摘要
介绍了联邦信息安全管理法案背景和实施项目进展情况,对比分析了风险管理框架的变化,给出了关键标准研制情况清单,为我国开展重要信息系统和关键基础设施的信息安全保障工作提供借鉴。
This paper introduced FIMSA background and NIST's roles in FISMA,analyzed the changes of the progress of the FISMA implementation project and risk management framework(RMF),discussed the situation of key standards.We should learn form the experiences and lessons to protect the information security for our important information systems and key information security infrastructure.
出处
《信息技术与标准化》
2011年第10期35-39,共5页
Information Technology & Standardization
关键词
联邦信息安全管理法案
风险管理框架
持续监控
联合任务工作组
FISMA
risk management framework
continuous monitoring
joint task force transformation initiative interagency working group
