What do you think the Authority Document should be called in simple terms? Look at the title of the Authority Document on the document itself. Don't try to be overly specific here. What would the shorthand name be? Enter that into the field.
Rules
-
Write the originating body, country, state, etc. first when it isn't present in the title of the AD.
-
When the AD explicitly states what the document may be cited as, write that.
-
Write the publication, series, etc. title and number, when a preferred citation is not explicitly stated within the AD.
-
Write the title or sequential main portion of an AD when a series, publication, etc. number or preferred citation is not explicitly stated within the AD.
-
Capitalize the first letter of every word except articles: a, an, the; coordinating conjunctions: and, but, or, for, nor, etc.; and prepositions (fewer than five letters): on, at, to, from, by, etc.
-
Never just add a regulation number, even if you are adding all the way down to a section. Nobody memorizes those numbers. Add the title at the end as well.
- If the title is very generic (such as Business Continuity Planning Handbook), add the Originator as well to differentiate it.
- Common Names can (and often do) have acronyms. Published names do not.
Rule | Correct | Incorrect |
---|---|---|
1 | Colorado Revised Statutes, Section 6-1-716, Notification of Security Breach | Notification of Security Breach, Colorado C.R.S. 6-1-716 |
2 | Idaho Credit Report Protection Act | Credit Report Protection Act, Idaho |
3 | AR 380-19 | Information Systems Security Army Regulations 380-19 |
4full title: Interagency Guidance on Response Programs for Unauthorized Access to Customer Information and Customer Notice |
||
4 | Response Programs for Unauthorized Access | Response Program Guidance for Unauthorized Access |
6 | 28 CFR Part 23, Criminal Intelligence Systems Operating Policies | 28 CFR Part 23 |
7 & 8 |
FFIEC Business Continuity Planning (BCP) Handbook
|
Business Continuity Planning (BCP) Handbook |