Information Systems Security Manager (ISSM) - Marine Corps ...

NAVSO P-5239-04SEPTEMBER 1995primarily towards Program Managers, it focuses on the processes andrequirements needed to certify and accredit information systems.*5239-13 Certification & Accreditation (C&A) GuidebookThis document provides procedure guidance and decision aids for conductingC&A process activities to determine the suitability of a system to operate in atargeted operational environment based on the degree of assurance requiredand other factors related to a system .5239-14 Security Architecture GuidebookThis document serves as a compendium of proven solutions to DON INFOSECproblems to assist INFOSEC systems engineering and customer supportprofessionals to determine whether there are precedents for a customer’sproblem and to facilitate finding reusable solutions to common INFOSECproblems.*5239-15 Controlled Access Protection Guide (Published)This document aids the user and security staff in understanding the DoNControlled Access Protection policy, its relationship to C2, and techniquesactivities can use to acquire CAP-compliant systems.*5239-16 Risk Assessment GuidebookThis document provides policy and step-by-step procedures to individualsresponsible for accomplishing a risk analysis on systems. Provides methods forthe determination of system sensitivity and criticality, accomplishment of riskassessment and economic analysis, and determination of environmental hazardsand threats to DoN information systems.*5239-18 Security Test and Evaluation GuidebookThis document provides information on how to perform security test andevaluation (ST&E) for information systems, embedded computers, andnetworks. It addresses microcomputers, minicomputers, mainframes, andspecialized computers in both stand-alone and networked environments. Theinstruction provides general guidance and procedures to security managers andusers for conducting ST&Es.*5239-19 Computer Incident Response GuidebookA-11