Chapter 9, Problem 4RQ

Explanation of Solution

Gold standard in Infosec practices:

• In InfoSec, two categories of terms describing security practices are commonly used:
  • Standards of due care and due intelligence
  • Recommended practices or best security practices
• The very best recommended practices are normally referred to as the Gold Standard.
• The gold standard demonstrates the industrial leadership, quality, and concern for the information protection.

Justification:

• csrc.nist.gov/groups/SMA/fasp/index.html, are used to publish the criteria for gold standard in InfoSec practices.
• But this site was archived in August 2015 and is now considered historical information.
• There are no published criteria for the gold standard now.