@Thaddeus Dziekanowski one is often surprised of the understanding of OMB A130 and FISMA and the part they play in U.S cybersecurity regulation.

← Back to Blog

@Thaddeus Dziekanowski one is often surprised of the understanding of OMB A130 and FISMA and the part they play in U.S cybersecurity regulation. Least of all their applicability to suppliers to Federal Agencies that may collect or maintain information on behalf of an agency, information systems used or operated by an agency, or by a contractors on behalf of an agency.

The U.S. Securities and Exchange Commission (SEC) and exchange undergoes an annual audit of FISMA compliance. One can argue a demonstration the SEC eats its own dog food.

https://lnkd.in/ebuBywUM

While it forms a foundation to cybersecurity and risk management in the U.S, one wonders why compliance to FISMA rarely seems to get tested in court.

Brian D. McCarthy Rachel V. Rose, JD, MBA Faisal Khan

Veritas GRC Office of Management and Budget

#cybersecurity #cyberriskmanagement #fisma

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7256647348989083648