Federal Information Security Management Act
A statute (Title III, P.L. 107-347) that requires agencies to assess risk to information systems and provide information security protections commensurate with the risk. FISMA also requires that agencies integrate information security into their capital planning and enterprise architecture processes, conduct annual information systems security reviews of all programs and systems, and report the results of those reviews to OMB.
Senses
Title III of the E-Government Act requiring each federal agency to develop, document, and implement an agency-wide program to provide information security for the information and information systems that support the operations and assets of the agency, including those provided or managed by another agency, contractor, or other source.
Classifications
Entity Type
Sensitivity
Information Class
Variants
- acronym
- FISMA
- synonym
- Federal Information Security Modernization Act
- plural
- Federal Information Security Management Acts
- possessive
- Federal Information Security Management Act's
- pluralpossessive
- Federal Information Security Management Acts'