Long-awaited FISMA Reforms May Hit Stumbling Block

[InfoSec News <alerts () infosecnews org>]

http://www.nextgov.com/cybersecurity/2014/11/long-awaited-fisma-reforms-hit-stumbling-block/98294/

By Aliya Sternstein
Nextgov.com
November 5, 2014

The House and Senate have hit a road bump trying to update a 2002 law that 
collects binders of paper once a year, as a way of monitoring federal 
computer security.

Folding an overhaul of the Federal Information Security Management Act, or 
FISMA, into an annual must-pass defense law is one possibility for swift 
enactment, a congressional aide said. But other sources familiar with 
negotiations say inclusion of FISMA in the 2015 National Defense 
Authorization Act is now unlikely.

“As of now, we’re hearing there are no plans to include FISMA in NDAA," an 
industry source said on the condition of anonymity. "Historically, the 
chambers want to keep NDAA clean, and there are provisions in FISMA that 
are raising concerns.”

The source declined to expand on the sticking points.

For going on half a decade, a bipartisan assortment of lawmakers have 
dropped what they consider high-priority proposals to mandate near 
real-time tracking of cyber vulnerabilities.

[...]

--
Evident.io - Continuous Cloud Security for AWS.
Identify and mitigate risks in 5 minutes or less.
Sign up for a free trial @ https://evident.io/