Call us now:
One wondered why the DHS recently outlined its role in the oversight of cybersecurity, as it related to OMB and FISMA? Then the FISMA 2023 proposal made it clear that several Homeland Security Committees will oversight the implementation of FISMA 2023.
With a focus on cybersecurity and risk management, FISMA has since 2002 been the foundation of U.S Cybersecurity Risk management, along with OMB A 130. CISA will provide continuous oversight of Federal cybersecurity risk management and report cybersecuirty risk management along with the GAO to congress.
FISMA reaffirms requirements for Federal Agencies to assess risk of threats to their systems, penetration testing, vulnerability assessments and risk mitigation. Requiring heads of agencies to assess and manage cybersecuirty vulnerabilities. It introduces funding allocation based upon risk assessments, allocating funds for cybersecurity following a cybersecurity risk management and a supply chain risk assessment.
In ones opinion the reporting of cyber incidents is important, but it is not the main driver for the update. The update reaffirms the authority of FISMA, CISA and cybersecurity risk management policy and process for Federal Agencies. Cybersecurity risk management that seems to be the driver of other U.S and EU cyber regulation.
Ted Dziekanowski
#cybersecurity #FISMA #cyberriskmanagement
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7086607033650532352