This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Difference between revisions of "Industry:Draft NIST SP 800-37 Revision 1"
Dan Philpott (talk | contribs) |
Dan Philpott (talk | contribs) (Added mailing list) |
||
| Line 5: | Line 5: | ||
| PrimaryContact=[mailto:danphilpott(at)gmail.com Dan Philpott] | | PrimaryContact=[mailto:danphilpott(at)gmail.com Dan Philpott] | ||
| SecondaryContact=[mailto:rex.booth(at)gt.com Rex Booth] | | SecondaryContact=[mailto:rex.booth(at)gt.com Rex Booth] | ||
| − | | MailingList= | + | | MailingList=[http://groups.google.com/group/owasp-gic-review-nist-sp-800-37r1 OWASP GIC Review NIST SP 800-37r1] |
| ActivityObjectives= | | ActivityObjectives= | ||
* Review Final Public Draft of NIST SP 800-37 Revision 1 - in particular issues affecting web application security | * Review Final Public Draft of NIST SP 800-37 Revision 1 - in particular issues affecting web application security | ||
Latest revision as of 14:14, 4 December 2009
Return to Global Industry Committee
| ACTIVITY IDENTIFICATION | |||
|---|---|---|---|
| Activity Name | NIST SP 800-37 Revision 1 Final Public Draft | ||
| Short Description | Provide response to "NIST SP 800-37 Revision 1 Final Public Draft: Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach" | ||
| Related Projects | NIST SP 800-53 Revision 3 Review | ||
| Email Contacts & Roles | Primary Dan Philpott |
Secondary Rex Booth |
Mailing list Please use: OWASP GIC Review NIST SP 800-37r1 |
| ACTIVITY SPECIFICS | |||
|---|---|---|---|
| Objectives |
| ||
| Deadlines |
| ||
| Status |
| ||
| Resources |
| ||
Review Plan
Review of the document shall be conducted primarily via the OWASP wiki. NIST SP 800-37 Revision 1 FPD has been converted to wiki format, broken into separate articles by Chapter/Appendix and had the text linked to the FISMApedia.org glossary. Participants are requested to review the document text and comment in the appropriate section of the discussion page. Please sign your contributions and comment on the contributions of each other as needed. The primary access point for the document is NIST SP 800-37 Revision 1 FPD Table of Contents/Category Entry. This contains a linked Table of Contents and all pages categorized as Category:GIC-NISTSP80037r1FPD.
Stage 1
Activities: All participants perform a high-level, document-wide review to develop familiarity with the documents. Reviewers should focus on gaining an understanding of the document layout and basic understanding of the Risk Management Framework. Focus is on gaining an understanding of the document.
Results: Keep notes general and impressionistic. Note sections that may merit further investigation and any initial impressions you have on strengths and weaknesses. Please do not comment on other contributors work, consider this a brainstorming period.
Stage 2
Activities: Participants will be asked to perform a focused review on sections identified in Stage 1. These "targeted sections" may be divided among project participants depending on project population and the number of target sections. Impressions on strengths and weakness of the process will be expanded on by their contributors. Participants are encouraged to comment on each others comments.
Results: Each participant should develop a detailed set of comments for their assigned sections.
Stage 3
Activities: Participants will revise comments as needed and project management will consolidate and format comments for submission to NIST.
Results: A final list of comments for submission to NIST.
Submission Response
Latest first
Final Version
N/A
Identified Sections
The following parts have been identified for review:
N/A
Return to Global Industry Committee
