The U.S. Department of Commerce’s NIST (National Institute of Standards and Technology) recently released Special Publication 800-53, a report titled “Recommended Security Controls for Federal Information Systems and Organizations.”The 237-page report discusses the latest suggested practices for minimizing network vulnerabilities in government agencies, but its lessons carry over to any business, school, or organization with Internet access. It also discusses compliance with FIPS (Federal Information Processing Standards) 199 and 200 security levels. The report was prepared by the Computer Security Division of NIST’s Information Technology Laboratory.

http://csrc.nist.gov/publications/PubsSPs.html