Office of Management and Budget (OMB) Circular A-130, Management of Federal Information Resources, requires managers of publicly accessible information repositories or dissemination systems that contain sensitive but unclassified data to ensure sensitive data is protected commensurate with the risk and magnitude of the harm that would result from the loss, misuse, or unauthorized access to or modification of such data. This Special Publication provides guidance to the selection and implementation of the TLS protocol while making effective use of Federal Information Processing Standards (FIPS) approved cryptographic algorithms, and suggests that TLS 1.0 configured with FIPS based cipher suites is the appropriate secure transport protocol.
Related white papers
Cyber Security - Growing Risk From Growing Vulnerability
Interconnections across and among cyber and physical systems are increasing. Our dependence on these interconnected systems is also rapidly increasing, and even short-term disruptions can have major consequences. Reported attacks...
An Introduction to Cryptography
Cryptography is the stuff of spy novels and action comics. Kids once saved up Ovaltine labels and sent away for Captain Midnight's Secret Decoder Ring. Almost everyone has seen a...
Lackland Air Force Base
The Center, an Air Staff Forward Operating Agency (FOA), manages both classified and unclassified computer networks and needed a new PC system that would both increase security of technology and...
Raising the bar for hackers (Security)
Many production plants are linked to the Internet and utilize standard software, which makes them a potential target for hackers. Siemens is making these systems more secure.
e-Crime: the Vladimir Levin Episode
The sentencing of Vladimir Levin on 24 February 1998 brought to a conclusion the most high profile case of cyber crime to date. The saga - which almost resembles a...
IBM's SPARCLE Policy Management Tool Is Helping Organizations Create, Implement and Monitor Policies That Protect Personal Identifiable Information
Following a recent wave of identity theft, spamware and online fraud, consumers are demanding that businesses safeguard their personal information from exploitation by cybercriminals and government officials have responded with...
Software Company Creates Automated "Database Factory" Using SQL Server 2008
CyberSavvy believes in using software automation to make life easier for its customers. Its Software as a Service solution, DataPlace, which it terms a "Database factory," enables technical and business...


