Legal and Privacy Issues in Information Security, 3rd Edition

The Federal Information Security Modernization Act

The Federal Information Security Modernization Act of 2014 recognized the complex nature of the federal computing environment.¹¹ It also sought to improve oversight of federal information security activities and provide a framework for making sure that information security controls are effective. This is important because the U.S. government anticipates spending over $18 billion on cybersecurity in the fiscal year 2021.¹²

Purpose and Scope

FISMA defines information security as protecting IT systems to provide confidentiality, integrity, and availability.¹³ IT systems must be protected from unauthorized use, access, disruption, modification, and destruction.

FISMA has six main provisions. The ...