Guideline for Computer Security Certification and Accreditation

Abstract

This Guideline is intended for use by ADP managers and technical staff in establishing and carrying out a program and a technical process for computer security certification and accreditation of sensitive computer applications. It identifies and describes the steps involved in performing computer security certification and accreditation; it identifies and discusses important issues in managing a computer security certification and accreditation program; and it contains sample outlines of an Application Certification Plan and a Security Evaluation Report as well as a sample Accreditation Statement and sensitivity classification scheme. A discussino of recertification and reaccreditation and its relation to change control is also included. The Guideline also relates certification and accreditation to risk analysis, EDP audit, validation, verification and testing (VV&T), and the system life cycle. A comprehensive list of references is included.

Open PDF

Document Details

Document Type
Technical Report
Publication Date
Sep 27, 1983
Accession Number
ADA406276

Entities

Organizations

  • National Institute of Standards and Technology

Tags

Communities of Interest

  • Cyber
  • Human Systems
  • Weapons Technologies

DTIC Thesaurus Topics

  • Application Software
  • Computer Access Control
  • Computer Programming
  • Computer Programs
  • Computer Science
  • Computer Security Software
  • Computers
  • Control Systems
  • Cybersecurity
  • Information Processing
  • Information Security
  • Information Systems
  • Organizational Structure
  • Personnel Management
  • Risk Analysis
  • Security Personnel
  • Test And Evaluation

Fields of Study

  • Computer science

Readers

  • Computer Science.
  • Cybersecurity.
  • Software Engineering.

Technology Areas

  • Cyber