FISMA Compliance Services

Federal Information Security Management Act of 2002 (FISMA), along with the Paper work Reduction Act of 1996 (Clinger-Cohen Act), explicitly emphasizes a risk-based policy for cost-effective security. In support of and reinforcing this legislation, the Office of Management and Budget (OMB) through Circular A-130, Appendix III, Security of Federal Automated Information Resources, require executive agencies with the federal government to:

• Plan for security – assess risk
• Ensure that appropriate officials are assigned security responsibility
• Periodically review the security controls in their information systems
• Authorize system processing prior to operations and periodically thereafter
• Create an IT security program

The assessment of risk and the development of security plans are critical activities that directly support the security accreditation process and are required under FISMA and OMB Circular A-130.

ADSI’s FISMA related services are broadly grouped into:

• Certification and Accreditation
• Document Procedures for Using Emerging Technologies
• Implementation and Testing of Systems Security Controls and Contingency Plans
• Security Awareness, Training and Education
• Configuration Management and Incident Handling Policies
• Agency Plan of Action and Milestones Process
• Security Review of Contractor Services
• Quality of Certification and Accreditation Process
• System Inventory Development and Verification

Contact us for additional information at (202) 659-2807