Information Assurance
What is Information Assurance?
Practices for managing risks related to the use, processing, storage, and transmission of information to ensure its confidentiality, integrity, and availability.
Frameworks that govern information assurance
What the standards actually require on information assurance
Requirements naming information assurance across 6 standards, quoted from the control text.
(a) Employ only government off-the-shelf or commercial off-the-shelf information assurance and information assurance-enabled information technology products that compose an NSA-approved solution to protect classified information when the networks used to trans...
NIST800-SA-4(6) · SA-4(6) Acquisition Process | Use of Information Assurance Products →Document trade-offs among security objectives, system performance, cost, and schedule, ensuring decisions are informed and approved by an appropriate authority.
SE-IA · Information Assurance and Security Engineering Trade-offs →A board-driven programme of information assurance is a key priority (SyAPs paragraph 185). The TAG expects a coherent CS&IA strategy with the same scope as the TAG 7.1 risk assessment, including suppliers, service providers, customers and partners that hold as...
uk-onr-cyber-security-and-information-assurance-csia-for-nuclear-facilities::7.2-IAS · Information assurance strategy and programme →The agency's Accreditation Authority should confirm that decommissioning and disposal complied with information assurance requirements.
new-zealand-information-security-manual-nzism::13.1.13.C.01 · 13.1.13.C.01 Accreditation Authority confirms IA compliance at decommissioning →Control Correlation Identifiers represent discrete, measurable and actionable items sourced from the information assurance controls of a policy such as NIST SP 800-53, and they let DOD organisations trace STIG compliance to the NIST controls mandated for feder...
disa-security-technical-implementation-guides-stigs::SRG-1 · SRG-1 CCIs are the discrete, measurable items sourced from NIST SP 800-53; SRGs sit between CCIs and STIGs →A risk-based, independent information assurance function evaluates the security of internal applications.
ffiec-cybersecurity-assessment-tool-cat::D3.PC.Se.Int.4 · D3.PC.Se.Int.4 Secure Coding (Intermediate 4) →Questions people ask about information assurance
What is Information Assurance?
Why is Information Assurance important for compliance?
Which compliance frameworks address Information Assurance?
Where can I learn more about Information Assurance?
See how Information Assurance applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.