Upgrade to remove ads
Only $35.99/year

FIPS 199 and 200

Terms in this set (14)

Define FIPS
Federal Information Processing Standard Publication
What is FIPS 199
US federal govt standard that establishes security categories of Information Systems used by federal govt
A US federal govt standard that establishes security categories of Information Systems used by federal govt
FIPS 199
Is FIPS 199 a mandatory security standard?
Yes
FIPS 199 and FIPS 200
What 2 mandatory security standards are required by FISMA?
What does FIPS 199 require?
Federal Agencies to assess their systems in the categories of Confidentiality, Integrity, and Availability
How will each of the CIA assessments be rated in FIPS 199?
High Medium or Low
High
If Confidentiality is marked as High, what will the overall security categorization of the information system be?
Define FISMA
Federal Information System Management Act
A mandatory federal standard developed by NIST in response to FISMA
FIPS 200
determine the security category of the IS (FIPS 199)
How does an organization first comply with the FIPS 200 standard?
NIST SP 800-53
What document supports a tailored set of baseline security controls?
determine security category
implement baseline security controls using NIST SP-800-53 as a guide
What 2 things must happen in FIPS 200 in order to be be compliant?
name the 3 baseline control recommendations found in FIPS 200
Access control
Certification, accreditation, and security assessments
Risk assesment
Sets with similar terms