[Appendix F] F.2 U. S. Government Organizations
Author: Simson Garfinkel & Gene Spafford
Date: 1999-02-04T00:22:36Z

#

| Appendix F Organizations |

## F.2 U. S. Government Organizations

### F.2.1 National Institute of Standards and Technology (NIST)

The National Institute of Standards and Technology (formerly the National Bureau of Standards) has been charged with the development of computer security standards and evaluation methods for applications not involving the Department of Defense (DoD). Its efforts include research as well as developing standards.

More information on NIST's activities can be obtained by contacting:

> NIST Computer Security Division A-216
> Gaithersburg, MD 20899
> +1-301- 975-3359

> http://www.nist.gov

NIST operates the Computer Security Resource Clearinghouse:

> http://csrc.ncsl.nist.gov/

NIST also operates the National Technical Information Service from which you can order a variety of security publications. See Appendix D for details.

### F.2.2 National Security Agency (NSA)

One complimentary copy of each volume in the "Rainbow Series" of computer security standards can be obtained from the NSA. The NSA also maintains lists of evaluated and certified products. You can contact them at:

> Department of Defense
> National Security Agency
> ATTN: S332
> 9800 Savage Road
> Fort George Meade, MD 20755-6000
> +1 301-766-8729

> http://www.nsa.gov:8080

In addition to other services, the NSA operates the National Cryptologic Museum in Maryland. An online museum is located at:

> http://www.nsa.gov:8080/museum

F.1 Professional Organizations |  | F.3 Emergency Response Organizations