Articoli correlati a The Definitive Guide to the C&a Transformation...

The Definitive Guide to the C&a Transformation Process: The First Publication of a Comprehensive View of the C&a Transformation - Brossura

Mehan, Julie; Krush, Waylon

 
9781849280068: The Definitive Guide to the C&a Transformation Process: The First Publication of a Comprehensive View of the C&a Transformation

Sinossi

Provides an authoritative guide to authorization for persons with knowledge of information systems and/or information systems security, but not necessarily the same level of expertise with certification and accreditation standards and best practices; it points to references for further knowledge. It’s scoped to present the information needed to meaningfully recognize, implement, and manage authorization requirements and achieve compliance with federal, local and agency laws and policies.

Le informazioni nella sezione "Riassunto" possono far riferimento a edizioni diverse di questo titolo.

Informazioni sull'autore

Dr Julie Mehan is a Principal Analyst for a strategic consulting firm in the State of Virginia. She has been a career Government Service employee, a strategic consultant, and an entrepreneur.

Waylon Krush is currently the Chief Executive Officer (CEO) of Lunarline, Inc, a successful privately held information security (IS)/information assurance (IA) company that provides secure solutions for the federal government, Department of Defense (DOD), Intelligence Community (IC), and Fortune 500 companies worldwide. Mr Krush provides subject matter expertise in identification and authentication (I&A), encryption, secure system design, software assurance, medical device, embedded/wireless device security, and certification and accreditation (C&A) for the Department of Transportation (DOT), DOD and commercial companies.

Dalla quarta di copertina

War is always a product of its age; and information systems are one of the primary drivers of war in the age of information. The tools and tactics used to fight the information war have evolved with advances in technology. So, it is no wonder that the tools and tactics needed to defend critical information systems must also evolve.

One of the tools in the defense toolkit is the process known as Certification and Accreditation (C&A) or authorization. C&A can be an extremely effective risk-based process in ensuring the implementation of the measures necessary to protect devices, systems and networks.

The Definitive Guide to the C&A Transformation provides an authoritative guide to authorization for persons with knowledge of information systems and/or information systems security, but not necessarily the same level of expertise with certification and accreditation (C&A) standards and best practices; it points to references for further knowledge. It is scoped to present the information needed to meaningfully recognize, implement, and manage authorization requirements and achieve compliance with federal, local and agency laws and policies.

Each chapter provides a list of related references, as well as recommendations for additional reading. Each section refers to relevant templates and references that are included in a usable format on the accompanying CD.

The book, together with the CD, provides a useful authorization-process hands-on reference for security practitioners, system administrators, managers, standards developers, evaluators, testers, and those just wanting to be knowledgeable about the establishment and sustainment of a secure information environment.

For over three decades, the authors of this book have been deeply involved in developing C&A policy and, even more importantly, in actually providing hands-on help to organizations, ranging from large federal agencies to commercial entities, to successfully navigate the C&A process.

Le informazioni nella sezione "Su questo libro" possono far riferimento a edizioni diverse di questo titolo.