Legal and Regulatory Requirements

Question 1

OMB

Answer 1

Office of Mgmt and Budget - executives to standards that need to be followed and are mandated to federal agencies

Question 2

FISMA governed by

Answer 2

OMB A-130

FISMA is Federal Information Security Management Act

Question 3

OMB separates FISMA into two diff types of systems

Answer 3

1) Federal and non-National Security Systems - NIST, FIPs (Federal Information Processing standards), SP (Special Publications) 800 series
2) National Security systems - CNSS (Committee on national security systems) - policies and instructions - creates executive order 13231, chaired by DoD

Question 4

Executive Order 13231

Answer 4

Establishes President of US intent to secure national infrastructure

Question 5

CNSS

Answer 5

Committee on National Security Systems

• Discuss policy issues
• Set policy
• Set procedures and guidance for NSS (National Security Systems)

Question 6

CNSSP

Answer 6

Committee of National Security Systems Policy

establish requirements

Question 7

CNSSI

Answer 7

Committee of National Security Systems Instruction

instructions on how to handle information

Question 8

HSPD-7

Answer 8

Homeland Security Presidential Directive - HSPD-7 - policy of the US to enhance the protection of our nation’s critical infrastructure against terrorist acts

Question 9

Public Law 107-347 - eGovernment Act of 2002

Answer 9

identified the importance of information security to the US

FISMA -title III of the e-government act - Federal Information Security Management Act, which required federal agencies to provide security for the information and information systems that support the organization

Question 10

OMB M-00-13

Answer 10

Agencies must post clear Privacy Policies on Agency websites

Question 11

OMB M-02-01

Answer 11

Guidance for preparing and submitting POA&Ms

Question 12

Privacy Act of 1974 (Update 2004)

Answer 12

Balance government’s need to maintain information on individuals (PII - personal identifiable information)

Question 13

Other Important Legislation - HIPPA

Answer 13

Health Insurance Portability and Accountability Act - patience should have access to their health records, upholding privacy of patience

Question 14

Other Important Legislation - HITECH

Answer 14

Health Information Technology for Economic and Clinical Health - promote meaningful use of health information technology

Question 15

Other Important Legislation - Clinger-Cohen Act of 1996

Answer 15

improve the way the Federal Government uses IT

Question 16

Other Important Legislation - GLBA - Financial Modernization Act of 1999

Answer 16

Gramm-Leach-Bliley Act - financial institution explain how they share and protect their customers’ information

Question 17

Other Important Legislation - PCI DSS

Answer 17

Payment Card Industry Data Security Standard - security standard for how credit cards are handled