FISMA and the Risk Management Framework: The New Practice of Federal Cyber Security by Stephen D. GantzFISMA and the Risk Management Framework: The New Practice of Federal Cyber Security by Stephen D. Gantz

FISMA and the Risk Management Framework: The New Practice of Federal Cyber Security

byStephen D. Gantz, Daniel R. PhilpottEditorStephen D. Gantz

Paperback | November 27, 2012

Pricing and Purchase Info

$90.99 online 
$96.95 list price save 6%
Earn 455 plum® points

Prices and offers may vary in store

Quantity:

In stock online

Ships free on orders over $25

Not available in stores

about

FISMA and the Risk Management Framework: The New Practice of Federal Cyber Security deals with the Federal Information Security Management Act (FISMA), a law that provides the framework for securing information systems and managing risk associated with information resources in federal government agencies.
Comprised of 17 chapters, the book explains the FISMA legislation and its provisions, strengths and limitations, as well as the expectations and obligations of federal agencies subject to FISMA. It also discusses the processes and activities necessary to implement effective information security management following the passage of FISMA, and it describes the National Institute of Standards and Technology's Risk Management Framework. The book looks at how information assurance, risk management, and information systems security is practiced in federal government agencies; the three primary documents that make up the security authorization package: system security plan, security assessment report, and plan of action and milestones; and federal information security-management requirements and initiatives not explicitly covered by FISMA.
This book will be helpful to security officers, risk managers, system owners, IT managers, contractors, consultants, service providers, and others involved in securing, managing, or overseeing federal information systems, as well as the mission functions and business processes supported by those systems.

  • Learn how to build a robust, near real-time risk management system and comply with FISMA
  • Discover the changes to FISMA compliance and beyond
  • Gain your systems the authorization they need
Stephen Gantz (CISSP-ISSAP, CEH, CGEIT, CRISC, CIPP/G, C|CISO) is an information security and IT consultant with over 20 years of experience in security and privacy management, enterprise architecture, systems development and integration, and strategic planning. He currently holds an executive position with a health information technol...
Loading
Title:FISMA and the Risk Management Framework: The New Practice of Federal Cyber SecurityFormat:PaperbackDimensions:584 pages, 9.25 × 7.5 × 0.68 inPublished:November 27, 2012Publisher:Syngress PublishingLanguage:English

The following ISBNs are associated with this title:

ISBN - 10:1597496413

ISBN - 13:9781597496414

Look for similar items by category:

Reviews

Table of Contents

Chapter 1: Introduction

Chapter 2: Federal Information Security Fundamentals

Chapter 3: Thinking About Risk

Chapter 4: Thinking About Systems

Chapter 5: Success Factors

Chapter 6: Risk Management Framework Planning and Initiation

Chapter 7: Risk Management Framework Steps 1 & 2

Chapter 8: Risk Management Framework Steps 3 & 4

Chapter 9: Risk Management Framework Steps 5 & 6

Chapter 10: System Security Plan

Chapter 11: Security Assessment Report

Chapter 12: Plan of Action and Milestones

Chapter 13: Risk Management

Chapter 14: Continuous Monitoring

Chapter 15: Contingency Planning

Chapter 16: Privacy

Chapter 17: Federal Initiatives

Appendix A: References

Appendix B: Acronyms

Appendix C: Glossary

Index

Editorial Reviews

"For the person who needs to build a solid IT system and get it through the process of security authorization, this work will be a perfect source. The authors structured the contents logically, which makes it easy to find information. The book can be used as a compendium of security knowledge, to which one can return many times to find important details when needed."--IEEE Communications, July 2014 "Gantz explains the Federal Information Security Management Act (FISMA), describes the obligations it places on federal agencies and others subject to the legislation's rules about securing information systems, and details the processes and activities needed to implement effective information security management following FISMA and using the Risk Management Framework of the National Institute of Standards and Technology."--Reference and Research Book News, August 2013