Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Search Publications by: Ronald S. Ross (Fed)

Displaying 76 - 100 of 120

Managing Information Security Risk: Organization, Mission, and Information System View

March 1, 2011

Author(s)

Ronald S. Ross

The purpose of Special Publication 800-39 is to provide guidance for an integrated, organization-wide program for managing information security risk to organizational operations (i.e., mission, functions, image, and reputation), organizational assets

Guide for Assessing the Security Controls in Federal Information Systems and Organizations: Building Effective Security Assessment Plans

June 29, 2010

Author(s)

Ronald S. Ross, L A. Johnson

[Superseded by SP 800-53A Rev. 4 (December 2014): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=917644] Special Publication 800-53A, Revision 1 provides guidelines for developing security assessment plans and associated security control

Recommended Security Controls for Federal Information Systems and Organizations [includes updates through 5/1/2010]

May 1, 2010

Author(s)

Ronald S. Ross

[Superseded by NIST SP 800-53 Rev. 4 (April 2013): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=918664] The objective of NIST SP 800-53 is to provide a set of security controls that can satisfy the breadth and depth of security requirements

Guide for Applying the Risk Management Framework to Federal Information Systems: a Security Life Cycle Approach

February 22, 2010

Author(s)

Ronald S. Ross, L A. Johnson

[Superseded by SP 800-37 Rev. 1 (February 2010, w/updates through 6/5/2014): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=916094] The purpose of SP 800-37 Rev 1 is to provide guidelines for applying the Risk Management Framework to federal

Recommended Security Controls for Federal Information Systems and Organizations [includes updates through 9/14/2009]

September 14, 2009

Author(s)

Ronald S. Ross

[Superseded by NIST SP 800-53 Rev. 3 (August 2009 w/updates through 5/1/2010): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=903280] The objective of NIST SP 800-53 is to provide a set of security controls that can satisfy the breadth and

Recommended Security Controls for Federal Information Systems and Organizations [includes updates through 8/12/2009]

August 12, 2009

Author(s)

Ronald S. Ross

[Superseded by NIST SP 800-53 Rev. 3 (August 2009 w/updates through 9/14/2009): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=918661] The objective of NIST SP 800-53 is to provide a set of security controls that can satisfy the breadth and

Recommended Security Controls for Federal Information Systems and Organizations

August 3, 2009

Author(s)

Ronald S. Ross

[Superseded by NIST SP 800-53 Rev. 3 (August 2009 w/updates through 8/12/2009): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=918662] The objective of NIST SP 800-53 is to provide a set of security controls that can satisfy the breadth and

Guide for Assessing the Security Controls in Federal Information Systems: Building Effective Security Assessment Plans

July 1, 2008

Author(s)

Ronald S. Ross, L A. Johnson, Stuart W. Katzke, Patricia R. Toth, G. Stoneburner, G Rogers

[Superseded by NIST SP 800-53A, Rev. 1 (June 2010): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=906065] The purpose of NIST Special Publication 800-53A is to provide guidelines for building effective security assessment plans and

Managing Risk from Information Systems - Second Public Draft

April 9, 2008

Author(s)

Ronald S. Ross, Stuart W. Katzke, Marianne M. Swanson, L A. Johnson, G Stoneburner

Recommended Security Controls for Federal Information Systems

December 19, 2007

Author(s)

Ronald S. Ross, Stuart W. Katzke, L A. Johnson, Marianne M. Swanson

[Superseded by NIST SP 800-53 Rev. 3 (August 2009): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=918663] This publication revises NIST SP 800-53 Revision 1 by adding specific guidance on the application of security controls to Industrial

NIST Delivers Strong and Flexible Security Standards Managing Enterprise Risk in a World of Sophisticated Cyber Threats

July 9, 2007

Author(s)

Ronald S. Ross

This article summarizes the fundamental concepts of the FISMA project and reinforces the core principles that have guided the project from its initiation in 2003.

Managing Enterprise Risk in Today's World of Sophisticated Threats: A Framework for Developing Broad-based, Cost-effective Information Security Programs

December 28, 2006

Author(s)

Ronald S. Ross

The Federal Information Security Management Act of 2002 places significant requirements on federal agencies for the protection of information and information systems including those systems comprising the critical infrastructure of the United States. The

Recommended Security Controls for Federal Information Systems

December 19, 2006

Author(s)

Ronald S. Ross, Stuart W. Katzke, L A. Johnson, Marianne M. Swanson, G Stoneburner, G Rogers

[Superseded by NIST SP 800-53 Revision 2 (December 2007): http://www.nist.gov/manuscript-publication-search.cfm?pub_id=51351] The purpose of this publication is to provide guidelines for selecting and specifying security controls for information systems