NIST SP 800-137

From: Help-Net Security

by Nir Polak – CEO of Exabeam

There is a lot to like in the $6 billion Continuous Diagnostics and Mitigation (CDM) program being administered by the DHS across more than 100 federal civilian agencies. The DHS has done an excellent job creating 15 different capabilities broken up into four implementation phases that agencies need to have to strengthen their cybersecurity postures.

These measures will also be used to build cybersecurity dashboards that will be reviewed by the Office of Management and Budget (OMB) for determining funding levels and will get congressional review.

The implementation phases are laid out in the following order to be implemented between 2013 and 2017.

1. Manage assets
2. Manage accounts for people and services
3. Manage events
4. Manage the security lifecycle.

Read Complete Article