Question

FISMA requires that agencies have in place an information systems inventory. All information systems in the inventory should be categorized using FIPS 199 as a _________ step in the system security planning activity.

A) Final
B) Initial
C) Mandatory
D) Ongoing

Answer 1

FISMA requires agencies to categorize their information systems using FIPS 199 as an initial step in security planning, which is essential for assessing required security levels.

Step-by-step explanation:

FISMA (Federal Information Security Modernization Act) requires that agencies have an information systems inventory in place. When categorizing the information systems in the inventory, they should be classified using FIPS 199 as an initial step in the system security planning activity.

FISMA requires that agencies have in place an information systems inventory. All information systems in the inventory should be categorized using FIPS 199 as an initial step in the system security planning activity. This categorization is meant to assess the level of security required for each system based on the potential impact of loss of confidentiality, integrity, and availability. It's the starting point for determining the types of security controls that are appropriate for the protection of the system and the information it processes, transmits, or stores.