Information Security Handbook: A Guide for Managers

GuidanceNational Institute of Standards and Technology (NIST)Information Security

This Information Security Handbook provides a broad overview of information security program elements to assist managers in understanding how to establish and implement an information security program.

The purpose of this publication is to inform members of the information security management team [agency heads, chief information officers (CIO), senior agency information security officers (SAISO), and security managers] about various aspects of information security that they will be expected to implement and oversee in their respective organizations. In addition, the handbook provides guidance for facilitating a more consistent approach to information security programs across the federal government. Even though the terminology in this document is geared toward the federal sector, the handbook can also be used to provide guidance on a variety of other governmental, organizational, or institutional security requirements.

> Read entire regulation (log in required - registration is free)