FISMA establishes federal information-security program requirements and oversight expectations.

It influences federal system documentation, risk assessments, security plans, annual reporting, controls, incident response, and audit evidence.

Additional Resources:

• Official / Authoritative Resource