Guide to General Server Security

Scarfone, Karen; Jansen, Wayne; Tracy, Miles

doi:https://doi.org/10.6028/NIST.SP.800-123

SP 800-123

Guide to General Server Security

Documentation Topics

Date Published: July 2008

Author(s)

Karen Scarfone (NIST), Wayne Jansen (NIST), Miles Tracy (Federal Reserve Information Technology)

Abstract

The purpose of this document is to assist organizations in understanding the fundamental activities performed as part of securing and maintaining the security of servers that provide services over network communications as a main function. The document discusses the need to secure servers and provides recommendations for selecting, implementing, and maintaining the necessary security controls.

Keywords

Host security; server security

Control Families

Access Control; Audit and Accountability; Configuration Management; Identification and Authentication; Incident Response; Maintenance; Physical and Environmental Protection; Planning; System and Communications Protection; System and Information Integrity

Documentation

Publication:
SP 800-123 (DOI)
Local Download

Supplemental Material:
SP 800-123 (EPUB) (txt)

Document History:
07/25/08: SP 800-123 (Final)

Topics

Security and Privacy
general security & privacy; maintenance; planning

Technologies
servers

Laws and Regulations
OMB Circular A-130