Glossary Term: Federal Information Security Management Act
A 2002 law requiring all federal agencies to develop, document, and implement information security programs. Security hosting, software and managed services can be certified as FISMA compliant after a Certification and Accreditation (C&A) audit.