QuestionQ102

VerifiedSecurity Planning and Engineering

Which of the following federal laws defines roles and responsibilities for information security, risk management, testing, and training, and authorizes NIST and NSA to provide guidance for security planning and implementation?

Explanation

The Government Information Security Reform Act (GISRA) established federal agency information-security program requirements, including risk assessment, security policies and procedures, periodic testing and evaluation, and security awareness training. It assigned NIST responsibility for developing standards and guidance for federal systems, drawing on NSA technical advice and assistance where appropriate. FISMA later superseded GISRA.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!