FISMA Compliance

FISMA stands for Federal Information Security Management Act also known as the E-Government Act of 2002. The FISMA Act was passed by US congress on December 2002 but was reformed in 2014 (refer to  Federal Information Security Modernization Act of 2014). Over several years of working with the DoD and being actively involved in high-level Commercial working groups, we are fully aware of current trends and active FISMA Compliance related guidance. Equipped with this knowledge, we developed a custom-tailored approach to preparing clients for positive accreditation with risk management framework at its core. When it pertains to FISMA compliance, agencies face a dual responsibility. First, is to meet the specific requirements established by NIST in support of the FISMA requirements. The second, is to be able to provide a risk-appropriate level of assurance that critical information security controls are operationally effective and producing the intended outcomes.

In the beginning, only agencies within the Federal Government were required to follow FISMA compliance. Then, State Agencies who administer federal programs had to follow suite. This would include Medicare, Medicaid, unemployment insurance, student loans, etc. Now, it has been expanded to the private sector including any companies performing projects supporting or funded by the U.S. Federal Government.