Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Publications by: Ronald S. Ross (Fed)

Displaying 51 - 59 of 59

The New FISMA Standards and GuidelinesChanging the Dynamic of Information Security for the Federal Government

October 19, 2005

Author(s)

Ronald S. Ross, Stuart W. Katzke, Patricia R. Toth

The Federal Information Security Management Act (FISMA) of 2002 places significant requirements on federal agencies for the protection of information and information systems; and places significant requirements on the National Institute of Standards and

Recommended Security Controls for Federal Information Systems [includes updates through 6/17/05]

June 17, 2005

Author(s)

Ronald S. Ross, Stuart W. Katzke, L A. Johnson, Marianne M. Swanson, G Stoneburner, G Rogers

[Superseded by NIST SP 800-53 Revision 1 (December 2006): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=50945] The purpose of this publication is to provide guidelines for selecting and specifying security controls for information systems

Recommended Security Controls for Federal Information Systems [includes updates through 4/22/05]

April 22, 2005

Author(s)

Ronald S. Ross, Stuart W. Katzke, L A. Johnson, Marianne M. Swanson, G Stoneburner, G Rogers, Annabelle Lee

[Superseded by NIST SP 800-53 (February 2005 w/updates through 6/17/05): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=151305] The purpose of this publication is to provide guidelines for selecting and specifying security controls for

Recommended Security Controls for Federal Information Systems

February 28, 2005

Author(s)

Ronald S. Ross, Stuart W. Katzke, L A. Johnson, Marianne M. Swanson, G Stoneburner, G Rogers, Annabelle Lee

[Superseded by NIST SP 800-53 (February 2005 w/updates through 4/22/05): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=918658] The purpose of this publication is to provide guidelines for selecting and specifying security controls for

Understanding the NIST Standards and Guidelines Required by FISMA: How Three Mandated Documents are Changing the Dynamic of Information Security for the Federal Government

November 1, 2004

Author(s)

Ronald S. Ross, Patricia R. Toth

This bulletin summarizes an article entitled "Understanding the New FISMA-Required NIST Standards and Guidelines" by Ron S. Ross, PhD. It highlights FIPS 199, "Standards for Security Categorization of Federal Information and Information Systems," which is

Guide for the Security Certification and Accreditation of Federal Information Systems

May 20, 2004

Author(s)

Ronald S. Ross, Marianne M. Swanson, G Stoneburner, Stuart W. Katzke, L A. Johnson

[Superseded by SP 800-37 Rev. 1 (February 2010): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=904985] The purpose of this publication is to provide guidelines for the security certification and accreditation of information systems

Standards for Security Categorization of Federal Information and Information Systems

February 1, 2004

Author(s)

Ronald S. Ross, Marianne M. Swanson

The purpose of this document is to provide a standard for categorizing federal information and information systems according to an agency's level of concern for confidentiality, integrity, and availability and the potential impact on agency assets and

The New FISMA Standards and Guidelines---Changing the Dynamic of Information Security for the Federal Government

February 1, 2004

Author(s)

Ronald S. Ross

This manuscript describes the new Federal Information Security Management Act (FISMA) standards and guidelines being produced by the Computer Security Division at the National Institute of Standards and Technology in response to recent Congressional

The New Homeland Security: Challenges for a Great Nation

January 9, 2002

Author(s)

Ronald S. Ross

This article reiterates the importance of homeland security in light of the events of September 11th and the necessity to integrate information technology security into enterprise security. Now, more than ever, the challenges of homeland security require a