FISMA<p><strong>FISMA</strong> establishes federal information-security program requirements and oversight expectations.</p> <p>It influences federal system documentation, risk assessments, security plans, annual reporting, controls, incident response, and audit evidence.</p> <p><strong>Additional Resources</strong>:</p> <ul> <li><a href="https://www.cisa.gov/topics/cybersecurity-best-practices/federal-information-security-modernization-act" target="_blank" rel="noopener">Official / Authoritative Resource</a></li> </ul>