What is Federal Information Security Management Act (FISMA)?

The Federal Information Security Management Act (FISMA) is a United States federal law that defines a comprehensive framework to protect government information, operations, and assets against natural or man-made threats. It requires federal agencies to develop, document, and implement an agency-wide information security program. FISMA also assigns specific responsibilities to various entities, including the National Institute of Standards and Technology (NIST) for developing standards and guidelines, and the Office of Management and Budget (OMB) for overseeing agency compliance.