FISMA
What is FISMA?
The Federal Information Security Modernization Act requires federal agencies to implement comprehensive security programs for their information systems.
Terms that appear alongside fisma
Each of these is named in at least one of the same controls as fisma. The number is how many controls name both.
- nist 8 shared controls
- cybersecurity 8 shared controls
- authorization 8 shared controls
- information security 7 shared controls
- fedramp 7 shared controls
- cisa 7 shared controls
- critical infrastructure 6 shared controls
- policy 5 shared controls
Frameworks that govern fisma
What the standards actually require on fisma
Requirements naming fisma across 4 standards, quoted from the control text.
Coordination positions IRS Pub 1075 within the broader US federal + state + and industry security landscape. (1) NIST Standards: NIST SP 800-53 Rev 5 (primary control set incorporated by reference Section 9.3) + NIST SP 800-53A (assessment methodology) + NIST...
IRSPub1075-CoordNIST80053-FedRAMP-FISMA-CJIS-SSACDS-StateRevAgencies-PrivacyAct-SOC2-Industry · IRS Pub 1075 Coordination - NIST SP 800-53 Rev 5 + FedRAMP + FISMA + 26 USC 6103 + FBI CJIS + SSA CDS + State Revenue Agencies + Privacy Act + SOC 2 + Industry Frameworks + Federal Sectoral →Where a cloud product or service holds a FedRAMP authorization at a FIPS 199 impact level, agencies must presume the security assessment in the authorization package adequate for issuing their own authorization to operate at or below that level, as long as the...
fedramp-rev-5::G.2 · G.2 Presumption of adequacy and its limits →Provide security status reporting per Section 3.6 to System Owners + ISSO + AO + CISO + senior leadership. Apply risk score aggregation including: vulnerability scoring (CVSS v4.0 + EPSS + KEV catalog) + asset criticality scoring + threat intelligence overlay...
NISTSP137-4 · Security Status Reporting and Risk Score Aggregation →Because sector rules increasingly require appropriate cryptography and regulators are expected to require the new PQC standards and set deprecation dates for older ones, the organisation identifies the regulatory bodies and laws that apply in its region and se...
netherlands-pqc-migration-handbook-aivd-cwi-tno-2nd-edition-2024::REG · Keep an inventory of regulatory requirements and standards developments →Questions people ask about fisma
What is FISMA?
Why is FISMA important for compliance?
Which compliance frameworks address FISMA?
Where can I learn more about FISMA?
See how FISMA applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.