Last draft released for security guide

The National Institute of Standards and Technology today released a final draft of security guidelines for federal agencies that need to certify and accredit their information systems.

With May as their target date for publication, NIST officials cited an urgent need to receive comments on the final draft document by April 21.

The proposed guidelines are relevant to security requirements that all federal agencies must meet under the Federal Information Security Management Act of 2002.

NIST officials incorporated several significant changes in the final draft based on earlier comments they received. Among them are newly defined roles for the chief information officer and senior agency information security officer in the certification and accreditation process.

Also new are additional guidelines for low-impact information systems, a revised timetable for interim approval to operate information systems, and a summary table of tasks and subtasks for security certification and accreditation.

Comments on Special Publication 800-37, Guide for the Security Certification and Accreditation of Federal Information Systems, can be sent to sec-cert@nist.gov.

Featured

  • Defense
    Ryan D. McCarthy being sworn in as Army Secretary Oct. 10, 2019. (Photo credit: Sgt. Dana Clarke/U.S. Army)

    Army wants to spend nearly $1B on cloud, data by 2025

    Army Secretary Ryan McCarthy said lack of funding or a potential delay in the JEDI cloud bid "strikes to the heart of our concern."

  • Congress
    Rep. Jim Langevin (D-R.I.) at the Hack the Capitol conference Sept. 20, 2018

    Jim Langevin's view from the Hill

    As chairman of of the Intelligence and Emerging Threats and Capabilities subcommittee of the House Armed Services Committe and a member of the House Homeland Security Committee, Rhode Island Democrat Jim Langevin is one of the most influential voices on cybersecurity in Congress.

Stay Connected

FCW INSIDER

Sign up for our newsletter.

I agree to this site's Privacy Policy.