eEye Digital Security - Professional-Grade Security Solutions.

eEye Federal Information Security Management Act (FISMA)

Unified Vulnerability Management & Compliance Solutions

 

About FISMA

FISMA requires objective assessments of the effectiveness of security controls on every information system operated by, or for (such as a contractor), the federal government on an annual basis. FISMA requires both an internal evaluation and an independent assessment.

The primary vulnerability management goals of FISMA are to identify potential threats and vulnerabilities, to map implemented controls to individual vulnerabilities, and to determine the risk factor by calculating the likelihood and impact of any given vulnerability being exploited.

More detailed information regarding FISMA can be found at http://csrc.nist.gov/groups/SMA/fisma/index.html

Compliance with the Federal Information Security Management Act (FISMA)

View a Sample REM Console Screenshot: Calculated Risk for Logical Groupings of Assets

eEye Digital Security helps government agencies assess systems with these features: