What is FISMA? Part II.
This is a continuation of the previous article, “What is FISMA?“.
Implement - At this stage, security controls are implemented. This requires taking all of the information in the previous steps and applying them in a practical manner to the information systems. For example, if a system was given a security of categorization of Low from the Categorize step, the Low set of controls from NIST 800-53 would be implemented. In addition, any supplemental controls that management deemed necessary, would also be implemented. Read more
What is FISMA?
The Federal Information Security Management Act (FISMA) is part of the E-Government Act, which became a law in December 2002. Title III of the E-Government Act is FISMA. FISMA basically requires all government agencies to perform a Risk Based methodology on all information systems run by agencies and their contractors. Read more
Certification and Accreditation
Certification and Accreditation is a term used within the federal government sector to identify the process to compliance with the Federal Information Systems Management Act (FISMA). The public, Department of Defense, Health Care Providers, Legal, and Financial sectors require similar “Certification” processes. Regardless, the outcome of each of the “Audit” processes is; Security certification and accreditation are important activities that support a risk management process and are an integral part of an agency’s information security program. First, let’s explore the meaning: Read more
Access Controls
What are Access Controls? Access Controls provide the ability to control allowance of the use of an object by an entity. For example, a locked door denies the ability of a person to enter a house. The proper key would unlock the door then allow a person to enter the house through the door. Read more
Subscribe through Feedburner
