Assurance

["Farmer, Jacob" <>]

The NIST standards were written in such a way that they really could only be implemented by a Federal Government entity.  For example, they make references to specific artifacts of the way the Federal Government is organized.  I don’t think the broad industry interest was anticipated.

 

Jacob

 

From: [mailto:] On Behalf Of Bradner, Scott
Sent: Tuesday, October 21, 2014 4:28 PM
To:
Cc:
Subject: Re: [Assurance] Executive Order from the President of the United States

 

I have wondered, why did I2 decide to not just use the NIST standards - 

 

seems to present an ongoing issue to be " comparable, but not the same’

 

Scott

 

On Oct 21, 2014, at 4:24 PM, Michael R. Gettes <> wrote:

 

NIST 1 != Bronze.

NIST 2 != Silver.

 

They are comparable, but not the same.

 

/mrg

 

On Oct 21, 2014, at 4:19 PM, Brett Bieber <> wrote:

That document doesn't mention specifications such as NIST Levels 1 (Bronze), 2 (Silver), 3, 4, directly, but instead generalizes the importance of common standards, requirements, & accountability.