Success Strategies for Meeting the 2013 FISMA Requirements

Over the past year, Department of Homeland Security (DHS) and the National Institute of Standards and Technology (NIST) have made major advances in improving and simplifying the future security requirements for government information technology (IT).  They have identified new standards, strategies, and solutions that have reduced the FISMA requirements on the government organizations by over 50 percent and the risk to systems by much more.  These include the following:

• NIST published new guidelines on how to do risk assessments (NIST SP800-30), security controls released April 2013 (NIST SP800-53 Rev. 4) and information security continuous monitoring planning (NIST SP800-137).
• DHS published new FISMA reporting metrics for CIOs and OIGs in November 2012, evolved the Federal FISMA review process, established common information monitoring requirements, and has initiated the contracting of centrally funded solutions for monitoring all government IT systems.
• Both have increase the availability of effective automated security solutions for reducing the security work load and risk to IT systems.

How do you leverage all of these advances to successfully meet your 2013 FISMA requirements and ensure that your approach to securing your systems is practical and simplified? 

This popular 2-day course provides you with specific and practical strategies for leveraging the changes into meeting your individual and enterprise FISMA responsibilities in 2013. Attendees will gain a practical understanding of the strategies by working real-world examples during group activities and by reviewing actual samples of the key FISMA documents: 

• System Security Plan (SSP),
• Plan of Action and Milestones (POAM)
• Security Assessment Report (SAR), and
• Information Security Continuous Monitoring (ISCM).