What is FISMA?

FISMA, the Federal Information Security Modernization Act, is a United States federal law enacted in 2002 and updated in 2014. It requires federal agencies and their contractors to implement and maintain information security programs and controls to protect government data and operations. It establishes a framework for managing information security risks, including risk assessments, security policies, and security awareness training. FISMA compliance is crucial for federal agencies to ensure the confidentiality, integrity, and availability of their information systems and data.