based on the ideXlab platform.

  • Information Technology (IT) Management: The Clinger-Cohen Act and the Homeland Security Act of 2002
    2005
    Co-Authors: Jeffery W Seifert
    Abstract:

    AbstrAct : The role of information technology (IT) figures prominently in the Homeland Security Act of 2002 (P.L. 107-296). Although most of these provisions are primarily focused on external information management (i.e., the department's interActions with other departments and agencies), some internal information management provisions also are included to help address the challenges of absorbing the programs, personnel, and objectives now residing in other agencies. For example, Section 103 addresses an aspect of federal management, the creation of a Chief Information Officer (CIO), which was established for agencies under the Clinger-Cohen Act of 1996. The law also outlines IT management duties for some of the Under Secretaries. Compared in relation to the Clinger-Cohen Act, the information technology management provisions raise some potential oversight issues, including the appointment and reporting requirements of the department-level CIO, overlapping IT management responsibilities between various departmental officials, and possible national security exemptions from Clinger-Cohen requirements. This report will be revised as congressional Action requires.