Federal Information Security Management Act of 2002

The Federal Information Security Management Act of 2002 ("FISMA", 44 U.S.C. § 3541, et seq.) is a United States federal law enacted in 2002 as Title III of the E-Government Act of 2002 (Pub.L. 107-347, 116 Stat. 2899). The act recognized the importance of information security to the economic and national security interests of the United States. The act requires each federal agency to develop, document, and implement an agency-wide program to provide information security for the information and information systems that support the operations and assets of the agency, including those provided or managed by another agency, contractor, or other source.

FISMA has brought attention within the federal government to cybersecurity and explicitly emphasized a "risk-based policy for cost-effective security." FISMA requires agency program officials, chief information officers, and inspectors general (IGs) to conduct annual reviews of the agency’s information security program and report the results to Office of Management and Budget (OMB). OMB uses this data to assist in its oversight responsibilities and to prepare this annual report to Congress on agency compliance with the act. In FY 2008, federal agencies spent $6.2 billion securing the government’s total information technology investment of approximately $68 billion or about 9.2 percent of the total information technology portfolio.

Read more about Federal Information Security Management Act Of 2002:  Purpose of The Act, Implementation of FISMA, Compliance Framework Defined By FISMA and Supporting Standards, Critique, Status

Famous quotes containing the words federal, information, security, management and/or act:

    I am willing to pledge myself that if the time should ever come that the voluntary agencies of the country together with the local and state governments are unable to find resources with which to prevent hunger and suffering ... I will ask the aid of every resource of the Federal Government.... I have the faith in the American people that such a day will not come.
    Herbert Hoover (1874–1964)

    English literature is a kind of training in social ethics.... English trains you to handle a body of information in a way that is conducive to action.
    Marilyn Butler (b. 1937)

    The contention that a standing army and navy is the best security of peace is about as logical as the claim that the most peaceful citizen is he who goes about heavily armed. The experience of every-day life fully proves that the armed individual is invariably anxious to try his strength. The same is historically true of governments. Really peaceful countries do not waste life and energy in war preparations, with the result that peace is maintained.
    Emma Goldman (1869–1940)

    People have described me as a “management bishop” but I say to my critics, “Jesus was a management expert too.”
    George Carey (b. 1935)

    Old age equalizes—we are aware that what is happening to us has happened to untold numbers from the beginning of time. When we are young we act as if we were the first young people in the world.
    Eric Hoffer (1902–1983)