Compliance Standards

DOD:

• DIACAP
• DITSCAP to DIACAP transition support
• NSCAP
• IAVAs
• TCNOs

Civilian:

• FIPS 199
• NIST 800-37 (Guide for Federal IS C&A)
• NIST 800-53/53A (Security Controls for Federal IS)
• NIST 800-60 (Guide for Mapping Information Systems to Security Categories)
• NIACAP

Intelligence Standards:

• DCID 6/3 (Intelligence Community)
• NISCAP (NSA-specific)

FISMA Reporting:

• Quarterly and Annual Remediation Reports (POA&M)
• OMB C&A Status Quarterly Reporting
• NIST 800-18 (Guide for Developing IT System Security Plans)
• NIST 800-26 (Self Assessment Questionnaire)

Industry and International:

• Sarbanes-Oxley
• Common Criteria (selected protection profiles)
• BS ISO/IEC 17799:2000 / BS 7799-2:2002*
• Gramm-Leach-Bliley Act (GLBA)
• NCUA Part 748
• NCUA e-Commerce Guidelines
• Visa Cardholder Information Security Program
• 12 CFR Part 30
• EC-1/EC-2 Checklist
• California SB 1386
• Health Insurance Portability and Accountability Act (HIPAA)
• SANS Top 20 Security Vulnerabilities

*Copyrighted material. An additional fee may be required.

Agency Security Requirements:

• Army
• Air Force
• Navy
• DISA (selected STIGs)
• Dept. of Education*
• Dept. of Homeland Security
• Dept. of Justice
• Dept. of State
• Dept. of Transportation (FAA)
• Dept. of Treasury (IRS)
• Dept. of Veterans Affairs