The Federal Information Security Modernization Act (FISMA) 1 and implementing regulation Office of Management and Budget (OMB) Circular A-130, Managing Information as a Strategic Resource 2 , requires each federal agency to develop, document, and implement an agency-wide program to provide information security for the information and information systems that support the operations and assets of the agency, including those provided or managed by another agency, contractor, or other source, and services that are either fully or partially provided, including代理机构托管,外包和基于云的解决方案。联邦信息处理标准(FIPS)出版200,联邦信息和信息系统3的最低安全要求3,要求使用国家标准技术研究所(NIST)特别出版物(SP)800-53,信息系统和组织4的安全和隐私控制,作为基线信息系统控制。
主要关键词