Question

Please explain to me in your own words (no cut and past) what each of the following documents mean and what they are trying to accomplish.

• FIPS 140-2
• 800-145
• 800-64 Rev. 2

Answer 1

The FIPS 140-2 is a US based security standard which empowers use of cryptographic modules. The fullform is Federal Information Processing Standard (FIPS) of Publication 140. It consideres both symmetric and asymmetric encryption.

The NIST, 800-45 gives a precise and standard definition for cloud computing platform which gives broad access to network along with on demand service. The services are elastic and user need to pay on usage basis.

800-64 Rev 2 is the documentation in the field of software development life cycle which facilitates risk management framework by providing risk analysis aid. By judging risk it helps to provide risk management services.