SP 800-27 Rev. A. Engineering Principles for Information Technology Security (A Baseline for Achieving Security), Revision A

Authors:
Gary Stoneburner;Clark Hayden;Alexis Feringa
Affiliations:
National Institute of Standards and Technology;Booz Allen Hamilton;Booz Allen Hamilton
Venue:
SP 800-27 Rev. A. Engineering Principles for Information Technology Security (A Baseline for Achieving Security), Revision A
Year:
2004

Citing 0
Cited 4

On the Secure Software Development Process: CLASP and SDL Compared

SESS '07 Proceedings of the Third International Workshop on Software Engineering for Secure Systems
On the secure software development process: CLASP, SDL and Touchpoints compared

Information and Software Technology
Harmonizing privacy with security principles and practices

IBM Journal of Research and Development
Information security of patient-centred services utilising the german nationwide health information technology infrastructure

HealthSec'12 Proceedings of the 3rd USENIX conference on Health Security and Privacy

Quantified Score

Hi-index	0.00

Visualization

Abstract

The Engineering Principles for Information Technology (IT) Security (EP-ITS) presents a list of system-level security principles to be considered in the design, development, and operation of an information system. This document is to be used by IT security stakeholders and the principles introduced can be applied to general support systems and major applications. EP-ITS presents principles that apply to all systems, not ones tied to specific technology areas. These principles provide a foundation upon which a more consistent and structured approach to the design, development, and implementation of IT security capabilities can be constructed. While the primary focus of these principles remains on the implementation of technical countermeasures, these principles highlight the fact that, to be effective, a system security design should also consider non-technical issues, such as policy, operational procedures, and user education.