CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ209

VerifiedSecure Software Requirements

Which of the following U.S. Acts stressed a “risk-based policy for cost-effective security” and required agency program officials, chief information officers, and inspectors general (IGs) to conduct annual reviews of the agency information-security program and report the results to the Office of Management and Budget?

Explanation

The Federal Information Security Management Act of 2002 (FISMA) requires federal agencies to establish agency-wide information-security programs that provide protection commensurate with risk and potential harm. Its framework includes annual program reviews and independent inspector general evaluations, with reporting to the Office of Management and Budget.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!