Advisory Memoranda


The advisory or information memoranda address ad hoc issues of a general nature relating to national security systems issues. These advisories, as issued, are NOT binding upon U.S. Government departments and agencies.

NSTISSAM INFOSEC 1-99
The Insider Threat to U.S. Government Information Systems, dated July 1999
NSTISSAM INFOSEC 1-00
Advisory Memorandum for the Use of the Federal Information Processing Standards (FIPS) 140-1 Validated Cryptographic Modules in Protecting Unclassified National Security Systems - dated 8 February 2000
NSTISSAM INFOSEC 2-00
Advisory Memorandum for the Strategy for Using the National Information Assurance Partnership (NIAP) for the Evaluation of Commercial Off-The-Shelf (COTS) Security Enabled Information Technology Products, dated 8 February 2000
NSTISSAM INFOSEC 3-00
Advisory Memorandum on WebBrowser Security Vulnerabilities, dated August 2000
NSTISSAM COMSEC 1-85
Advisory Memorandum on Release of Communications Security Equipment, Material or Information to Foreign Enterprises - dated 29 October 1985
NSTISSAM COMSEC 1-98
AN/CYZ-10/10A Data Transfer Device Training - dated August 1998
NSTISSAM COMPUSEC 1-87
Advisory Memorandum on Office Automation Security Guideline - dated 16 January 1987
NSTISSAM COMPUSEC 1-98
The Role of Firewalls and Guards in Enclave Boundary Protection - dated December 1998
NSTISSAM COMPUSEC 1-99
Advisory Memorandum on the Transition From the Trusted Computer System Evaluation Criteria to the International Common Criteria for Information Technology Security Evaluation, dated 11 March 1999
NSTISSAM TEMPEST 1-00
Maintenance and Disposition of TEMPEST Equipment, dated December 2000
CNSSAM IA 1-04
Advisory Memorandum for Information Assurance (IA) - Security Through Product Diversity - dated July 2004
CNSSAM IA 2-04
Advisory Memorandum for Information Assurance (IA) - Retirement of Data Encryption Standard (DES) Based Cryptography to Protect National Security Systems - dated November 2004; revised March 2005
CNSSAM IA 1-10
Advisory Memorandum for Information Assurance (IA) - Reducing the Risk of Removable Media in National Security Systems - dated December 2010
CNSSAM IA 1-12
Advisory Memorandum for Information Assurance (IA) - NSA-Approved Commercial Solution Guidance - dated June 2012

To obtain an issuance not offered in the CNSS Library, refer to our Contact List for more information.