Which act assigned responsibilities to NIST for developing standards related to securing Federal Information Systems?

Which act assigned responsibilities to NIST for developing standards related to securing Federal Information Systems?

• A. Privacy Act
• B. Computer Security Act and FISMA
• C. Federal Records Act
• D. Government Performance and Results Act

Answer: (B)

The answer is based on the specific legislative framework that provides NIST with authority and responsibility regarding the development of security standards for federal information systems. The Computer Security Act of 1987 was one of the early laws to address the security of federal computer systems. However, it was the Federal Information Security Management Act (FISMA), enacted in 2002, that significantly expanded and formalized NIST's role in information security. FISMA requires federal agencies to secure information systems, and it tasks NIST to develop standards and guidelines to support this effort. NIST's role under FISMA includes providing a framework for managing risk to federal information systems, which encompasses the establishment of security standards and guidelines that federal agencies must follow. This combination of the Computer Security Act and FISMA establishes a solid foundation for NIST's responsibilities in overseeing security standards, making this the correct choice. In contrast, the other acts listed do not specifically assign similar responsibilities to NIST regarding the security of federal information systems.

The answer is based on the specific legislative framework that provides NIST with authority and responsibility regarding the development of security standards for federal information systems. The Computer Security Act of 1987 was one of the early laws to address the security of federal computer systems. However, it was the Federal Information Security Management Act (FISMA), enacted in 2002, that significantly expanded and formalized NIST's role in information security.

FISMA requires federal agencies to secure information systems, and it tasks NIST to develop standards and guidelines to support this effort. NIST's role under FISMA includes providing a framework for managing risk to federal information systems, which encompasses the establishment of security standards and guidelines that federal agencies must follow.

This combination of the Computer Security Act and FISMA establishes a solid foundation for NIST's responsibilities in overseeing security standards, making this the correct choice. In contrast, the other acts listed do not specifically assign similar responsibilities to NIST regarding the security of federal information systems.