Home | Email: info@fismacenter.com | Tel: 410-740-8705    

 About Us
 FISMA Services
 The FISMA Book
 FISMA Resources
 CFCP
 FISMA Training
 FISMAtraq Discussion List
 Recruiters
CFCP Login:        | Password Retrieval:       


FISMA Resources
The following links provide a wealth of information about FISMA and Certification & Accreditation:

  • C&A Certified PKI Providers Across U.S. Federal Agencies
  • Certification and Accreditation 101
  • Clinger-Cohen Act
  • DoD Certification and Accreditation Process – EOL
  • DCID 6/3 Protecting Sensitive Compartmentalized Information Manual
  • DCID 6/3 Policy
  • DCID 6/3 Appendices
  • DIACAP and DITSCAP Guidance
  • E-Government Act (Public Law 107-347)
  • Federal Deskstop Core Configuration
  • Federal Risk and Authorization Management Program (FedRAMP)
  • FedRAMP Policy Memo
  • 2007 Federal Computer Security Report Card
  • 2006 Federal Computer Security Report Card
  • 2005 Federal Computer Security Report Card
  • FIPS 140-2
  • FIPS 140-2 Module Validation List
  • FIPS 199, Standards for Security Categorization of Federal Information Systems
  • FIPS 200 Minimum Security Requirements for Federal Information Systems
  • FIPS 800-53A, Rev 1
  • FISMA: Fact and Fiction
  • FISMA Implementation Project
  • FISMA Report to Congress 2009
  • FISMA Report to Congress 2008
  • FISMA Report to Congress 2007
  • FISMA Report to Congress 2006
  • FISMA Report to Congress 2005
  • FISMA Report to Congress 2004
  • FISMA Reporting Template for CIOs
  • FISMA Reporting Template for IGs
  • FISMA Reporting Template for Micro Agencies
  • FISMA Reporting Template for SAOPs
  • FISMA Quarterly Reporting Template
  • Federal Information Security Management Act
  • GAO-08-525, June 27, 2008: Federal Agency Efforts to Encrypt Sensitive Information Are Under Way
  • GAO-08-571T, March 12, 2008: Progress Reported, but Weaknesses at Federal Agencies Persist
  • GAO-08-1001, Sept. 9, 2008: Actions Needed to Better Protect Los Alamos Ntnl. Lab's Unclassified Network
  • GAO-08-526, May 21, 2008: TVA Needs to Address Weaknesses in Control Systems and Networks
  • GAO-08-536, May 19, 2008: Alternatives Exist for Enhancing Protection of Personally Identifiable Information
  • Has FISMA Improved IT Security? Maybe
  • ICD 503
  • NIACAP Guidance
  • NIST FAQ on Continuous Monitoring
  • NIST FISMA Project
  • NIST 800-53, Rev 3 Control Classes Database
  • NIST SP 800-26, Guide for Security Self-Assessments – EOL
  • NIST SP 800-34, Contingency Planning Guide for Information Technology Systems
  • NIST SP 800-37, Guide for C&A of Federal Information Systems
  • NIST SP 800-37, Rev 1. Guide for Applying the Risk Management Framework to Federal Information Systems
  • NIST SP 800-53, Rev 2. Recommended Security Controls
  • NIST SP 800-53, Rev 3. Recommended Security Controls
  • NIST SP 800-53A, Guide for Assessing the Security Controls in Federal Information Systems
  • NIST SP 800-60, Vol. 1 Guide for Mapping Types of Info. and Information Systems to Security Categories
  • NIST SP 800-60, Vol. 2 Append., Guide for Mapping Types of Info. and Info. Systems to Security Categories
  • NIST SP 800-61, Computer Security Incident Handling Guide
  • OMB Circular A-130 Revised
  • OMB 10/06/2011 Requirements for Accepting Externally-Issued Identity Credentials (e-Authentication)
  • OMB 05/21/2010 (M-10-15) Annual FISMA Reporting Instructions
  • OMB 08/11/2008 (M-08-22) Guidance on the Federal Desktop Core Configuration (FDCC)
  • OMB 06/25/2007 (M-07-19) FY 2007 Reporting Instructions for the FISMA and Agency Privacy Management
  • OMB 06/01/2007 (M-07-18) Ensuring New Acquisitions Include Common Security Configurations
  • OMB 05/22/2007 (M-07-16) Safeguarding and Responding to the Breach of PII
  • OMB 03/22/2007 (M-07-11) Implementation of Commonly Accepted Security Configurations for Windows OS
  • OMB 07/06/2010 (M-10-28) Clarifying Cyber Security Responsibilities and DHS
  • OMB 07/17/2006 (M-06-20) Reporting Instructions for FISMA and Agency Privacy Management
  • OMB 06/23/2006 (M-06-16) Protection of Sensitive Agency Information
  • OMB 05/22/2006 (M-06-15) Safeguarding PII
  • OMB 12/30/2005 (M-06-04) Improving Agency Disclosure Information
  • OMB 08/05/2005 (M-05-24) HSPD-12 Common Identification Standard
  • OMB 06/30/2005 (M-05-16) Regs on Maintaining TeleCom Service During Emergency in Fed-owned Buildings
  • OMB 12/17/2004 (M-05-04) Policies for Federal Agency Public Websites
  • OMB 06/17/2004 (M-04-15) HSPD 7 Critical Infrastructure Protection
  • OMB 12/16/2003 (M-04-04) eAuthentication Guidance for Federal Agencies
  • OMB 09/26/2003 (M-03-22) Guidance for Implementing E-Government Act of 2002 Privacy Provisions
  • OMB 08/06/2003 (M-03-19) Reporting Instructions for FISMA
  • OMB 08/01/2003 (M-03-18) Guidance for E-Gov Act of 2002
  • OMB 10/17/2001 (M-02-01) Guidance for Preparing and Submitting Security Plans of Action and Milestones
  • OMB 02/28/2000 (M-00-07) Incorporating and Funding Security in Information Systems Investments
  • Privacy Act of 1974 (Amended)
  • SANS Reading Room
  • The Security Content Automation Protocol
  • Security Technical Implementation Guides (STIGS)
  • US CERT


    		•
    Copyright 2012 by FISMA Center | 10480 Little Patuxent Parkway, Suite 400, Columbia, MD 21044 | Tel: 410-740-8705 | Fax: 888-617-2533 | Legal