NIST issues performance metrics draft

"Recommended Security Controls for Federal Information Systems"

The National Institute of Standards and Technology’s Computer Security Division has released the initial draft for Special Publication 800-80, which involves developing metrics for information security programs.

Called the “Guide for Developing Performance Metrics for Information Security,” it links information security performance with overall agency performance. The metrics would allow agencies to measure vulnerabilities and strengths in their information security.

The 43-page draft covers 17 security controls that SP 800-53 recommended for agencies to use to protect their information systems. To facilitate implantation of performance metrics, SP 800-80 also includes templates, one for each of the security control families in SP 800-53.

Public comments on the draft can be submitted via e-mail to [email protected] until June 19.

Featured

  • CLOUD
    pentagon cloud

    Court orders temporary block on JEDI

    JEDI, the Defense Department’s multi-billion-dollar cloud procurement, is officially on hold, according to a federal court announcement Feb. 13.

  • Defense
    mock-up of the shore-based Aegis Combat Information Center

    Pentagon focuses on research, cyber in 2021 budget request

    The Defense Department wants to significantly increase funds for research, cyber, and cloud.

Stay Connected

FCW INSIDER

Sign up for our newsletter.

I agree to this site's Privacy Policy.