FISMA NEWS

Special Publication 800-39
Managing Information Security Risk: Organization, Mission, and Information System View
(March 2011)

NIST Seeks Input for Planned 2011 Update of Security Control Catalog For Federal Information Systems and Organizations (Special Publication 800-53)
(February 24, 2011)

On-line Course Available: "Applying the Risk Management Framework to Federal Information Systems"
(June 29, 2010
See full announcement on CSRC News page.

Special Publication 800-53 Rev 3 database updated
(June 2010)

NIST Releases Special Publication 800-53A, Revision 1,
Guide for Assessing the Security Controls in Federal Information Systems and Organizations
(June 2010)
See full announcement on CSRC News page.

NIST releases FAQ on Continuous Monitoring
(June 2010)

NIST Special Publication 800-53 Revision 3
Recommended Security Controls for Federal Information Systems and Organizations
updated May 1, 2010 - see errata page for update, see CSRC news for detail
(July 2009)

NIST Special Publication 800-37 Revision 1
Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach
(February 2010)

Initial Public Draft (IPD) of exemplary Assessment Cases for the security control assessment procedures described in Appendix F of SP 800-53A (June 2008), Guide for Assessing the Security Controls in Federal Information Systems
Note: Date added to title to note that the assessment procedures currently posted are for the July 2008 version of 800-53A, <strong>NOT</strong> the recently posted 800-53A Revision 1, June 2010 version.
(August 14, 2008)

DRAFT NIST IR 7328
Security Assessment Provider Requirements and Customer Responsibilities: Building a Security Assessment Credentialing Program for Federal Information Systems
(September 2007)

Presentation from the GCN Webinar on FISMA Implementation

Presentation from the FISMA Security Seminar
   Black and white for printing

Status of NIST Special Publication 800-26

Presentation from the Automated Security Tools Conference
       Black & White for printing

Submit comments and suggestions to:
sec-cert@nist.gov