Soft Tech Consulting



FISMA Compliance

Improving financial management and information security has been an important priority of the federal government for many years. The President's Management Agenda identified improved financial management as one of its five government-wide initiatives. The President's goal is to ensure that federal financial management systems produce accurate and timely information to support operating, budget, and policy decisions.

Supporting the President's goal, Congress has enacted several laws intended to improve federal financial management and information systems security. The Information Technology Management Reform Act of 1996 (Public Law 104-106) and the Federal Information Security Management Act of 2002 (Public Law 107-347) create mandates for agencies to take specific steps to ensure the security of Federal information systems. The Federal Information Security Management Act of 2002 (FISMA) requires agencies to perform annual reviews and report to the Office of Management and Budget on their information systems' security programs. This means that agencies need a comprehensive approach to policy, auditing, reporting and remediation is order to satisfy FISMA requirements.

Soft Tech Consulting FISMA compliance support services focus on risk assessments, C&A, privacy impact analysis, security categorization and evaluating the effectiveness of common and system specific security controls, Each of the eight components of a FISMA compliance security program are addressed by our methodology. Using guidance from NIST, OMB and GAO, our high-level activities and measurable deliverables provide compliance support services quickly and effectively.

For more information about our FISMA Compliance services, please contact us.