What is NISTs role in FISMA?
FISMA reaffirmed NISTs role of developing information security standards (Federal Information Processing Standards) and guidelines (Special Publications in the 800-series) for non-national security federal information systems and assigned NIST some specific responsibilities, including the development of: • Standards to be used by Federal agencies to categorize information and information systems based on the objectives of providing appropriate levels of information security according to a range of risk levels; • Guidelines recommending the types of information and information systems to be included in each category; and • Minimum information security requirements (management, operational, and technical security controls) for information and information systems in each such category.
