Module 4
Ch-8
Ex 2. Compare the ISO/IEC 27001 outline with the NIST
documents discussed in this chapter.
Which areas, if any, are missing from the NIST documents? Identify
the strengths and
weaknesses of the NIST programs compared to the ISO
standard.
Ex 3. Search the Internet for the term security best
practices. Compare your findings to the
recommended practices outlined in the NIST documents.
Ex 4. Search the
Internet for the term data classification model. Identify two such models and
then compare and contrast the categories those models use for the various
levels of classification.
Ch-9
Ex 2. Visit the NIST Federal Agency Security Practices Web
site at csrc.nist.gov/groups/SMA/fasp/index.html. Review some of the listed
FASPs and identify five drawbacks to adopting the recommended practices for a
typical business.
Ex 4. Download and
review “NIST SP 800-55, Rev. 1: Performance Measurement Guide for Information
Security.” Using this document, identify five measures you would be interested
in finding the results from based on your home computing systems and/or
network.
Ex 5. Using the
template provided in Table 9-2, develop documentation for one of the performance
measurements you selected in Exercise 4.





