Login Form

ISC2 East Bay Chapter

Some Reading Ideas

Enterprise Architecture & Compliance News

Big Picture Legacy Telcom Complexity in the age of Zero Trust

Details
Written by: Robin Basham
Parent Category: GRC Blog
Category: Enterprise Architecture and Compliance News

This is a placeholder for new content.

With the emphasis today in Zero Trust, this section will focus on presenting current content including materials contributed by Abhishek Singh, CEO of  Araali Networks, Inc., Tony Zirnoon, Denny Dean, Jeffrey Reich, Ulf Mattsson, Chief Security Strategist at Protegrity.

Our space is growing:

The Road To Zero Trust

Zero Trust Networks - Abhishek Singh Ariali Networks - Application Defined | Networking Deterministic | Least Privilege | Automated

Privacy Preserving Analytics - Knowing the Experts is more important than you'd think (Ulf Mattsson)

Who is Accountable Anyways? Presented by Sarah Clarke - InfoSpectives

IoT Zero Trust Big Data

Hits: 254
Main Menu

NIST Reading

Whether you're preparing for Cybersecurity certification, working with government standards, or simply starting your career in compliance, these are the NIST Federal Information Processing Standards (FIPS), Special Publication (SP), and Interagency Report (IR) topics you need to know. (The Perils of Mount Must Read™ Confessions of a Cliff Note Junky) These resources go onto the "Mountain of Must Read". If you don't recognize the standard reference, you've missed critical understanding. As of 2022, this is the minimum NIST alphabet. All of these documents are found at https://csrc.nist.gov/publications/ Be very careful about static content. Look at links before you launch them. Never use alternate sites for the Computer Security Resource Center. Get the full list here <NIST Reading Extended>

FIPS Publication 140-2 Security Requirements for Cryptographic Modules [FIPS 140-2]
FIPS Publication 199 Standards for Security Categorization of Federal Information and Information Systems [FIPS 199]
FIPS Publication 200 Minimum Security Requirements for Federal Information and Information Systems [FIPS 200]
FIPS Publication 201-1 Personal Identity Verification (PIV) of Federal Employees and Contractors [FIPS 201-1]		 NISTIR 8212 ISCMA: An Information Security Continuous Monitoring Program Assessment
NIST SP 800-18 Guide for Developing Security Plans for Federal Information Systems [SP 800-18]
NIST SP 800-30 Risk Management Guide for Information Technology Systems [NIST SP 800-30]
NIST SP 800-34 Contingency Planning Guide for Federal Information Systems [SP 800-34]

US Cert CISA Tweets