Date Published: July 2009
Comments Due:
Email Questions to:
Planning Note (03/28/2016):
This draft publication has been retired.
Author(s)
Pauline Bowen (NIST), Richard Kissel (NIST), Matthew Scholl (NIST), Will Robinson, Jessica Stansfield, Lisa Voldish
Announcement
NIST announces that Draft Special Publication (SP) 800-65 Revision 1, Recommendations for Integrating Information Security into the Capital Planning and Investment Control Process (CPIC), has been released for public comment. SP 800-65 is intended to help organizations in integrating information security into their CPIC processes by providing guidance on selecting, managing, and evaluating information security investments and accounting for information security in all IT investments.
The public comment period closed on August 14, 2009.
SP 800-65 is intended to help organizations in integrating information security into their CPIC processes by providing guidance on selecting, managing, and evaluating information security investments and accounting for information security in all IT investments.
SP 800-65 is intended to help organizations in integrating information security into their CPIC processes by providing guidance on selecting, managing, and evaluating information security investments and accounting for information security in all IT investments.
Control Families
Assessment, Authorization and Monitoring; Planning; Program Management; Risk Assessment; System and Services Acquisition
