NIST issues performance metrics draft

"Recommended Security Controls for Federal Information Systems"

The National Institute of Standards and Technology’s Computer Security Division has released the initial draft for Special Publication 800-80, which involves developing metrics for information security programs.

Called the “Guide for Developing Performance Metrics for Information Security,” it links information security performance with overall agency performance. The metrics would allow agencies to measure vulnerabilities and strengths in their information security.

The 43-page draft covers 17 security controls that SP 800-53 recommended for agencies to use to protect their information systems. To facilitate implantation of performance metrics, SP 800-80 also includes templates, one for each of the security control families in SP 800-53.

Public comments on the draft can be submitted via e-mail to [email protected] until June 19.

Featured

  • Budget
    Stock photo ID: 134176955 By Richard Cavalleri

    House passes stopgap spending bill

    The current appropriations bills are set to expire on Oct. 1; the bill now goes to the Senate where it is expected to pass.

  • Defense
    concept image of radio communication (DARPA)

    What to look for in DOD's coming spectrum strategy

    Interoperability, integration and JADC2 are likely to figure into an updated electromagnetic spectrum strategy expected soon from the Department of Defense.

Stay Connected