Two more from NIST

NIST SP 800-27 Revision A

Two new publications from the National Institute of Standards and Technology provide technical help for government agencies and businesses that are required to protect information systems.

One publication offers a starting point for organizations to understand basic information security principles. The other gives technical tips for setting up electronic authentication using guidelines issued by Office of Management and Budget officials.

The first publication, NIST Special Publication 800-27 Revision A, is titled "Engineering Principles for Information Technology Security." The second is NIST SP 800-63, "Electronic Authentication Guideline," which defines technical requirements for identity proofing and registration, identity tokens, authentication protocols and security assertions.