Resources for Federal Information Security Management Act (FISMA)

Requirements to improve security may hurt more than they help

federaltimes.com

With threats of cyber attacks mounting, federal chief information officers say ensuring data security is one of their most important roles. But in a survey released last month, many say the mandates they must comply with may be impeding — rather than improving — security.
The Federal Information Security Management Act became law five years ago requiring agencies to establish controls to protect sensitive data contained in information technology systems. It requires agencies to inventory systems and to develop standards for categorizing information contained within them by risk.
The Office of Management and Budget has complicated matters, some experts say, by placing even more demands on CIOs, including mandates that all laptops be encrypted and a governmentwide plan to cut down on the number of Internet connections.

View the Resource

Share or bookmarklet this web page at: