Federal Information Security FISMA requires Federal agencies to establish agency-wide Management Act of 2002 risk-based information security programs that include (FISMA), 44 U.S.C. § 3541 periodic risk assessments, use of controls and techniques to comply with information security standards, training requirements, periodic testing and evaluation, reporting, and plans for remedial action, security incident response, and continuity of operations. Executive Orders. The following are Executive Orders that provide details related to information security for Federal Agencies. Executive Order 10450, Security Requirements This order establishes that the interests of for Government Employees, April 1953 national security require all government employees be trustworthy, of good character, and loyal to the United States. Executive Order 13011, Federal Information This order establishes policy for the head of Technology, July 1996 each agency to effectively use information technology to improve mission performance and service to the public. Executive Order 13103, Computer Software This order establishes policy that each Piracy, September 1998 executive agency shall work diligently to prevent and combat software piracy in order to give effect to copyrights associated with computer software. Presidential Decision Directive 63: Critical This directive requires that the United States Infrastructure Protection, May 1998 take all necessary measures to swiftly eliminate any significant vulnerability to both physical and cyber attacks on critical infrastructures, including our cyber systems. Executive Order 13231, Critical Infrastructure This establishes policy that ensures Protection in the Information Age, October protection of information systems for critical 2001 infrastructure, including emergency preparedness communications, and the physical assets that support such information systems. Executive Branch Policy. The policies listed below are established through directives published by the Office of Management and Budget (OMB) based on the applicable laws passed by Congress OMB Circular Description A-11, Section 53, Information This directive specifies the identification of security and
Federal Information Security Management Act of 2002 (FISMA), 44 U.S.C. § 3541 FISMA requires Federal agencies to establish agency-wide risk-based information security programs that include periodic risk assessments, use of controls and techniques to comply with information security standards, training requirements, periodic testing and evaluation, reporting, and plans for remedial action, security incident response, and continuity of operations. Executive Orders. The following are Executive Orders that provide details related to information security for Federal Agencies. Executive Order 10450, Security Requirements for Government Employees, April 1953 This order establishes that the interests of national security require all government employees be trustworthy, of good character, and loyal to the United States. Executive Order 13011, Federal Information Technology, July 1996 This order establishes policy for the head of each agency to effectively use information technology to improve mission performance and service to the public. Executive Order 13103, Computer Software Piracy, September 1998 This order establishes policy that each executive agency shall work diligently to prevent and combat software piracy in order to give effect to copyrights associated with computer software. Presidential Decision Directive 63: Critical Infrastructure Protection, May 1998 This directive requires that the United States take all necessary measures to swiftly eliminate any significant vulnerability to both physical and cyber attacks on critical infrastructures, including our cyber systems. Executive Order 13231, Critical Infrastructure Protection in the Information Age, October 2001 This establishes policy that ensures protection of information systems for critical infrastructure, including emergency preparedness communications, and the physical assets that support such information systems. Executive Branch Policy. The policies listed below are established through directives published by the Office of Management and Budget (OMB) based on the applicable laws passed by Congress OMB Circular Description A-11, Section 53, Information This directive specifies the identification of security and
attachment_4_-_departmental_manual_-_part_375_irm_program_management.docx