Implementing Practical Risk Control Using U.S. Government Standards. Issue 2 (2nd August 2016) - Shoemaker, Dan
Abstract: This article presents the standard basis for implementing the information security control structures recommended by the U.S. Federal Government for compliance with the Federal Information Security Management Act of 2002 (FISMA). The process recommendations contained here create a detailed baseline of practical controls for any information security application in both government and industry.