Federal Information Security Management Act of 2002

E390179

The Federal Information Security Management Act of 2002 is a U.S. federal law that establishes a comprehensive framework for protecting government information systems and managing information security risks across federal agencies.

All labels observed (5)

How this entity was disambiguated

Statements (50)

Predicate Object
instanceOf United States federal law
information security law
alsoKnownAs FISMA 2002
appliesTo federal executive agencies
federal information systems
assignsRoleTo Chief Information Officers of federal agencies
Director of the Office of Management and Budget
Inspectors General of federal agencies
National Institute of Standards and Technology
Secretary of Commerce
agency heads
authorizes National Institute of Standards and Technology to develop information security standards and guidelines
basisFor NIST Federal Information Processing Standards for security
NIST Risk Management Framework
codifiedIn 44 U.S. Code
44 U.S.C. § 3541 et seq. (original codification)
country United States of America
designates Office of Management and Budget as responsible for oversight of federal information security policies
enactedBy United States Congress
exempts national security systems (with separate requirements)
focusesOn availability of federal information
confidentiality of federal information
integrity of federal information
influenced development of federal cybersecurity policies
jurisdiction federal government of the United States
objective to provide a comprehensive framework for ensuring the effectiveness of information security controls over information resources
to provide effective government-wide management and oversight of information security risks
partOf E-Government Act of 2002
publicLawNumber Public Law 107-347 (Title III)
linked to: Public Law 107-347
relatedTo Clinger-Cohen Act of 1996
E-Government Act of 2002
Federal Information Security Modernization Act of 2014
replacedBy Federal Information Security Modernization Act of 2014
requires annual independent evaluation of agency information security programs
annual reporting to Congress on information security
annual reporting to the Office of Management and Budget
development of agency-wide information security programs
implementation of security controls commensurate with risk
incident detection and response procedures
periodic risk assessments of information systems
periodic testing and evaluation of information security controls
plans for continuity of operations
security awareness training for agency personnel
shortName FISMA
signedBy George W. Bush
subjectMatter federal information systems
information security
risk management
title Title III of the E-Government Act of 2002
yearEnacted 2002

How these facts were elicited

Referenced by (11)

Full triples — surface form annotated when it differs from this entity's canonical label.

Federal Information Security Modernization Act of 2014 amends Federal Information Security Management Act of 2002
Federal Information Security Modernization Act of 2014 relatedTo Federal Information Security Management Act of 2002
EINSTEIN 2 regulatoryFramework Federal Information Security Management Act
linked to: Federal Information Security Management Act of 2002
EINSTEIN 2 regulatoryFramework FISMA
linked to: Federal Information Security Management Act of 2002
Federal Information Processing Standards relatedTo FISMA
linked to: Federal Information Security Management Act of 2002
E-Government Act of 2002 containsProvision Federal Information Security Management Act of 2002
E-Government Act of 2002 abbreviation FISMA
linked to: Federal Information Security Management Act of 2002
E-Government Act of 2002 hasComponent Title III – Federal Information Security Management Act
linked to: Federal Information Security Management Act of 2002
Federal Information Security Management Act of 2002 shortName FISMA
linked to: Federal Information Security Management Act of 2002
Federal Information Security Management Act of 2002 alsoKnownAs FISMA 2002
linked to: Federal Information Security Management Act of 2002
Office of Management and Budget for federal information security policy legalBasis Federal Information Security Management Act of 2002