Home | Email: info@fismacenter.com | Tel: 202-997-0148

About Us      Exam Advisory Board      Directions  FISMA Services  The FISMA Book  FISMA Resources  CFCP      Exam Schedule      Grandfathering      Exam FAQ      Code of Ethics      CPE Credit Requirements      Testing Locations  FISMA Training      FISMA 101      FISMA 111      FISMA 201      FISMA 351      Registration FAQ  Previous Clients  FISMAtraq Discussion List  Recruiters

CFCP Login:        | Password Retrieval:        FISMA Resources The following links provide a wealth of information about FISMA and Certification & Accreditation: C&A Certified PKI Providers Across U.S. Federal Agencies Certification and Accreditation 101 Clinger-Cohen Act DIACAP to DoD Risk Management Framework Transition DoD Certification and Accreditation Process – EOL DoDI 8510.01- Risk Management Framework (RMF) for DoD IT DCID 6/3 Protecting Sensitive Compartmentalized Information Manual DCID 6/3 Policy DCID 6/3 Appendices E-Government Act (Public Law 107-347) Federal Information Security Management Act Federal Records Management Federal Risk and Authorization Management Program (FedRAMP) FedRAMP Policy Memo 2007 Federal Computer Security Report Card 2006 Federal Computer Security Report Card 2005 Federal Computer Security Report Card FIPS 140-2 FIPS 140-2 Module Validation Lists FIPS 199, Standards for Security Categorization of Federal Information Systems FIPS 200 Minimum Security Requirements for Federal Information Systems FIPS 800-53A, Rev 1 FISMA: Fact and Fiction FISMA Implementation Project 2012 FISMA Reporting Metrics 2020 FISMA Report to Congress 2019 FISMA Report to Congress 2018 FISMA Report to Congress 2017 FISMA Report to Congress 2016 FISMA Report to Congress 2015 FISMA Report to Congress 2014 FISMA Report to Congress 2013 FISMA Report to Congress 2012 FISMA Report to Congress 2011 FISMA Report to Congress 2010 FISMA Report to Congress 2009 FISMA Report to Congress 2008 FISMA Report to Congress 2007 FISMA Report to Congress 2006 FISMA Report to Congress 2005 FISMA Report to Congress 2004 FISMA Report to Congress FISMA Reporting Template for Micro Agencies GAO-08-525, June 27, 2008: Federal Agency Efforts to Encrypt Sensitive Information Are Under Way GAO-08-571T, March 12, 2008: Progress Reported, but Weaknesses at Federal Agencies Persist GAO-08-1001, Sept. 9, 2008: Actions Needed to Better Protect Los Alamos Ntnl. Lab's Unclassified Network GAO-08-526, May 21, 2008: TVA Needs to Address Weaknesses in Control Systems and Networks GAO-08-536, May 19, 2008: Alternatives Exist for Enhancing Protection of Personally Identifiable Information Has FISMA Improved IT Security? Maybe ICD 503 NIACAP Guidance NIST FAQ on Continuous Monitoring NIST FISMA Project NIST 800-53, Rev 3 Control Classes Database NIST SP 800-26, Guide for Security Self-Assessments – EOL NIST SP 800-34, Contingency Planning Guide for Information Technology Systems NIST SP 800-37, Guide for C&A of Federal Information Systems NIST SP 800-37, Rev 1. Guide for Applying the Risk Management Framework to Federal Information Systems NIST SP 800-53, Rev 2. Recommended Security Controls NIST SP 800-53, Rev 3. Recommended Security Controls NIST SP 800-53, Rev 4. Security and Privacy Controls NIST SP 800-53A, Guide for Assessing the Security Controls in Federal Information Systems NIST SP 800-60, Vol. 1 Guide for Mapping Types of Info. and Information Systems to Security Categories NIST SP 800-60, Vol. 2 Append., Guide for Mapping Types of Info. and Info. Systems to Security Categories NIST SP 800-61, Computer Security Incident Handling Guide OMB Circular A-130 Revised OMB Circular A-130 Revised, Transmittal Memo OMB 11/12/2020 (M-21-04) Modernization Access to and Consent Disclosure of Records Subject to Privacy Act OMB 01/03/2017 (M-17-12) Preparing For and Responsding to a Breach of PII OMB 11/08/2016 (M-17-06) Policies for Federal Agency Public Websites and Digital Services OMB 11/04/2016 (M-17-05) FY 2016-2017 Guidance on Improving Federal Information Security and Privacy OMB 06/08/2015 (M-15-13) Policy to Require Secure Connections Across Federal Websites and Web Services OMB 10/03/2014 (M-15-01) FY 2014-2015 Guidance on Improving Federal Information Security and Privacy OMB 11/18/2013 (M-14-04) FY 2013 Reporting Instructions for the Federal Information Security and Privacy OMB 09/27/2012 (M-12-20) FY 2012 Reporting Instructions for the Federal Information Security and Privacy OMB 10/06/2011 (M-11-06) Requirements for Accepting Externally-Issued Identity Credentials OMB 07/06/2010 (M-10-28) Clarifying Cyber Security Responsibilities and DHS OMB 05/21/2010 (M-10-15) Annual FISMA Reporting Instructions OMB 08/11/2008 (M-08-22) Guidance on the Federal Desktop Core Configuration (FDCC) OMB 11/20/2007 (M-08-05) Trusted Internet Connections OMB 06/25/2007 (M-07-19) FY 2007 Reporting Instructions for the FISMA and Agency Privacy Management OMB 06/01/2007 (M-07-18) Ensuring New Acquisitions Include Common Security Configurations OMB 05/22/2007 (M-07-16) Safeguarding and Responding to the Breach of PII OMB 03/22/2007 (M-07-11) Implementation of Commonly Accepted Security Configurations for Windows OS OMB 07/17/2006 (M-06-20) Reporting Instructions for FISMA and Agency Privacy Management OMB 06/23/2006 (M-06-16) Protection of Sensitive Agency Information OMB 05/22/2006 (M-06-15) Safeguarding PII OMB 12/30/2005 (M-06-04) Improving Agency Disclosure Information OMB 08/05/2005 (M-05-24) HSPD-12 Common Identification Standard OMB 06/30/2005 (M-05-16) Regs on Maintaining TeleCom Service During Emergency in Fed-owned Buildings OMB 12/17/2004 (M-05-04) Policies for Federal Agency Public Websites OMB 06/17/2004 (M-04-15) HSPD 7 Critical Infrastructure Protection OMB 12/16/2003 (M-04-04) eAuthentication Guidance for Federal Agencies OMB 09/26/2003 (M-03-22) Guidance for Implementing E-Government Act of 2002 Privacy Provisions OMB 08/06/2003 (M-03-19) Reporting Instructions for FISMA OMB 08/01/2003 (M-03-18) Guidance for E-Gov Act of 2002 OMB 10/17/2001 (M-02-01) Guidance for Preparing and Submitting Security Plans of Action and Milestones OMB 02/28/2000 (M-00-07) Incorporating and Funding Security in Information Systems Investments Privacy Act of 1974 (Amended) Security Content Automation Protocol (SCAP) Security Technical Implementation Guides (STIGS) US Government Configuration Baseline US CERT

Copyright 2009-2023, FISMA Center | 8115 Maple Lawn Blvd., Suite 350, Fulton, MD, 20759 | Tel: 202-997-0148 | Fax: 855-451-5466 | Legal