Letter: What does FISMA scorecard actually assess?
Regarding "Justice IG finds IT security vulnerabilities
the Federal Information Security Management Act scorecard doesn't
assess actual security of the information technology environment, then
what does it really assess?
There should be a recommendation
to the Office of Management and Budget and the National Institute of
Standards and Technology to align the FISMA scorecard with true
measures of information technology security.AnonymousWhat do you think? Paste a comment in the box below (registration required), or send your comment to email@example.com (subject line: Blog comment) and we'll post it.