FISMA

Federal information systems contain confidential information and are subject to frequent threats, thus necessitating FISMA, although skills-starved government agencies have experienced consistent difficulties shoring up their weaknesses. The good news is Trustwave can help you respond to FISMA's prescriptive requirements.

FISMA facts and consequences:

• FISMA decrees that a comprehensive information security program should include continuous monitoring and procedures for detecting, reporting, and responding to incidents
• The Federal Information Security Modernization Act of 2014 amended the Federal Information Security Management Act of 2002 with changes, including introducing incident reporting requirements and invoking authority for the U.S. Department of Homeland Security
• The federal Office of Management and Budget annually reports to Congress on the status of FISMA compliance across the federal government
• Penalties for non-compliance include reduction in federal funding and censure from future contracts by Congress