FISMA Compliance Handbook

Laura Taylor leads the technical development of FedRAMP, the U.S. government's initiative to apply the Federal Information Security Management Act to cloud computing. In 2006, Taylor's FISMA Certification and Accreditation Handbook was the first book published on FISMA. Taylor has contributed to four other books on information security and has authored hundreds of articles and white papers on infosec topics for a variety of web publications and magazines. Specializing in assisting federal agencies and private industry comply with computer security laws, Taylor is a thought leader on cyber security compliance. Taylor has led large technology migrations, developed enterprise wide information security programs, and has performed risk assessments and security audits for numerous financial institutions.

• 1: What Is Certification and Accreditation? 2 FISMA Trickles into the Private Sector 3: FISMA Compliance Methodologies 4: Understanding the FISMA Compliance Process 5: Establishing a FISMA Compliance Program 6: FISMA Compliance Project Management 7: Preparing the Hardware and Software Inventory 8: Determining the Information Sensitivity Level 9: Addressing Security Awareness and Training Requirements 10: Addressing End-User Rules of Behavior 11: Addressing Incident Response 12: Performing Security Testing 13: Conducting a Privacy Impact Assessment 14: Performing the Business Impact Analysis 15: Developing the Contingency Plan 16: Preparing the Security Assessment Report 17: Developing a Configuration Management Plan 18: Preparing the System Security Plan 19: Before Submitting Your Documents 20: Evaluating the Security Assessment Package for Authorization 21: Addressing Compliance Findings 22: FedRAMP and Cloud Computing