Laws

Question 1

Privacy Act of 1974

Answer 1

Policy Objectives:

• Restrict disclosure
• Increased rights of access to agency records
• Grant individuals right to seek amendment
• Establish code of fair information practices

Question 2

Computer Fraud and Abuse Act (CFAA)

Answer 2

• 1986
• Intended to reduce hacking of Government and financial institution computers
• Includes computers used in or affecting interstate or foreign commerce or communications
• Governs cases with a compelling Federal interest

Question 3

Computer Security Act

Answer 3

• 1987
• Superseded by FISMA
• Improve the security and privacy of sensitive information in Federal computer systems
• Establish a minimum acceptable security practices for such systems
• Assigns to develop standards of minimum acceptable practices along with NSA
• Requires establishment of security policies for Federal computer systems that contain sensitive information
• Requires the creation of computer security plans
• Mandatory security awareness training for federal employees that use those systems

Question 4

Information Technology Management Reform Act

Answer 4

• AKA Clinger-Cohen Act
• 1996
• Implemented the capital planning and investment control (CPIC) process
• Granted Director of OMB authority to oversee acquisition, use, and disposal of IT
• Established CIO position
• Defined IT Architecture (ITA) for evolving and acquiring IT
• Defined National Security Systems
• NIST introduces FIPS