Compliance: Difference between revisions

From HORSE - Holistic Operational Readiness Security Evaluation.
Jump to navigation Jump to search
No edit summary
Line 42: Line 42:
[[Information and Communications:|'''Information and Communications''']]<br>
[[Information and Communications:|'''Information and Communications''']]<br>
[[Monitoring:|'''Monitoring''']]<br>
[[Monitoring:|'''Monitoring''']]<br>
==FIPS: Federal Information Processing Standards==
[[FIPS 199:|'''FIPS 199''']]<br>
[[FIPS 200:|'''FIPS 200''']]<br>
==NIST: National Institute of Standards and Technology==
[[NIST SP 800-37:|'''SP 800-37''']]<br>
[[NIST SP 800-53:|'''SP 800-53''']]<br>
[[NIST SP 800-53A:|'''SP 800-53A''']]<br>
[[NIST SP 800-59:|'''SP 800-59''']]<br>
[[NIST SP 800-60:|'''SP 800-60''']]<br>
==FISMA: Federal Information Security Management Act: [[FISMA]]==


==DOI: [[Department of Insurance:|Department of Insurance]]==
==DOI: [[Department of Insurance:|Department of Insurance]]==

Revision as of 11:53, 27 March 2010

COBIT 4.0 Domains:

Planning and Organization
Acquisition and Implementation
Delivery and Support
Monitor and Evaluate

ISO 27002 Domains:

Risk Assessment and Treatment
Security Policy
Organizing Information Security
Asset Management
Human Resources Security
Physical and Environmental Security
Communications and Operations Management
Access Control
Information Systems Acquisition, Development and Maintenance
Information Security Incident Management
Business Continuity Management
Compliance

ITIL IT Infrastructure Library:

Service Level Management
Financial Management
Capacity Management
Availability Management
Continuity Management
Security Management
Service Desk Management
Incident Management
Problem Management
Configuration Mangement
Change Management
Release Management

COSO Enterprise Risk Management Framework Domains:

Internal Environment
Objective Setting
Event Identification
Risk Assessment
Risk Response
Control Activities
Information and Communications
Monitoring

FIPS: Federal Information Processing Standards

FIPS 199
FIPS 200

NIST: National Institute of Standards and Technology

SP 800-37
SP 800-53
SP 800-53A
SP 800-59
SP 800-60

FISMA: Federal Information Security Management Act: FISMA

DOI: Department of Insurance

PCI: Payment Card Industry - AKA - VISA CISP

FFIEC Federal Financial Institutions Examination Council

BSA: Bank Secrecy Act and Anti-Money Laundering




COBIT and COSO Framework Process Overview