QA from FITSP - Manager, Next Generation Exam Questions and Answers with complete and solutions | Graded A+

The following legislation requires federal agencies to develop, document and implement an agency- wide information security program: - FISMA The following legislation requires each agency with an Inspector General to conduct an annual evaluation of agency's information security program, or to appoint an independent external auditor, to conduct the evaluation on their behalf - E-Government Act of 2002, Section 208 The following OMB guidance established the requirement for federal agencies to review the security controls in each system when significant modifications are made to the system, or at least every three years. This guidance also requires federal agencies to re-authorize information systems every three years - OMB Circular No. A-130, Appendix III, Security of Federal Automated Information Resources The Federal Information Security Modernization Act of 2014 (FISMA 2014) formally assigns information security responsibilities to which of the following agencies/departments (select two): - DHS and OMB Current regulations still require the re-authorization of federal information systems at least every three years. - True The following OMB guidance established the requirement for federal agencies to review the security controls in each system when significant modifications are made to the system, but at least every three years. This guidance also requires federal agencies to re-authorize information systems every three years. - OMB Circular No. A-130, Appendix III, Security of Federal Automated Information Resources As part of monitoring the security posture of agency desktops, OMB requires federal agencies to use vulnerability scanning tools that leverage the ________ protocol. - SCAP