developed through a
collaborative effort by organizations in the U.S. Government and
industry, and issued by NSA. Intended for security managers and
system security engineers as a tutorial and reference document
about security problems in information systems and networks, to
improve awareness of tradeoffs among available technology
solutions and of desired characteristics of security approaches
for particular problems. (See: ISO 17799, [SP14].)