FISMA Compliance
Improving financial management and information security has been an
important priority of the federal government for many years. The President's
Management Agenda identified improved financial management as one of its five
government-wide initiatives. The President's goal is to ensure that federal
financial management systems produce accurate and timely information to support
operating, budget, and policy decisions.
Supporting the President's goal, Congress has enacted several laws
intended to improve federal financial management and information systems
security. The Information Technology Management Reform Act of 1996 (Public Law 104-106) and the Federal Information
Security Management Act of 2002 (Public Law 107-347) create mandates for
agencies to take specific steps to ensure the security of Federal information
systems. The Federal Information Security Management Act of 2002 (FISMA)
requires agencies to perform annual reviews and report to the Office of
Management and Budget on their information systems' security programs. This means that agencies need
a comprehensive approach to policy, auditing, reporting and
remediation is order to satisfy FISMA requirements.
Soft Tech Consulting FISMA compliance support services focus on risk
assessments, C&A, privacy impact analysis, security categorization and
evaluating the effectiveness of common and system specific security controls,
Each of the eight components of a FISMA compliance security program are
addressed by our methodology. Using guidance from NIST, OMB and GAO, our
high-level activities and measurable deliverables provide compliance support
services quickly and effectively.
For more information about our FISMA Compliance services, please
contact us.
|