FISMA establishes federal information-security program requirements and oversight expectations.
It influences federal system documentation, risk assessments, security plans, annual reporting, controls, incident response, and audit evidence.
Additional Resources: