An Introduction to Information Security

Nieles, Michael; Dempsey, Kelley; Pillitteri, Victoria

July 19, 2023: URLs for CSRC publication details pages have changed. Legacy URLs should automatically redirect to the new URLs. However, links to the actual publications have NOT changed (e.g., DOIs and PDFs on nvlpubs.nist.gov). Please send inquiries to csrc-inquiry@nist.gov.

NIST SP 800-12 Rev. 1 (Initial Public Draft)

Obsoleted on June 22, 2017 by SP 800-12 Rev. 1

An Introduction to Information Security

Documentation Topics

Date Published: January 2017
Comments Due: February 22, 2017 (public comment period is CLOSED)
Email Questions to: sp800-12-draft@nist.gov

Author(s)

Michael Nieles (NIST), Kelley Dempsey (NIST), Victoria Pillitteri (NIST)

Announcement

NIST invites comments on Draft SP 800-12 Revision 1, An Introduction to Information Security. Information security is a constantly growing and evolving science. With that, it is necessary to update the information from the original publication to stay current with information security terms and technology associated with operating systems in today’s complex computing environment. The authors encourage readers to comment on the draft, specifically to address areas where more information would be helpful to individuals looking to gain a better understanding of introductory information security principles. Additionally, suggestions for supplementary sections/topics are welcome to ensure this publication is as complete and thorough as possible. Feedback on this draft will be incorporated into the Revision 1 release, anticipated for Summer 2017.

Abstract

Organizations rely heavily on the use of information technology (IT) products and services to run their day-to-day activities. Ensuring the security of these products and services is of the utmost importance for the success of the organization. This publication provides an introduction to the information security principles organizations may leverage in order to understand the information security needs of their respective systems.

Keywords

assurance; computer security; information security; introduction; risk management; security 108 controls; security requirements

Control Families

None selected

Documentation

Publication:
Draft SP 800-12 Rev. 1 (pdf)

Supplemental Material:
None available

Document History:
01/23/17: SP 800-12 Rev. 1 (Draft)
06/22/17: SP 800-12 Rev. 1 (Final)

Topics

Security and Privacy

general security & privacy

Laws and Regulations

OMB Circular A-130