Pub. L. 107-347, Title III, Federal Information Security Management Act of 2002

Summary

Requires each agency to run a risk-based information security program, inventory its systems, and report every year, with yearly independent evaluations by inspectors general. It directs NIST to issue standards for categorizing systems and minimum security requirements.

Read it on www.govinfo.gov

Topics

• Security programs and FISMA reporting
• Risk management and controls

Replaces

• Pub. L. 106-398, Title X, Subtitle G, Government Information Security Reform (superseded)
• Pub. L. 100-235, Computer Security Act of 1987 (superseded)

Replaced by

• Pub. L. 113-283, Federal Information Security Modernization Act of 2014 (in effect)

What FedXchange has recorded

No changes recorded. The watch records a new document and any change in its status.