Question

SP 800-14, Generally Accepted Principles and Practices for Securing Information Technology Systems, provides best practices and security principles that can direct the security team in the development of a security:____________.

Answer 1

Answer:

Security blueprints

Explanation:

The NIST 800-14 principles established a security blueprints for a sound system security program and this practices guides organizations on the modes of controls, the procedures and objectives that are involved in an efficient and effective IT security program.

The eight principles defined are:

• The Computer security assists the mission of the respective organization

• It is an important element of a concrete management process

• Computer security are meant to be cost effective

• Owners of computer systems have security responsibilities outside the purview of their own organizations

• Computer security responsibilities and accountability are meant to be made explicit

• Computer security involves a comprehensive and integrated approach

• Periodical re-assessment should be carried out on Computer systems

• Computer security is also controlled by societal factors