ISMF Standard 78 (Management of privileges) Responsible ISMF Standard 80 (User access review) Parties Business ISMF Standard 81 (Password use obligations) Owners ISMF Standard 88 (Configuration port protection) Responsible ISMF Standard 89 (Network segregation) Parties ISMF Standard 93 (Secure Logon) ISMF Standard 94 (User identification and authentication) Responsible ISMF Standard 95 (Password management system) Parties ISMF Standard 96 (Control of system tools and utilities) ISMF Standard 97 (Inactive sessions) ISMF Standard 99 (Legitimate need-to-access / Business Owners ISMF Standard 101 (Mobile and portable storage devices) Business ISMF Standard 44 (Remote, portable and off premises Owners devices) Procurement, ISMF Standard 103 (Security in new or enhanced ICT Security and systems) Responsible Parties The subordinate ISMF Standards must be applied to Business systems operating at I4 classification for integrity, and Owners should be applied to I3 systems. Responsible ISMF Standard 112 (Cryptographic key management) Parties ISMF Standard 113 (Installation and deployment of Responsible software) Parties ISMF Standard 116 (Change control in development and support) Responsible ISMF Standard 117 (Change review) Parties ISMF Standard 143 (Secure development principles) Responsible ISMF Standard 121 (Vulnerability management) Parties ISMF Standard 122 (Business continuity management) Business ISMF Standard 124 (Business continuity Owners ISMF Standard 126 (BCP review) ISMF Standard 127 (Legislative and regulatory requirements) Responsible ISMF Standard 128 (Intellectual property) Parties ISMF Standard 129 (Protection of government records) ISMF Standard 130 (Privacy and confidentiality)
Responsible Parties ISMF Standard 78 (Management of privileges) ISMF Standard 80 (User access review) Business Owners ISMF Standard 81 (Password use obligations) Responsible Parties ISMF Standard 88 (Configuration port protection) ISMF Standard 89 (Network segregation) Responsible Parties ISMF Standard 93 (Secure Logon) ISMF Standard 94 (User identification and authentication) ISMF Standard 95 (Password management system) ISMF Standard 96 (Control of system tools and utilities) ISMF Standard 97 (Inactive sessions) Business Owners ISMF Standard 99 (Legitimate need-to-access / Business Owners ISMF Standard 101 (Mobile and portable storage devices) ISMF Standard 44 (Remote, portable and off premises devices) Procurement, Security and Responsible Parties ISMF Standard 103 (Security in new or enhanced ICT systems) Business Owners The subordinate ISMF Standards must be applied to systems operating at I4 classification for integrity, and should be applied to I3 systems. Responsible Parties ISMF Standard 112 (Cryptographic key management) Responsible Parties ISMF Standard 113 (Installation and deployment of software) Responsible Parties ISMF Standard 116 (Change control in development and support) ISMF Standard 117 (Change review) ISMF Standard 143 (Secure development principles) Responsible Parties ISMF Standard 121 (Vulnerability management) Business Owners ISMF Standard 122 (Business continuity management) ISMF Standard 124 (Business continuity ISMF Standard 126 (BCP review) Responsible Parties ISMF Standard 127 (Legislative and regulatory requirements) ISMF Standard 128 (Intellectual property) ISMF Standard 129 (Protection of government records) ISMF Standard 130 (Privacy and confidentiality)
ISMF-v3.3.docx