# Best Practices Document for Federal Cybersecurity

**URL:** <https://forum.anaconda.com/t/best-practices-document-for-federal-cybersecurity/49734>\
**Category:** Getting Started\
**Created:** [January 27, 2023, 4:38pm UTC](https://forum.anaconda.com/t/best-practices-document-for-federal-cybersecurity/49734 "2023-01-27T16:38:51Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![david.gietka](https://avatars.discourse-cdn.com/v4/letter/d/c2df01/32.png) [@david.gietka](https://forum.anaconda.com/u/david.gietka)\
**Post date:** [January 27, 2023, 4:38pm UTC](https://forum.anaconda.com/t/best-practices-document-for-federal-cybersecurity/49734/1 "2023-01-27T16:38:52Z")

</div>

Hello Anaconda Community,  
I am not sure if this is the correct topic area, but my office is new to using Anaconda and is looking for best practices for cybersecurity and FISMA compliance such as:

1. Code/library scanning for CVE findings
2. Governance and approval of new libraries
3. Difference between the conda-forge channel, the default, channel, and managing dependencies
4. Segregating applications to different environments and version management.
5. Managing anaconda environments across DEV, TEST, and PROD systems in the infrastructure.

Any advice would be greatly appreciated.

---

<div class="post-metadata">

**Author:** ![Subham1](https://avatars.discourse-cdn.com/v4/letter/s/80bc00/32.png) [@Subham1](https://forum.anaconda.com/u/Subham1)\
**Post date:** [December 4, 2025, 11:45am UTC](https://forum.anaconda.com/t/best-practices-document-for-federal-cybersecurity/49734/2 "2025-12-04T11:45:37Z")

</div>

Hi @david.gietka, I am in similar situation as you mentioned in your question, Since it was asked 2 years ago, You should have figured out, Can you Advise on the questions you asked.

Any help would be greatly appreciated.