Security guidelines need a makeover

Say what you mean! If my experience can be extrapolated to the larger community of security professionals, then I would say the connotations of words and lack of clear thinking are large impediments to attacking security issues.

What is risk? What is risk management? Is it different from secure systems management? What are the elements of risk? What is security? What is assurance?

These are a few questions that arise from a comparative reading of the Defense Information Technology Security Certification and Accreditation Process, Defense Information Assurance Certification and Accreditation Process, Director of Central Intelligence Directive 6/3 and National Institute of Standards and Technology Special Publication 800-37.

It seems likely that the first three of those documents would be as useful as the NIST document if the authors were clearer thinkers and better writers. Fundamental policy and procedure documents need careful, thoughtful and skilled authors so that the users of those documents have clear directions.

Anonymous
SAIC

Featured

  • FCW Perspectives
    human machine interface

    Your agency isn’t ready for AI

    To truly take advantage, government must retool both its data and its infrastructure.

  • Cybersecurity
    secure network (bluebay/Shutterstock.com)

    Federal CISO floats potential for new supply chain regs

    The federal government's top IT security chief and canvassed industry for feedback on how to shape new rules of the road for federal acquisition and procurement.

  • People
    DHS Secretary Kirstjen Nielsen, shown here at her Nov. 8, 2017, confirmation hearing. DHS Photo by Jetta Disco

    DHS chief Nielsen resigns

    Kirstjen Nielsen, the first Homeland Security secretary with a background in cybersecurity, is being replaced on an acting basis by the Customs and Border Protection chief. Her last day is April 10.

Stay Connected

FCW INSIDER

Sign up for our newsletter.

I agree to this site's Privacy Policy.