U.S. flag

An official website of the United States government

Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock ( ) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

PUBLICATIONS

Supplemental Guidance on Ongoing Authorization: Transitioning to Near Real-Time Risk Management

Published

Author(s)

Kelley L. Dempsey, Ronald S. Ross, Kevin M. Stine

Abstract

Office of Management and Budget (OMB) Memorandum M-14-03, Enhancing the Security of Federal Information and Information Systems, reminds Federal agencies that, "Our nation's security and economic prosperity depend on ensuring the confidentiality, integrity and availability of Federal information and information systems," and directs NIST to "publish guidance establishing a process and criteria for agencies to conduct ongoing assessments and authorization." The following guidance clarifies and amplifies current NIST guidance on security authorization contained in Special Publications 800-37, 800-39, 800-53, 800-53A, and 800-137.
Citation
OTHER -
NIST Pub Series
Other
Pub Type
NIST Pubs

Download Paper

DOI Link

Keywords

Federal Information Security Management Act, Information Security Continuous Monitoring, Office of Management and Budget, Risk Management Framework, Ongoing Assessment, Ongoing Authorization
Information technology and Cybersecurity

Citation

Dempsey, K. , Ross, R. and Stine, K. (2014), Supplemental Guidance on Ongoing Authorization: Transitioning to Near Real-Time Risk Management, Other, National Institute of Standards and Technology, Gaithersburg, MD, [online], https://doi.org/10.6028/NIST.CSWP.06032014 (Accessed April 21, 2021)

Created June 3, 2014, Updated January 27, 2020