ABSTRACT

In this chapter, assessment and authorization methods and activities for cloud-based information systems are reviewed.

e Federal Information Security Management Act (FISMA) is a part of the Electronic Government Act of 2002. It is a comprehensive framework that established the responsibilities and objectives for strengthening the security posture of information resources that support US Federal Operations and Assets.