Federal Information Security Modernization Act

U.S. federal information security statute for agencies and contractors.

Jurisdiction: US
Issuer: U.S. Congress / OMB / CISA / NIST
Effective: 2014-12-18

Sectors

eGovernment IT & Cybersecurity Public Sector Digital Infrastructure Professional Services

Articles (73)

Governance and Accountability — ApplicabilityRisk Management Measures — GovernanceIncident Reporting and Escalation — Process RequirementsSupply Chain and Third Parties — Evidence and RecordsResilience Testing and Improvement — Testing and AssuranceGovernance and Accountability — ReportingRisk Management Measures — RemediationIncident Reporting and Escalation — Third-Party ControlsSupply Chain and Third Parties — TrainingResilience Testing and Improvement — Management ReviewGovernance and Accountability — ApplicabilityRisk Management Measures — GovernanceIncident Reporting and Escalation — Process RequirementsSupply Chain and Third Parties — Evidence and RecordsResilience Testing and Improvement — Testing and AssuranceGovernance and Accountability — ReportingRisk Management Measures — RemediationIncident Reporting and Escalation — Third-Party ControlsSupply Chain and Third Parties — TrainingResilience Testing and Improvement — Management ReviewGovernance and Accountability — ApplicabilityRisk Management Measures — GovernanceIncident Reporting and Escalation — Process RequirementsSupply Chain and Third Parties — Evidence and RecordsResilience Testing and Improvement — Testing and AssuranceGovernance and Accountability — ReportingRisk Management Measures — RemediationIncident Reporting and Escalation — Third-Party ControlsSupply Chain and Third Parties — TrainingResilience Testing and Improvement — Management ReviewGovernance and Accountability — ApplicabilityRisk Management Measures — GovernanceIncident Reporting and Escalation — Process RequirementsSupply Chain and Third Parties — Evidence and RecordsResilience Testing and Improvement — Testing and AssuranceGovernance and Accountability — ReportingRisk Management Measures — RemediationIncident Reporting and Escalation — Third-Party ControlsSupply Chain and Third Parties — TrainingResilience Testing and Improvement — Management ReviewGovernance and Accountability — ApplicabilityRisk Management Measures — GovernanceIncident Reporting and Escalation — Process RequirementsSupply Chain and Third Parties — Evidence and RecordsResilience Testing and Improvement — Testing and AssuranceGovernance and Accountability — ReportingRisk Management Measures — RemediationIncident Reporting and Escalation — Third-Party ControlsSupply Chain and Third Parties — TrainingResilience Testing and Improvement — Management ReviewGovernance and Accountability — ApplicabilityRisk Management Measures — GovernanceIncident Reporting and Escalation — Process RequirementsSupply Chain and Third Parties — Evidence and RecordsResilience Testing and Improvement — Testing and AssuranceGovernance and Accountability — ReportingRisk Management Measures — RemediationIncident Reporting and Escalation — Third-Party ControlsSupply Chain and Third Parties — TrainingResilience Testing and Improvement — Management ReviewGovernance and Accountability — ApplicabilityRisk Management Measures — GovernanceIncident Reporting and Escalation — Process RequirementsSupply Chain and Third Parties — Evidence and RecordsResilience Testing and Improvement — Testing and AssuranceGovernance and Accountability — ReportingRisk Management Measures — RemediationIncident Reporting and Escalation — Third-Party ControlsSupply Chain and Third Parties — TrainingResilience Testing and Improvement — Management ReviewGovernance and Accountability — ApplicabilityRisk Management Measures — GovernanceIncident Reporting and Escalation — Process Requirements