
Circular A-130: Managing Information as a Strategic Resource Circular A-130 serves as the overarching policy and framework for Federal Information Resources Management
personally identifiable information - Glossary | CSRC
NIST SP 800-122 under Personally Identifiable Information (PII) from GAO Report 08-536 As defined by OMB Circular A-130, Personally Identifiable Information is information that can be used to distinguish or trace an individual’s identity, either alone or when combined with other information that is linked or linkable to a specific individual.
OMB Circular A-130 requires federal agency legacy systems to be in compliance with new NIST standards and guidelines within one year of publication Challenge: CSAM’s approach to control set content has a dependency on both the Controls …
Mar 20, 2019 · 1. Introduction The Silver Spring Networks, Inc. End Point Security Module (SSN ESM) is a cryptographic processing unit that was designed from the ground up for Federal Information Processing Standard (FIPS) 140-2 level 3 security isolation. The security module provides FIPS-approved cryptographic algorithms and employs a FIPS 140-2 level 3 isolation …
Key Management | CSRC
Jan 4, 2017 · Cryptographic Key Management (CKM) is a fundamental part of cryptographic technology and is considered one of the most difficult aspects associated with its use. Of particular concern are the scalability of the methods used to distribute keys and the usability of these methods. NIST has undertaken an effort to improve the overall key management …
PII - Glossary | CSRC
NIST SP 800-188 under personally identifiable information from OMB Circular A-130 (2016) NIST SP 800-37 Rev. 2 under personally identifiable information from OMB Circular A-130 (2016)
May 26, 2021 · Spring 2021 CSAM customers begin asking about status of the SP 800-53, Revision 5 control set OMB Circular A-130 requires federal agency legacy systems to be in compliance with new NIST standards and guidelines within one year of publication
authorization to operate - Glossary | CSRC
NIST SP 800-53A Rev. 5 from OMB Circular A-130 (2016) Formal declaration by a designated accrediting authority (DAA) or principal accrediting authority (PAA) that an information system is approved to operate at an acceptable level of risk, based on the implementation of an approved set of technical, managerial, and procedural safeguards.
Key Management | CSRC
Jan 4, 2017 · The following publications provide general key management guidance: Recommendation for Key Management SP 800-57 Part 1 Revision 5 - General This Recommendation provides cryptographic key-management guidance. It consists of three parts. Part 1 provides general guidance and best practices for the management of cryptographic …
privacy impact assessment (PIA) - Glossary | CSRC
NIST SP 800-53A Rev. 5 under privacy impact assessment from OMB Circular A-130 (2016) NIST SP 800-53B under privacy impact assessment from OMB Circular A-130 (2016)