 145), (Jan. 8, 1988), was a United States federal law enacted in 1987.It was intended to improve the security and privacy of sensitive information in federal computer systems and to establish minimally acceptable security practices for such systems.It required the creation of computer security plans, and appropriate training of system users or owners where the systems would display, process or store sensitive information.