Understanding FISMA Compliance: Requirements and Best Practices
Part of the larger Electronic Government Act, the Federal Information Security Management Act (FISMA) is a noteworthy piece of U.S. legislation that was passed in 2002. It creates a set of rules and specifications to protect government data and activities. With penalties for noncompliance, FISMA's jurisdiction has grown over time to include state agencies managing federal programs and private companies holding government contracts.
To safeguard sensitive data, federal agencies and relevant entities are required by FISMA to develop, record, and carry out extensive information security programs. In creating standards and ensuring compliance, the Office of Management and Budget (OMB) and the National Institute of Standards and Technology (NIST) are essential players. The OMB receives ...