FISMA Act of 2008

Bill: 110-s-3474
Sponsor: Sen. Carper, Thomas R. [D-DE]
Introduced: 2008-09-11 in the Senate
Policy area: Government Operations and Politics
Subjects: Administrative procedure
Auditing
Chief information officers
Computer security measures
Congress
Congressional reporting requirements
Executive reorganization
Federal officials
Government contractors
Governmental investigations
Law
Office of Management and Budget
Science, Technology, Communications

Summary:
action_date: 2008-09-11
text: 
Federal Information Security Management Act of 2008 or the FISMA Act of 2008 - Amends federal law relating to information security to require federal agencies to perform an independent audit of their information security programs to determine their effectiveness (current law requires an independent evaluation).

Requires each federal agency to designate a Chief Information Security Officer to protect the agency's information security network. Establishes a Chief Information Security Officers Council to assist such Officers in developing best practices and performance measures for agency information security.

Requires the Director of the Office of Management and Budget (OMB) to promulgate information security regulations governing contracts between the federal government and private entities.

Requires the Department of Homeland Security (DHS) to report annually to specified congressional committees on operational evaluations and testing protocols relating to information security networks.

action_date: 2008-10-01
text: 

(This measure has not been amended since it was introduced. The summary of that version is repeated here.)

Federal Information Security Management Act of 2008 or the FISMA Act of 2008 - Amends federal law relating to information security to require federal agencies to perform an independent audit of their information security programs to determine their effectiveness (current law requires an independent evaluation).

Requires each federal agency to designate a Chief Information Security Officer to protect the agency's information security network. Establishes a Chief Information Security Officers Council to assist such Officers in developing best practices and performance measures for agency information security.

Requires the Director of the Office of Management and Budget (OMB) to promulgate information security regulations governing contracts between the federal government and private entities.

Requires the Department of Homeland Security (DHS) to report annually to specified congressional committees on operational evaluations and testing protocols relating to information security networks.


Legislative actions:
action_date: 2008-10-01
text: Placed on Senate Legislative Calendar under General Orders. Calendar No. 1105.
action_date: 2008-10-01
text: Committee on Homeland Security and Governmental Affairs. Reported by Senator Lieberman without amendment. Without written report.
action_date: 2008-10-01
text: Committee on Homeland Security and Governmental Affairs. Reported by Senator Lieberman without amendment. Without written report.
action_date: 2008-09-23
text: Committee on Homeland Security and Governmental Affairs. Ordered to be reported without amendment favorably.
action_date: 2008-09-11
text: Read twice and referred to the Committee on Homeland Security and Governmental Affairs. (text of measure as introduced: CR S8389-8391)
action_date: 2008-09-11
text: Sponsor introductory remarks on measure. (CR S8388-8389)
action_date: 2008-09-11
text: Introduced in Senate