Resources for Federal Information Security Management Act (FISMA)

Privacy central to new FISMA guidance

www.fcw.com

The Office of Management and Budget has published guidance for agencies to report how they comply with the Federal Information Security Management Act (FISMA) for fiscal 2008. The guidance published July 16 directs agencies to take a risk-based view of information security by requiring continuous monitoring of security controls.

The guidance has additional questions related to updates of security policies and new privacy reporting requirements, Clay Johnson, OMB's deputy director for management, said in a memo that accompanied the guidance.

The FISMA reports are due Oct. 1. OMB and Congress use these reports to evaluate agency and governmentwide security performance, so accuracy is critical, Johnson said.

View the Resource

Share or bookmarklet this web page at: