Security Standards-Government and Commercial
L. Kirk Barker, Larry D. Nelson · AT&T Technical Journal · 1988
Computer security standards are needed to reduce the cost of security products and to allow for interoperability and evaluation. Several national and international groups are trying to standardize approaches to information security for certain applications. This paper describes and compares three types of standards activities: United States government standards, financial standards, and standards developed for the International Standards Organization Open Systems Interconnection Basic Reference Model.