Association News

NIST releases cybersecurity recommendations for government.

Press Release Summary:

Aug 13, 2009 - NIST has released NIST Special Publication 800-53, Recommended Security Controls for Federal Information Systems and Organizations. According to Ron Ross of NIST's computer security division, final publication represents solidification of partnership between Department of Defense, Intelligence Community, and NIST and their efforts to bring common security solutions to federal government and its support contractors.

National Institute of Standards & Technology - Gaithersburg, MD

Original Press Release

NIST Releases Final Version of New Cybersecurity Recommendations for Government

Press release date: Aug 11, 2009

The National Institute of Standards and Technology (NIST) has released its final version of a publication that represents a major step toward building a unified information security framework for the entire federal government.

The document, NIST Special Publication 800-53, Recommended Security Controls for Federal Information Systems and Organizations, was released in draft form for public review in June.

"This final publication represents a solidification of the partnership between the Department of Defense, the Intelligence Community, and NIST and their efforts to bring common security solutions to the federal government and its support contractors," says Ron Ross, of NIST's computer security division. "The aim is to provide greater protection for federal information systems against cyber attacks."

Comments received from the public since June did not result in any major changes in the final publication, according to Ross.

Historically, information systems at civilian agencies have operated under different security controls than military and intelligence information systems. When complete, the unified framework will result in the defense, intelligence and civil communities using a common strategy to protect critical federal information systems and associated infrastructure.

A copy of the publication is available at www.csrc.nist.gov/publications/PubsSPs.html. For further background, see "NIST, DOD, Intelligence Agencies Join Forces to Secure U.S. Cyber Infrastructure," NIST Tech Beat, June 16, 2009.