NIST Special Publication 800-36: Guide To Selecting Information Technology Security Products

The selection of information technology security products is an integral part of the design, development, and maintenance of an infrastructure that ensures confidentiality, integrity, and availability of mission-critical information. NIST Special Publication 800-36, “Guide to Selecting Information Technology Security Products,” defines broad security product categories and specifies product types within those categories. It provides a list of characteristics and pertinent questions an organization should ask when selecting such products.