New mandatory security standard to help Federal Agencies protect information systems

A new mandatory standard has been published which aims to help federal agencies improve their information technology security and comply with the Federal Information Security Management Act (FISMA) of 2002.

Federal Information Processing Standard (FIPS) Publication 200, ‘Minimum Security Requirements for Federal Information and Information Systems’, is the second of two mandatory security standards required by the FISMA legislation. FISMA requires all federal agencies to develop, document and implement agency-wide information security programs and to provide security for the information and information systems that support the operations and assets of the agency.

FIPS 200 specifies minimum security requirements for federal information and information systems that are not national security systems and a risk-based process for selecting security controls necessary to satisfy these requirements.  

•Date: 16th March 2006• Region: US • Type: Article •Topic: ISM
Rate this article or make a comment - click here