CISSP-ISSEP: Information Systems Security Engineering Professional

OMB information-security policy requires agency management to authorize information systems before processing begins or changes significantly; certification and accreditation were the assessment-and-authorization process used for general support systems and major applications. FISMA establishes the statutory federal information-security program requiring agencies to provide security for their information systems. NIST issues supporting standards and guidance, and FIPS are federal standards rather than the authorities that impose the certification-and-accreditation production requirement.