Stephen D. Gantz - FISMA and the Risk Management Framework: The New Practice of Federal Cyber Security

Acquiring Editor: Chris Katsaropolous

Editorial Project Manager: Ben Rearick

Project Manager: Priya Kumaraguruparan

Designer: Matthew Limbert

Syngress is an imprint of Elsevier

225 Wyman Street, Waltham, MA 02451, USA

Copyright 2013 Elsevier, Inc. All rights reserved.

No part of this publication may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or any information storage and retrieval system, without permission in writing from the publisher. Details on how to seek permission, further information about the Publishers permissions policies and our arrangements with organizations such as the Copyright Clearance Center and the Copyright Licensing Agency, can be found at our website: www.elsevier.com/permissions.

This book and the individual contributions contained in it are protected under copyright by the Publisher (other than as may be noted herein).

Notices

Knowledge and best practice in this fi eld are constantly changing. As new research and experience broaden our understanding, changes in research methods or professional practices, may become necessary. Practitioners and researchers must always rely on their own experience and knowledge in evaluating and using any information or methods described herein. In using such information or methods they should be mindful of their own safety and the safety of others, including parties for whom they have a professional responsibility.

To the fullest extent of the law, neither the Publisher nor the authors, contributors, or editors, assume any liability for any injury and/or damage to persons or property as a matter of products liability, negligence or otherwise, or from any use or operation of any methods, products, instructions, or ideas contained in the material herein.

Library of Congress Cataloging-in-Publication Data

FISMA and the risk management framework : the new practice of federal cyber security / edited by Stephen. Gantz, Daniel R. Philpott1st ed.

p. cm.

Includes bibliographical references and index.

ISBN: 978-1-59749-641-4

1. Computer securityUnited States. 2. Computer securityLaw and legislationUnited States. 3. Information technologySecurity measuresUnited States. 4. Electronic government informationSecurity measuresUnited States. 5. Administrative agenciesInformation resources managementSecurity measuresUnited States. 6. Computer networksSecurity measuresUnited States. 7. United States. Federal Information Security Management Act of 2002. I. Gantz, Stephen D. II. Philpott, Daniel R.

QA76.9.A25F57 2013

005.8dc23

2012039363

British Library Cataloguing-in-Publication Data

A catalogue record for this book is available from the British Library.

Printed in the United States of America

13 14 15 10 9 8 7 6 5 4 3 2 1

For information on all Syngress publications visit our website at www.syngress.com