R. Ross

发表

Guide for the Security Certification And Accreditation of Federal Information Systems

R. Ross, Ronald S. Ross, 2004 .

Minimum Security Requirements for Federal Information and Information Systems

L. Johnson, R. Ross, S. Katzke, 2006 .

Managing Risk from Information Systems: An Organizational Perspective [Second Public Draft]

R. Ross, S. Katzke, Arnold Johnson, 2008 .

Managing Information Security Risk: Organization, Mission, and Information System View | NIST

R. Ross, 2011 .

Standards for Security Categorization of Federal Information and Information Systems

Marianne M. Swanson, R. Ross, 2004 .

Recommended Security Controls for Federal Information Systems

Marianne M. Swanson, G. Stoneburner, R. Ross, 2005 .

Supplemental Guidance on Ongoing Authorization: Transitioning to Near Real-Time Risk Management

Kelley L. Dempsey, Kevin M. Stine, R. Ross, 2014 .

Recommended Security Controls for Federal Information Systems | NIST

Marianne Swanson, Ronald S. Ross, Annabelle Lee, 2005 .

Recommended Security Controls for Federal Information Systems [includes updates through 4/22/05] | NIST

Marianne Swanson, Ronald S. Ross, Annabelle Lee, 2005 .

Managing Risk from Information Systems - Second Public Draft | NIST

Marianne Swanson, Ronald S. Ross, G Stoneburner, 2008 .

Information Security Education for the Next Millennium: Building the Next Generation of Practitioners (Forum)

Rayford B. Vaughn, Ravi S. Sandhu, Cynthia E. Irvine, 1999, ACSAC.

Guide for Assessing the Security Controls in Federal Information Systems and Organizations: Building Effective Security Assessment Plans

Patricia R. Toth, Stuart W. Katzke, Leighton R. Johnson, 2008 .

Guide for security-focused configuration management of information systems

Ronald S. Ross, Kelley L. Dempsey, Sarbari Gupta, 2011 .

Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems [including updates as of 3-21-2018]

Ronald S. Ross, Michael McEvilley, Janet C. Oren, 2018 .

Guide for security-focused configuration management of information systems

Kelley L. Dempsey, Sarbari Gupta, Arnold Johnson, 2011 .

SP 800-128. Guide for Security-Focused Configuration Management of Information Systems

Ronald S. Ross, Kelley L. Dempsey, Sarbari Gupta, 2011 .

Recommended Security Controls for Federal Information Systems | NIST

Marianne M. Swanson, Annabelle Lee, G. Stoneburner, 2005 .

Enhanced Security Requirements for Protecting Controlled Unclassified Information

Ronald S. Ross, Gary Guissanie, Ryan Wagner, 2020 .

Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171

Ronald S. Ross, Gary Guissanie, Richard Graubart, 2021 .

Developing cyber resilient systems:

Victoria Pillitteri, Richard Graubart, Deborah Bodeau, 2019 .

(Draft) Assessing Enhanced Security Requirements for Controlled Unclassified Information

Ronald S. Ross, Victoria Pillitteri, Kelley Dempsey, 2021 .

Minimum Security Requirements for Federal Information and Information Systems

L. Johnson, R. Ross, S. Katzke, 2006 .

Managing Enterprise Risk in Today's World of Sophisticated Threats: A Framework for Developing Broad-Based, Cost-Effective Information Security Programs

Ron Ross, R. Ross, 2006 .

Protecting controlled unclassified information in nonfederal systems and organizations

R. Ross, Mark Riddle, K. Dempsey, 2016 .