FISMA stands for the Federal Information Security Management Act, which the United States Congress passed in 2002: it requires federal agencies to implement information security plans to protect sensitive data.

FISMA compliance is data security guidance set by FISMA and the National Institute of Standards and Technology (NIST). FISMA assigns responsibilities to various agencies to ensure the security of data in the federal government. The act requires program officials, and the head of each agency, to conduct annual reviews of information security programs, with the intent of keeping risks at or below specified acceptable levels in a cost-effective, timely and efficient manner.

Click to download

Cloud Workload Protection Platform (CWPP) as defined by Gartner is a “workload-centric security solution that targets the unique protection requirements” of workloads in modern enterprise environments. Workloads in modern environments have evolved to include physical servers, virtual machines (VMs), containers, and serverless workloads.

(more…)

The Australian National Audit Office (ANAO) has undertaken nine previous cross agency protective security audits. The AGD, which is responsible for promulgating Australian Government protective security policy, has indicated its support for the conduct of these audits and acknowledged their contribution to improving the management and delivery  of protective security practices in the Australian Government sector. (more…)

The Prime Minister is ultimately responsible for the security of HM Government. The Prime Minister delegates accountability to the Cabinet Secretary, who in turn delegates accountability to Permanent Secretaries and Accounting Officers. Accounting Officers are accountable to Parliament for the security of their organisations.

(more…)

Given an attack in the UK could occur anywhere, at any time, and likely with little or no warning, the guidance is relevant to all organisations running sites and venues UK-wide, where employees and the public may be present. From sporting and music venues, restaurants, bars, hotels and nightclubs to transport hubs and carriers, they all represent potentially ‘soft’ targets for terrorists.

(more…)