FISMA bill could add $150 million to agencies' costs

An information security bill in the Senate could add $150 million annually to agencies’ current expenses if it became law, a government report issued today estimates.

The Federal Information Security Management Act of 2008 (S. 3474), approved Oct. 1 by the Senate Homeland Security and Governmental Affairs Committee, would require agencies to perform additional audits and evaluations of the government’s information systems.

Based on information from the Office of Management and Budget and other agencies, the Congressional Budget Office estimated the new requirements would add two percent to three percent to current FISMA expenses, according to its report.

Agencies spent nearly $6 billion in fiscal 2007 on requirements related to FISMA, the report states.

Also, the CBO estimates it would take about four years to meet the legislation’s requirements for the approximately 10,000 federal computer systems currently operating. The CBO estimated that upgrades to meet those new requirements and authorities would increase costs by $40 million of the $150 million in 2009 and about $570 million from 2009 to 2013, according to the report.

The original FISMA law created a comprehensive framework to ensure agencies have secure controls over information supporting federal operations and assets.

In addition to current requirements, the bill would create a chief information security officer council to establish best practices and guidelines for securely maintaining information. The bill also would strengthen the role of each agency’s CISO by giving them additional authorities, would require standardized information security audits and would impose a variety of new reporting requirements. In addition, the Homeland Security Department would be required to test the security of government information systems.

With members of Congress focused on elections, the legislation has little, if any, chance of passage, but some observers have said it raises important issues.

About the Author

Matthew Weigelt is a freelance journalist who writes about acquisition and procurement.

Featured

  • Contracting
    8 prototypes of the border walls as tweeted by CBP San Diego

    DHS contractors face protests – on the streets

    Tech companies are facing protests internally from workers and externally from activists about doing for government amid controversial policies like "zero tolerance" for illegal immigration.

  • Workforce
    By Mark Van Scyoc Royalty-free stock photo ID: 285175268

    At OPM, Weichert pushes direct hire, pay agent changes

    Margaret Weichert, now acting director of the Office of Personnel Management, is clearing agencies to make direct hires in IT, cyber and other tech fields and is changing pay for specialized occupations.

  • Cloud
    Shutterstock ID ID: 222190471 By wk1003mike

    IBM protests JEDI cloud deal

    As the deadline to submit bids on the Pentagon's $10 billion, 10-year warfighter cloud deal draws near, IBM announced a legal protest.

Stay Connected

FCW Update

Sign up for our newsletter.

I agree to this site's Privacy Policy.