1 |
Department of Defense, "DOD 8500 : Information Assurance(IA)", DOD Directive, 2002. 10.
|
2 |
ISO/IEC, "ISO/IEC 270001 : 2005 Information technology-Security techniques-Information security management systems-Requirements", ISO/IEC, 2005. 10.
|
3 |
Jang et al., "Introduction to Information Security Management Systems and Policy", The Review of Information Security Institute, Vol. 11, No. 3, 2011, pp. 1-15.
|
4 |
Jung, J.H. and Choi, M.G., "An Analysis of Foreign Information Security Management System and Policy Using Information SecurityManagement Analysis Framework", Proceeding of the KAIS Fall Conference, 2010, pp. 720-723.
|
5 |
Korea Information Security Agency, "National Information Security White Paper, 2019", 2019, pp. 91-93.
|
6 |
National Information Service, "The Explanation, Information Security Management Evaluation Index", 2019, pp. 2-3.
|
7 |
NIST Technology Administration, "An Introduction to Computer Security : The NIST Hand book, NIST USA, Jan, 1998.
|
8 |
NIST, "NIST Special Publication 800-53 Revision 3, Recommended Security Controls for Federal Information Systems and Organizations", NIST, 2009. 8.
|
9 |
Quinn, S. D., Scarfone, K. A., Barrett, M., and Johnson, C. S., "Guide to Adopting and Using the Security Content Automation Protocol(SCAP) Version 1.0", NIST Special Publication 800-117, 2010. 7.
|
10 |
US FISMA(Federal Information Security Management Act of 2002), 2002.
|
11 |
US Government Accountability Office, "Federal Information System Controls Audit Manual(FISCAM)", US GAO, 2009. 2.
|
12 |
Waltermire, S., Quinn, K., Scarfone, A., and Halbardier, D., "The Technical Specification for the Security Content Automation Protocol(SCAP) : SCAP Version 1.2", NIST Special Publication 800-126 Revision 2, 2011. 9.
|