Posts RSS
Subscribe via Email
Special Publication 800-53 Revision 3 Workshop
Posted September 1st, 2009 by rybolov
My friends at Potomac Forum are having a workshop on SP 800-53 R3 on the 15th of September. This is an update to the Government’s catalog of controls.
The workshop will also be about standards convergence: how ODNI, DoD, and NIST are moving towards one standard and what this means for the intelligence community and military.
Ron Ross from NIST will talk about how the NIST Risk Management Framework is changing from a static, controls-based approach to a more dynamic “real-time continuous monitoring”.
Similar Posts:
Posted in NIST | 
2 Comments »
Tags: 800-39 • 800-53 • C&A • catalogofcontrols • compliance • fisma • government • infosec • management • NIST • seminar
September 1st, 2009 at 2:36 pm
While you are there please ask:
Can NIST produce and host a version of the 800-53 document as HTML with anchor tags for each paragraph? As we move to SCAP, it would be nice to have references take users of scanners go directly to a version of the document and to the guidance for a specific rule. PDFs are great for printing, but users should not have to search when the reference calls out a specific paragraph or sub section.
Will convergence with ISO/IEC 27002-2005 be discussed? Is there a timeline for convergence there? This is not of great importance, but folks going through C&As like doing it once if possible.
Will the FDCC SCAP stream be changed to have multiple profiles for low, medium and high impact information systems the way 800-53 rev3 does? I realize this goes directly against the one configuration for all mandate, but the guidance seems to recommend that solution.
Since DoD will be represented, will the DISA developed CCIs be discussed? These would be great anchor labels!
Thanks!
February 10th, 2010 at 7:30 am
[…] Special Publication 800-53 Revision 3 Workshop – guerilla-ciso.com Ron Ross from NIST will talk about how the NIST Risk Management Framework is changing to a more dynamic “real-time continuous monitoring”. […]