What is FIPS 200 (Federal Information Processing Standard Publication 200)?

Information Security 0

11th November, 2013

FIPS 200 is the acronym for Federal Information Processing Standard Publication 200. It is the second of the mandatory security standards, FIPS 199 being the first one, defined by the Federal Information and Information Systems of the United States Federal Government. FIPS 200 is the Standards for Security Categorization.

FIPS 200 standard emphases more security during the development, implementation, and operation of more secure information systems.

FIPS 200 defines following 17 security areas covered under confidentiality, integrity, and availability (CIA) of federal information systems and the information processed, stored, and transmitted by those systems.

These security areas are:

1. Access Control;
2. Awareness and Training;
3. Audit and Accountability;
4. Certification, Accreditation, and Security Assessments;
5. Configuration Management;
6. Contingency Planning;
7. Identification and Authentication;
8. Incident Response;
9. Maintenance;
10. Media Protection;
11. Physical and Environmental Protection;
12. Planning;
13. Personnel Security;
14. Risk Assessment;
15. Systems and Services Acquisition;
16. System and Communications Protection; and
17. System and Information Integrity

FIPS 200 Implementation

Implementation of FIPS 200 requires policies and procedures as per the organizational structure and roles and responsibilities. These policies and procedures are the foundation and basis of the implementation of the FIPS 200 in an organization. DQS India provides implementation guidance for FIPS 200 to the organizations across the world. You can rely on our services as we have Security Experts with years of experience of working with different Security Standards, Technologies and Domains. We can help in the development of policies and procedures from the scratch, provide guidance for implementation leading to the implementation assessments.