In which NIST special publication can you find guidance regarding mobile computers using FIPS 140-2 validated cryptographic modules?

In which NIST special publication can you find guidance regarding mobile computers using FIPS 140-2 validated cryptographic modules?

• A. FIPS 140-2
• B. SP 800-55
• C. SP 800-53a
• D. SP 800-115

Answer: (B)

The appropriate reference for guidance regarding mobile computers utilizing FIPS 140-2 validated cryptographic modules is found in a specific NIST special publication that directly addresses security controls for information systems, particularly concerning the security assessments and measurements of those systems. FIPS 140-2, while providing the standards for security requirements for cryptographic modules, does not specifically focus on mobile computers. SP 800-55 outlines security metrics and performance measures, but does not directly provide guidance on mobile computing security. SP 800-53a, which is an assessment guide for security and privacy controls, deals with the evaluation of existing controls but lacks a direct focus on mobile computing scenarios that specifically reference FIPS 140-2. SP 800-115, on the other hand, provides guidelines for testing security and includes methodologies for conducting security assessments, which may involve cryptographic validation but does not emphasize mobile computing usage of these cryptographic modules. Thus, the best choice for guidance specifically related to the use of FIPS 140-2 validated cryptographic modules in the context of mobile computers would typically rest in a standard that directly deals with implementing effective and secure methodologies for mobile device management and the protection of information, which is comprehensively covered in SP 800-55

The appropriate reference for guidance regarding mobile computers utilizing FIPS 140-2 validated cryptographic modules is found in a specific NIST special publication that directly addresses security controls for information systems, particularly concerning the security assessments and measurements of those systems.

FIPS 140-2, while providing the standards for security requirements for cryptographic modules, does not specifically focus on mobile computers. SP 800-55 outlines security metrics and performance measures, but does not directly provide guidance on mobile computing security. SP 800-53a, which is an assessment guide for security and privacy controls, deals with the evaluation of existing controls but lacks a direct focus on mobile computing scenarios that specifically reference FIPS 140-2.

SP 800-115, on the other hand, provides guidelines for testing security and includes methodologies for conducting security assessments, which may involve cryptographic validation but does not emphasize mobile computing usage of these cryptographic modules.

Thus, the best choice for guidance specifically related to the use of FIPS 140-2 validated cryptographic modules in the context of mobile computers would typically rest in a standard that directly deals with implementing effective and secure methodologies for mobile device management and the protection of information, which is comprehensively covered in SP 800-55