National Institute of Standards and Technology Special Publication 800-30 Rev. 1, September 2012 Guide for Conducting Risk Assessments, National Institute of Standards and Technology Special Publication 800-34, Rev. 1 May 2010 Contingency Planning Guide for Federal Information Systems, National Institute of Standards and Technology Special Publication 800-37, Rev. 1, Guide for Applying the Risk Management Framework to Federal Information Systems, February 2010 National Institute of Standards and Technology Special Publication 800-39, Managing March 2011 Information Security Risk, National Institute of Standards and Technology Special Publication 800-53 Rev. 4, Security and Privacy Controls for Federal Information Systems and Organizations, April 2013 National Institute of Standards and Technology Special Publication 800-53A Rev. 4, Assessing Security and Privacy Controls in Federal Information System and December 2014 Organizations, National Institute of Standards and Technology Special Publication 800-64 Rev. 2, October 2008 Security Considerations in the System Development Life-Cycle, National Institute of Standards and Technology Special Publication 800-115, Technical September 2008 Guide to Information Security Testing and Assessment, National Institute of Standards and Technology Special Publication 800-137, Information Security Continuous Monitoring (ISCM) for Federal Information Systems September 2011 and Organizations, National Institute of Standards and Technology Draft Special Publication 800-160, May 2014 Systems Security Engineering, Federal Information Processing Standards Publication 199, Standards for Security February 2004 Categorization of Federal Information and Information Systems, DoDI 5000.02, 7 January 2015 Operation of the Defense Acquisition System, DoDI 5134.16, Deputy Assistant Secretary of Defense for Systems Engineering 19 August 2011 (DASD(SE)), DoDI 8500.1, 14 March 2014 Cybersecurity, DoDI 8510.01. Risk Management Framework (RMF) for DoD Information Technology 12 March 2014 (IT), DoDI 8551.1, 28 May 2014 Ports, Protocols, and Services Management (PPSM), DoDD 8000.1, 10 February 2009 Management of Defense Information Enterprise, CJCSI 3170.01I, 23 January Joint Capabilities Integration and Development System, 2015 CJCSM 6510.01F, Information Assurance (IA) and Computer Network Defense (CND), 9 February 2011
National Institute of Standards and Technology Special Publication 800-30 Rev. 1, Guide for Conducting Risk Assessments, September 2012 National Institute of Standards and Technology Special Publication 800-34, Rev. 1 Contingency Planning Guide for Federal Information Systems, May 2010 National Institute of Standards and Technology Special Publication 800-37, Rev. 1, Guide for Applying the Risk Management Framework to Federal Information Systems, February 2010 National Institute of Standards and Technology Special Publication 800-39, Managing Information Security Risk, March 2011 National Institute of Standards and Technology Special Publication 800-53 Rev. 4, Security and Privacy Controls for Federal Information Systems and Organizations, April 2013 National Institute of Standards and Technology Special Publication 800-53A Rev. 4, Assessing Security and Privacy Controls in Federal Information System and Organizations, December 2014 National Institute of Standards and Technology Special Publication 800-64 Rev. 2, Security Considerations in the System Development Life-Cycle, October 2008 National Institute of Standards and Technology Special Publication 800-115, Technical Guide to Information Security Testing and Assessment, September 2008 National Institute of Standards and Technology Special Publication 800-137, Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations, September 2011 National Institute of Standards and Technology Draft Special Publication 800-160, Systems Security Engineering, May 2014 Federal Information Processing Standards Publication 199, Standards for Security Categorization of Federal Information and Information Systems, February 2004 DoDI 5000.02, Operation of the Defense Acquisition System, 7 January 2015 DoDI 5134.16, Deputy Assistant Secretary of Defense for Systems Engineering (DASD(SE)), 19 August 2011 DoDI 8500.1, Cybersecurity, 14 March 2014 DoDI 8510.01. Risk Management Framework (RMF) for DoD Information Technology (IT), 12 March 2014 DoDI 8551.1, Ports, Protocols, and Services Management (PPSM), 28 May 2014 DoDD 8000.1, Management of Defense Information Enterprise, 10 February 2009 CJCSI 3170.01I, Joint Capabilities Integration and Development System, 23 January 2015 CJCSM 6510.01F, Information Assurance (IA) and Computer Network Defense (CND), 9 February 2011
BES%20Information%20Security%20Continuous%20Monitoring%20Strategy%20Guide.docx