CREST Practitioner Security Analyst (CPSA) Practice

Which act is known as the Federal Information Security Management Act?

1. FISMA

2. FERPA

3. GDPR

4. GLBA

The correct answer is: FISMA

The Federal Information Security Management Act is commonly referred to by its acronym, FISMA. This legislation was enacted to provide a comprehensive framework for protecting government information, operations, and assets against natural or man-made threats. FISMA requires federal agencies to develop, document, and implement an information security program, ensuring that they follow prescribed security standards and procedures to safeguard sensitive data effectively. FISMA emphasizes the need for regular assessments and the continuous monitoring of information systems, which is crucial for maintaining the integrity, confidentiality, and availability of government information. Its importance in the realm of cybersecurity within federal agencies is underscored by its requirement for compliance with established security frameworks. The other acts listed serve different purposes; for instance, FERPA is concerned with the privacy of student education records, GDPR pertains to data protection and privacy in the European Union, and GLBA deals with the financial privacy of consumers. Understanding the specific focus of each act is essential for recognizing why FISMA is correctly identified as the Federal Information Security Management Act.