FISMA decrees that a comprehensive information security program should include, among other things, continuous monitoring and procedures for detecting, reporting and responding to incidents.
The Federal Information Security Modernization Act of 2014 aamended the Federal Information Security Management Act of 2002 with several changes, including introducing incident reporting requirements and invoking authority for the U.S. Department of Homeland Security.
The federal Office of Management and Budget annually reports to Congress on the status of FISMA compliance across the federal government. (FISMA also applies to state government agencies that administer federal programs, in addition to private vendors that maintain contracts with the federal government.)
Penalties for non-compliance include reduction in federal funding and censure from future contracts by Congress, as well as possible reputational harm should an incident occur.
Tailored for Your Organization
Our risk governance framework, powered by compliance and security expertise, will help identify your gaps and let you know what you need to do to get secure and compliant.
Extensive and Experienced Support
In addition to being a qualified security assessor, Trustwave is a qualified Payment Application Data Security Standard (PA-DSS) assessor, point-to-point encryption (P2PE) assessor, approved scanning vendor (ASV) and a PCI forensic (PFI) investigator.
Security Portfolio Enables Compliance
The award-winning Trustwave Fusion platform is the foundation for delivering centralized, integrated and on-demand management of PCI compliance and security programs.
Supported by Industry-Leading Threat Intelligence
Our elite SpiderLabs team and federated global network of security operations centers produce unique threat intelligence that helps us prevent, monitor and respond to security events.
