Data Security Related Links

Helpful Sites

• National Institute of Standards and Technology (NIST) FIPS 140-2 Standard Cryptographic Module Validation Program (CMVP)
• CDC Unified Process
• Microsoft^® Security Central

Reference Documents

• CDC’s Registry Plus™ Security Features [PDF-35KB]
• Software Product Security Evaluation [PDF-176KB] to request permission to install software on CDC’s network
• Moderate NIST Control Document [PDF-400KB] outlines security reviews prior to the installation of software applications on CDC’s network
• Standards for Cancer Registries Volume III: Standards for Completeness, Quality, Analysis, Management, Security and Confidentiality of Data, especially Chapter 6, “Security and Confidentiality”
• U.S. General Services Administration SmartBUY Program Overview
• Memo M-06-16 [PDF-118KB] “Protection of Sensitive Agency Information” from the Executive Office of the President, OMB
• Memo M-07-16 [PDF-227KB] “Safeguarding Against and Responding to the Breach of Personally Identifiable Information” from the Executive Office of the President, OMB