What does FISMA stand for?

• A. Federal Information Security Management Act
• B. Federal Information System Management Act
• C. Federal Information Security and Management Act
• D. Framework for Information Security Management Act

Answer: (A)

FISMA stands for Federal Information Security Management Act. This U.S. federal law, part of the E-Government Act of 2002, requires federal agencies to implement an information security program, perform risk assessments, apply security controls, appoint a chief information security officer, and report on security posture with guidance from NIST. The other options mix up words or formats—whether using System instead of Security, adding an extra conjunction, or calling it a Framework—none of these match the actual Act.