Overview

Every organization must consider the mandatory and recommended practices when creating its information security program and/or security policies. Legislative documents such as FISMA are mandatory, yet standards documents such as FIPS 200 can also be mandatory. The selected organization used one or more standard when creating its information security program. For this project, you will identify a standard used by your organization in its information security program, then compare and contrast with another similar standard.

Learning Objectives

After completing this project, students will be able to:

1. Identify recognized US Standards Organizations

2. Describe at least two technical standards

3. Compare and contrast technical standards for information systems security technologies.

4. Describe how the technical standards impact the selected organizations' information security programs