Minimum Security Requirements for Federal Information and Information Systems
Feb. 28, 2006
National Institute of Standards and Technology, Computer Security Division
William Jeffrey, Carlos M. Gutierrez
This standard is applicable to: (i) all information within the federal government other than that information that has been determined pursuant to Executive Order 12958, as amended by Executive Order 13292, or any predecessor order, or by the Atomic Energy Act of 1954, as amended, to require protection against unauthorized disclosure and is marked to indicate its classified status; and (ii) all federal information systems other than those information systems designated as national security systems as defined in 44 United States Code Section 3542(b)(2).
