"Periodic assessments of the risk and magnitude of the harm that could result from unauthorized access, use, disclosure, disruption, modification, or destruction of information and information systems that support the operations and assets of the agency;"
Which act mandates a security program be implemented in a Federal agency that meets the above criteria?
A) Directive 8570
B) FISMA
C) FISO
D) The Homeland Security Act

Question

Quizplus · Accepted Answer

FISMA (Federal Information Security Management Act) drives a lot of United States federal requirements.Directive 8570 drives proper training and certification requirements for individuals as a part of FISMA.

"Periodic Assessments of the Risk and Magnitude of the Harm