If you fail to meet the minimum security requirements of FISMA, you lose federal funding, loss of contract with federal agencies, and even risk reputational damage.