Karen Scarfone

Publications

Considerations for Managing Internet of Things (IoT) Cybersecurity and Privacy Risks

June 25, 2019

Author(s):

Kaitlin R. Boeckl, Michael J. Fagan, William J. Fisher, Naomi B. Lefkovitz, Katerina N. Megas, Ellen M. Nadeau, Benjamin M. Piccarreta, Danna G. O'Rourke, Karen A. Scarfone

The Internet of Things (IoT) is a rapidly evolving and expanding collection of diverse technologies that interact with the physical world. Many organizations...

National Checklist Program for IT Products--Guidelines for Checklist Users and Developers

February 15, 2018

Author(s):

Stephen D. Quinn, Murugiah P. Souppaya, Melanie Cook, Karen A. Scarfone

A security configuration checklist is a document that contains instructions or procedures for configuring an information technology (IT) product to an...

Application Container Security Guide

September 25, 2017

Author(s):

Murugiah P. Souppaya, John Morello, Karen A. Scarfone

Application container technologies, also known as containers, are a form of operating system virtualization combined with application software packaging...

Guide for Cybersecurity Event Recovery

December 22, 2016

Author(s):

Michael J. Bartock, Jeffrey A. Cichonski, Murugiah P. Souppaya, Matthew C. Smith, Gregory A. Witte, Karen A. Scarfone

In light of an increasing number of cybersecurity events, organizations can improve resilience by ensuring that their risk management processes include...

National Checklist Program for IT Products: Guidelines for Checklist Users and Developers

December 08, 2016

Author(s):

Stephen D. Quinn, Murugiah P. Souppaya, Melanie Cook, Karen A. Scarfone

A security configuration checklist is a document that contains instructions or procedures for configuring an information technology (IT) product to an...