Government Technology

Best-Practice Policies Allow Government To Meet Security Requirements


You May Also Like

June 5, 2006 By

Application Security Inc.announces best-practice policies to help government organizations meet the stringent requirements of the Federal Information Security Management Act (FISMA) and the U.S. Department of Defense (DoD) Information Technology Security Certification and Accreditation Process (DITSCAP). AppSecInc made the announcement from the The Gartner IT Security Summit, taking place June 5-7 at the Marriott Wardman Park Hotel in Washington, D.C.

These requirements are at least in part a response to the ongoing security breach epidemic -- since February 2005, more than 83 million Americans have had their personal information compromised. Whether the result of human error, insider espionage, or external attacks, no sector has been spared by these breaches, including government agencies. And for government organizations, the impact of these compromises ranges from the disruption of operations, to embarrassing disclosures, to national security risks.

In response to this epidemic, the Defense Information Service Agency (DISA) recently established a new set of security guidelines specific to databases. The Database Security Technical Implementation Guide (STIG) identifies known security vulnerabilities, configuration items, and other issues which must be addressed under the authority of DoD. For instance, Directive 8500.1 mandates that "all information assurance (IA) and IA-enabled IT products incorporated into DoD information systems shall be configured in accordance with DoD approved security configuration guidelines."
Reporting tied to the policy template makes it easy for government organizations to generate the required documentation as needed.

You may use or reference this story with attribution and a link to
http://www.govtech.com/security/-Best-Practice-Policies-Allow-Government-To.html


| More

Comments


Add Your Comment

You are solely responsible for the content of your comments. We reserve the right to remove comments that are considered profane, vulgar, obscene, factually inaccurate, off-topic, or considered a personal attack.

GovTech Papers and Case Studies View Library


Sponsored Links



Phone RSS

Government Best Practices

» A New Model for Human Resources
» Abandoning the High Cost of Enterprise Content Management



Government Technology
Public CIO
Emergency Management
Digital Communities