DRAFT - Generally Accepted System Security Principles

Datapro Summary

The National Research Council's Computers at Risk report recommended the development of a comprehensive set of Generally Accepted System Security Principles (GSSP) which could be used as a basis for resolving differences between U.S. and foreign criteria for trustworthy systems and as a vehicle for shaping input to international discussions of security and safety standards. This Exposure Draft represents the first edition; providing the background, framework, and pervasive principles of the GSSP.

Author
Prepared by the GSSP Draft Sub-committee
August 18, 1994

Volume 1: Background, Framework and Pervasive Principles

• Background
• Definition of Key Terms
• Framework
• Pervasive Principles
• Appendix A - Guidance from Computers at Risk
• Appendix B - Protection Strategies
• Finis