ABSTRACT

The details of the first two columns in Table F.1 are from the Guide to NIST Information Security Documents. The use of the NIST standards is not ubiquitous, but notable in anticipation of its growing popularity as a baseline for developing information assurance solutions in the U.S. government, U.S. critical infrastructure, and use by many commercial organizations in the United States. Table F.1 presents NIST standards within the SMP framework. You may use this table to record standards relevant to your organization along with a description of applicability. Be sure to cover who, what, why, when, where, and how the standards apply. If you prefer different standards than NIST, the SMP framework is still a good organizing tool to record applicable standards in context of the area they address.