FISMA

The Federal Information Security Management Act (FISMA) exists to regulate the security posture of government agencies, federal systems, bureaus, departments, and their vendors and subcontractors. Providing information systems to government agencies requires vendors to pass an annual FISMA assessment where they will be tested on controls that are based upon FIPS 199, FIPS 200, and NIST SP 800-53 Revision 4 regulations.

To help our clients meet the stringent requirements of FISMA, we cover all facets of each regulation including control mapping of various environments, documentation development for system security plan (SSP), security testing, and POA&M management. Digital Forge follows the NIST Risk Management Framework closely during assessments and advisory services which allows us to meet all of your needs confidently.