Sources and Annotated Bibliography on Security Systems and Risk Management Framework

SOURCES AND ANNOTATED BIBLIOGRAPHY
Student’s Name
Course
Date
Sources
The most significant information will be security systems and their functionality. These sources outline the historical development of DITSCAP in a step-by-step process. They offer ideas that make it easier to understand the existing situation and the circumstances that cause change. The material also elaborate on the principles and procedures for establishing security applicable to Corporate America.
Other types of sources will include studies on risk management framework. This protocols are vital in deriving strategies essential in enhancing cybersecurity. Sources under this topic give knowledge on the adoption and utilization of the modified form by the federal governments and commercial enterprises. The materials aid in evaluating ways essential in examining the weaknesses and recommend strategic solutions.
Annotated Bibliography
Air Force Instruction 17-101. /static.e-publishing.af.mil/production/1/saf_cn/publication/afi17-101/afi17-101.pdf
The source provides an extensive instruction layout on risk management. The memorandum focuses on air force technology and offers an interim change to regulations. The guidance uses chapter one of Program Overview to introduce and document policies familiar with the Special Access Program. Under chapter three of RMF Roles and Responsibilities, this source offers modifications to the roles of the Authorization Official and the grade requirements. The framework drawn by the memo seeks to ensure roles and responsibilities within the Air force are effective and reflect real-world scenarios.
Chapter four describes the Risk Management Framework in seven iterative steps throughout the lifespan. The source further analyses the Approval to Connect process, outlining the various risks involved when setting up the system. The publication also discusses the security control overlays in all dimensions, including the policy and development process. Ultimately, the articles discuss the transfer of IT systems among the stakeholders in a manner that ensures accountability and safety.
Commons, Dan "DITSCAP - DoD's Answer to Secure Systems," SANS Inst., no. GSEC Practical Assignment Version 1.2e, 2002.
DITSCAP. The source provides a clear insight into bureaucratic government processes. The writing refrains from offering details on the technology protocols with the Department of Defence. However, the material shifts the audience's focus to military operations that many consider complex, bureaucratic, and rigid. The author offers an extensive outlook to secure systems with the intent of helping federal contractors and employees practice a structured and standard approach during system implementation.
Snyder, Don, James D. Powers, Elizabeth Bodine-Baron, Bernard Fox, Lauren Kendrick, and Michael H. Powell. "Improving the cybersecurity of us air force military systems throughout their life cycles." (2015).
The authors discuss ways of enhancing the cybersecurity of Military systems. The topic comes as concerns continue to grow over the latter's vulnerability to innovations. Scholars argue that the susceptibility to offensive attacks and intelligence exploitation increases significantly in the wake of globalization. Therefore, the focus of the paper is on procured subset systems in which the military has control in terms of architecture, design, interfaces, and protocols. The authors begin by defining the fundamental guidelines of profound cybersecurity management. A comparison is drawn to comprehend the current loopholes in technology policies and laws.
The sources evaluation establishes four main findings that are key in explaining the security repercussions. The author's conclusion helps the audience realize that cybersecurity is mostly an afterthought to systems rather than built-in software. Secondly, results present how cybersecurity risk management must effectively account for the impact on operational missions. The scholars also give twelve recommendations based on the major findings. The article also analyses how the Airforce would ensure the recommendations are implemented and the requirements to achieve effective cybersecurity in the department.
Pub, F. I. P. S. "Standards for security categorization of federal information and information systems." NIST FIPS 199 (2004).
Federal Information Processing. The source details the standards essential to security categorization within Federal Systems. The source is based on a Government Act passed in 2002 focusing on the significance of information systems to national security and the economy. The publication provides insight into strategies effective in providing frameworks that help the government undertake its functions.
Furthermore, the articles cover everything from efficient management and coordination to regular reporting and the upkeep of information security equipment. The paper also acknowledges the various roles the National Institute of Standards and technology perform, such as providing leadership and technical advice.
Pub, F. I. P. S. "Minimum security requirements for federal information and information systems." (2005).
The article stipulates the minimum requirements that information systems must meet. The draft provides a clear path for employees and contractors to follow in constructing efficient and reliable tech systems. It is based on a Government Act passed in 2002 focusing on the significance of information systems to national security and the economy.Specifically, the publication defines the promulgation of standards targeting information apparatus that fall within a specified range of risks.
The guidelines help federal institutions build comparable, consistent, and repeatable strategies. This approach aims to ensure due diligence and security and discuss the security control selection within organizations. The authors outline ways organizations can ensure their method is cost-effective and free of risks.
Jackson, Craig, Scott Russell, and Bob Cowles. "Beyond the Beltway-The Problems with NIST's Approaches to Cybersecurity and Alternatives for NSF Science." (2017).
The source describes the role of cybersecurity frameworks. The concept promotes effective initiatives aimed at protecting, improving, preserving, and creating tools and resources for federal institutions. The author is keen to describe why risk management is essential and its role in successful cybersecurity. The journal highlights the questionable assumptions made by NIST RMF and the associated potential challenges.
The author's subsequent explanation of the economics of cybersecurity highlights the primary strategies for retaining investments. Jackson lists the ASD essentials that are key in control implementation. The paper describes some of the crucial and effective measures the department must perform to ensure cybersecurity.
Maclean, Don. "The NIST risk management framework: Problems and recommendations." Cyber Security: A Peer-Reviewed Journal 1, no. 3 (2017): 207-217.
Don Maclean is an expert in cybersecurity keen on DLT and tech security portfolios. With thirty years of experience in the federal government, the author acknowledges the ef...