Building and Implementing a Security Certification and Accreditation Program: OFFICIAL (ISC)2 GUIDE to the CAPcm CBK(ISC2 Press)

This comprehensive text provides readers with a proven approach to establishing successful enterprise security certification and accreditation programs. It presents an integrated methodology for performing C&A processes based on the numerous government references currently available. The book also states the case for using C&A to identify and implement security controls for government and private sector systems. The text provides nuts and bolds guidance on performing C&A tasks through a detailed examination of processes and through the use of case studies. Howard; Patrick D. Titan Corporation, Bel Air, Maryland, USA,

Table of Contents:
Building a Successful Enterprise Certification and Accreditation Program Key Elements of an Enterprise Certification and Accreditation Program Certification and Accreditation Roles and Responsibilities The Certification and Accreditation Life Cycle Why Certification and Accreditation Programs Fail Certification and Accreditation Processes Certification and Accreditation Project Planning System Inventory Process Assessing Data Sensitivity and Criticality System Security Plans Coordinating Security for Interconnected Systems Minimum Security Baselines and Best Practices Assessing Risk Security Procedures Certification Testing Remediation Planning Essential Certification and Accreditation Documentation Documenting the Accreditation Decision Certification and Accreditation Case Study The Future of Certification and Accreditation Appendices Certification and Accreditation References Glossary Sample Statement of Work Sample Project Work Plan Sample Project Kickoff Presentation Outline Sample Project Wrap-Up Presentation Outline Sample System Inventory Policy Sample Business Impact Assessment Sample Rules of Behavior (General Support System) Sample Rules of Behavior (Major Application) Sample System Security Plan Outline Sample Memorandum of Understanding Sample Interconnection Security Agreement Sample Risk Assessment Outline Sample Security Procedure Sample Certification Test Results Matrix Sample Risk Remediation Plan Sample Certification Statement Sample Accreditation Letter Sample Interim Accreditation Letter

Review :
"This book focuses on the processes that must be employed by an organization to establish a certification and accreditation program based on current federal government criteria Pat has structured this book to address the key issues in certification and accreditation, including roles and responsibilities, the life cycle, and even a discussion of pitfalls to avoid. As with all of Pat's work, he provides the reader with practical information on what works and what does not "Even if government certification and accreditation is not your concern, the new ISO 27002 (formerly ISO17799) will require all of us to look for a process to make certification and accreditation bearable. Pat has succeeded in doing just that with this practical and readable book." Thomas R. Peltier, Peltier Associates, Member of the ISSA Hall of Fame, from the Foreword