FISMA / NIST 800-53 / FIPS PUB 200 compliance

The Federal Information Security Management Act (FISMA) is a law stating the measures to implement in order to secure United States federal property and information. The FISMA assigned the National Institute of Standards and Technology (NIST), the responsibility of defining standards and security procedures to be respected by American governmental agencies and to reinforce the information systems security level.

These standards have been published in the Federal Information Processing Standards Publication 200 (FIPS PUB 200), and the security controls to be made have been detailed in the NIST Special Publication 800-53 document.

The security requirements defined in FIPS PUB 200 cover 17 domains:

• Access control
• Awareness and training
• Audit and accountability
• Certification, accreditation and security assessments
• Configuration management
• Contingency planning
• Identification and authentication
• Incident response
• Maintenance
• Media protection
• Physical and environmental protection
• Planning
• Personal security
• Risk assessment
• System and services acquisition
• System and communications protection
• System and information integrity

IS Decisions proposes a range of software solutions that will allow implementation of FIPS PUB 200 and FISMA compliance: