NIST Special Publication 800-27A

Citation
NIST, Engineering Principles for Information Technology Security (A Baseline for Achieving Security) (NIST Special Publication 800-27A) (June 2004) (full-text).

Overview
This document is published by the National Institute of Standards and Technology (NIST) as recommended guidance for Federal departments and agencies and is intended to be usable by both the government and the private sector.

This document should be used by those interested in IT security and is applicable to all IT systems, including general support systems and major applications.

This document presents generic principles that apply to all systems. It is anticipated that the application of these generic principles to specific technology areas will be accomplished by use of this document in developing more detailed guidance.