RFC = request for comment. It is the way standards develop on the net.

Take a look at this : http://searchwin2000.techtarget.com/...214264,00.html


[edit]
merged response from earlier post -
My argument is not stating you are wrong about that point. My point is merely the approach that one will take and the direction that they appear to be running with that information. My contention is that anyone who is looking to know how to secure a computer, secure a car, secure a building, whatever you want; they can look to history and current standards to acquire a better understanding of what must be done. Practical application will quickly follow.
Does one try to install a high tech security monitoring system without know the basics about it's functionality or the quirks inherent with it? Whoops, they just opened a vault to the outside world. Not likely. We don't have to think about the matter in terms of security at all. Look at in the terms of an electrician maybe. They need to know all the standards in the field before they go and install an electrical system that will violate code and eventually burn a building down. The electrician must be licensed, and to be licensed they must be educated. That education doesn't come from just asking questions of presupposed peers, but it will come from reading material, internships and so forth. We speak for the same goal, and we speak of a similar means. Get a good understanding of all the groundwork involved, and then learn more about the practical application of such matters. Many higher education facilies, colleges, internships, etc, will offer you much in the way of hands on experience, just be knowledgable before dabbling.
[/edit]