An Introduction to Computer Security: the NIST Handbook

Guttman, Barbara; Roback, Edward

doi:https://doi.org/10.6028/NIST.SP.800-12

SP 800-12

Withdrawn on June 22, 2017. Superseded by SP 800-12 Rev. 1

An Introduction to Computer Security: the NIST Handbook

Documentation Topics

Date Published: October 1995

Author(s)

Barbara Guttman (NIST), Edward Roback (NIST)

Abstract

This handbook provides assistance in securing computer-based resources (including hardware, software, and information) by explaining important concepts, cost considerations, and interrelationships of security controls. It illustrates the benefits of security controls, the major techniques or approaches for each control, and important related considerations. The handbook provides a broad overview of computer security to help readers understand their computer security needs and develop a sound approach to the selection of appropriate security controls. It does not describe detailed steps necessary to implement a computer security program, provide detailed implementation procedures for security controls, or give guidance for auditing the security of specific systems.

Keywords

Computer security; guidance; IT security; security controls

Control Families

Access Control; Audit and Accountability; Awareness and Training; Assessment, Authorization and Monitoring; Configuration Management; Contingency Planning; Identification and Authentication; Incident Response; Maintenance; Media Protection; Personnel Security; Physical and Environmental Protection; Planning; Risk Assessment; System and Communications Protection; System and Information Integrity; System and Services Acquisition

Documentation

Publication:
SP 800-12 (DOI)
Local Download

Supplemental Material:
None available

Document History:
10/02/95: SP 800-12

Topics

Security and Privacy
general security & privacy

Laws and Regulations
OMB Circular A-130