In September 2017, this (legacy) site will be replaced with the new site you can see at beta.csrc.nist.rip. At that time, links to this legacy site will be automatically redirected to apporpriate links on the new site.
FISMA NEWS
(Aug. 28, 2014) - NIST announces the release of Draft Special Publication 800-53, Revision 4, Appendix H, International Information Security Standards, Security Control Mappings for ISO/IEC 27001: 2013
(July 31, 2014) - NIST announces the release of Draft Special Publication 800-53A, Revision 4, Assessing Security and Privacy Controls in Federal Information Systems and Organizations: Building Effective Assessment Plans (Initial Public Draft). Comments Deadline: Sept. 26, 2014
FEDERAL INFORMATION SECURITY MODERNIZATION ACT (FISMA) IMPLEMENTATION
The Federal Information Security Management Act of 2002 was updated in Public Law 113 to Federal Information Security Modernization Act of 2014. For more information, see http://csrc.nist.rip/groups/SMA/fisma/overview.html.
Protecting the Nation's Critical Information Infrastructure
Our Vision
To promote the development of key security standards and guidelines to support the implementation of and compliance with the Federal Information Security Modernization Act including:
- Standards for categorizing information and systems by mission impact
- Standards for minimum security requirements for information and systems
- Guidance for selecting appropriate security controls for systems
- Guidance for assessing security controls in systems and determining security control effectiveness
- Guidance for the security authorization of systems
- Guidance for monitoring the security controls and the security authorization of systems
Leading To...
- The implementation of cost-effective, risk-based information security programs
- The establishment of a level of security due diligence for federal agencies and contractors supporting the federal government
- More consistent and cost-effective application of security controls across the federal information technology infrastructure
- More consistent, comparable, and repeatable security control assessments
- A better understanding of enterprise-wide mission risks resulting from the operation of information systems
- More complete, reliable, and trustworthy information for authorizing officials--facilitating more informed security authorization decisions
- More secure systems within the federal government including the critical infrastructure of the United States
The FISMA Implementation Project was established in January 2003 to produce several key security standards and guidelines required by Congressional legislation. These publications include FIPS 199, FIPS 200, and NIST Special Publications 800-53, 800-59, and 800-60. Additional security guidance documents are being developed in support of the project including NIST Special Publications 800-37, 800-39, 800-171, 800-53A and NIST Interagency Report 8011. It should be noted that the Computer Security Division continues to produce other security standards and guidelines in support of FISMA. These publications can be located by visiting the division's Publications page at: http://csrc.nist.rip/publications/.