What is the FISMA report process/timeline?
• While FISMA compliance is an ongoing process, which requires quality reviews, the final annual report is due at the end of the Federal fiscal year (September 30); • All FISMA report data is collected approximately two months in advance of the report deadline in order to compile the data and promote it, through the Department, to the IG; and • Agencies must continually monitor IT systems and privacy procedures and responsibilities to ensure that OPDIVs are compliant with Federal IT and privacy laws.