Resources for Federal Information Security Management Act (FISMA)

NIST drafts guidance on risk management

www.gcn.com

The National Institute of Standards and Technology has issued a draft of a new report that may become essential reading for government managers, who all must be sure their information technology systems are compliant with the Federal Information Security Management Act.

NIST's Information Technology Laboratory developed the report, "Managing Risk from Information Systems: An Organizational Perspective".

Ron Ross, the NIST FISMA implementation project leader, is an author, along with Stu Katzke, Arnold Johnson, Marianne Swanson and Gary Stoneburner.

This report tackles the problem of dealing with risk. FISMA requires that agencies make their IT security decisions based on risk assessments. The report defines what risk is, as well as how to apply the NIST Risk Management Framework to government IT systems.

View the Resource

Share or bookmarklet this web page at: