Call us now:
FISMA has been around for 20 years and has been difficult for many Federal Agencies to adopt. Inspector general Audits are available that demonstrate the compliance of agencies by both Federal Inspector Generals and the GAO. In this case the Department of Homeland Security (DHS), demonstrating the efforts made by the DHS as it progresses towards compliance. Note the audits alignment to the NIST CSF.
Why are FISMA audits important? FISMA is a foundation for U.S cyber regulation, alongside OMB regulations and forms the basis for cybersecurity risk management under NIST SP 800-37. Anyone who has watched the U.S start to adopt cybersecurity risk management regulation should not forget that the Securities and Exchange Commission (SEC) are held to FISMA compliance standards. The SEC is used to ‘eating its own dog food’ when it comes to cybersecurity and supply chain risk management compliance.
For those interested in knowing more about FISMA, we discuss FISMA and its relationship to cyber regulatory compliance in our September 2021 paper ‘FISMA, OMB and the Risk Management Framework’.
https://lnkd.in/dVdM3ZRq
Ted Dziekanowski Brian McCarthy Jason Spezzano
#cybersecurity #cyberriskmanagement #cyberregulation #fisma #OMBA130 #theaugustagroup
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A6963775737845710849