CSRC Pages

  -  CSRC Homepage
  -  ICAT Vulnerability Database
  -  Vulnerability/Threat Advisories
  -  Site Map
  -  Virus Information

  Search:  

Update as of July 28, 2004

As most computer security professionals are aware, making the case to invest in computer security is difficult at best. Defining clearly the internal rate of return for each computer security investment is critical for all organizations to be able to invest properly in specific computer security implementations.

But, what constitutes appropriate inputs for IT Security Capital investment planning? How is the process approached? What is the most effective way to integrate security into the process?

NIST has developed a draft guideline for Federal agencies to use to support successful integration of security into the capitol investment planning process.

NIST Comments on the draft are requested by August 12th to: sec-cpic@nist.gov . The draft guideline is available in .PDF format.