Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Global Accelerated Learning • Est. 1999
Glossary Term FISMA

Training Camp • Cybersecurity Glossary

What is FISMA?

FISMA requires U.S. federal agencies to secure information systems using NIST controls, risk management, and continuous monitoring.

Glossary > Governance, Risk & Compliance > FISMA

Understanding FISMA

The Federal Information Security Modernization Act FISMA, which amended the 2002 Federal Information Security Management Act, is U.S. legislation requiring federal agencies to develop, document, and implement programs to secure their information and systems. Agencies must categorize systems, apply NIST 800-53 controls, and conduct continuous monitoring, with oversight from OMB and reporting to Congress. FISMA compliance is assessed using the NIST Risk Management Framework.

Learn More About FISMA:

Ready to Get Certified?

Turn knowledge into credentials with our instructor-led cybersecurity boot camps.

View All Courses →