this post was submitted on 03 Apr 2026
680 points (98.7% liked)

Comic Strips

23114 readers
2894 users here now

Comic Strips is a community for those who love comic stories.

The rules are simple:

Web of links

founded 2 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] NaibofTabr@infosec.pub 4 points 1 day ago (1 children)
[–] Draegur@lemmy.zip 1 points 18 hours ago (1 children)

Wow it's almost as though somebody in there reads xkcd and knows about correct horse battery staple!

[–] NaibofTabr@infosec.pub 1 points 3 hours ago

The folks at NIST know what they're talking about. The US government directed them to develop security policy for government information systems in 2002 (FISMA) - they've been thinking about how to do this properly for 24 years.

If you happen to work for a US government agency of any kind, you can basically tell your boss "NIST guidance says we should do X" and compliance is technically required by law (within the context of security policies that apply to your agency's work area). If you work for a company that does business with the US government, there are similar compliance policies also published by NIST that you should be following (and your company could lose its contracts if it is not compliant).