Resources for Federal Information Security Management Act (FISMA)

The FISMA paradigm

www.gcn.com

There is no question that the Federal Information Security Management Act has changed the way information technology managers do their jobs. It has changed the way agencies write requests for proposals and set standards for vulnerability and configuration scanning — and it eats up days and weeks in the production of reports. The question remaining is whether federal IT systems are more secure now.

Rich Kellet, IT security officer at the General Services Administration’s Citizen Services and Communications office, gave a qualified yes. Requirements for monthly vulnerability scans with deadlines for correcting critical problems have resulted in more secure systems. But Kellet described himself as skeptical about the overall requirements for detailed reporting to the Office of Management and Budget.

View the Resource

Share or bookmarklet this web page at: