From the course: CompTIA CySA+ (CS0-002) Cert Prep: 7 Compliance and Assessment

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Certification and accreditation

Certification and accreditation

From the course: CompTIA CySA+ (CS0-002) Cert Prep: 7 Compliance and Assessment

Start my 1-month free trial

Certification and accreditation

- [Instructor] The government is, by necessity, very serious about cybersecurity, and has had rigorous cybersecurity programs in place for decades, long before the private sector began considering information security issues. In order to manage the complexity of securing many diverse systems, the US government developed standardized evaluation models designed to help them understand the security requirements of different situations and the security capabilities of different products. In 1983, the National Security Agency issued the Trusted Computer System Evaluation Criteria, abbreviated TCSEC. The security community quickly discarded that bulky name and began referring to this book by the distinctive color of its cover, calling it The Orange Book. The Orange Book describes the security requirements that the Department of Defense used for computer systems, and the process that the government would follow when evaluating…

Contents