Sector solutions

FISMA requires federal agencies to implement a mandatory set of processes and system controls designed to ensure the confidentiality, integrity, and availability of system-related information. The processes and systems controls in each federal agency must follow established Federal Information Processing Standards, National Institute of Standards and Technology, and other legislative requirements pertaining to federal information systems, such as the Privacy Act of 1974.

To facilitate FISMA compliance, GSA maintains a formal program for information security management focused on FISMA requirements, protecting GSA IT resources, and supporting the GSA mission. This program consists of policies, procedures, and processes to mitigate new threats and anticipate risks posed by new technologies. Designated GSA information system security managers and information system security officers implement information security requirements in accordance with FISMA requirements and GSA policies.