CMS Information Security

← Back to document page

1 CMS Information Security 1 Information Security The Federal Information Security Management Act of 2002 (Public Law 107-347) (FISMA) requires each agency to develop, document, and implement an agency-wide Information Security program to safeguard Information and Information systems that support the operations and assets of the agency, including those provided or managed by another agency, (including Subcontractors) or other source on behalf of an agency. That is, agency Information Security programs apply to all organizations (sources) which have physical or electronic access to a Federal agency s computer systems, networks, or IT infrastructure; or use Information systems to generate, store, process, or exchange data with a Federal agency, or on behalf of a Federal agency, regardless of whether the data resides on a Federal Agency or a Contractor s Information system. This includes services that are either fully or partially provided; including other agency hosted, outsourced, and cloud computing solutions.

times with all CMS and Federal Information Technology (IT) Security standards, policies, and reporting requirements, as well as all National Institute of Standards and Technology (NIST) standards and guidelines, other Government-wide laws and regulations for the protection and

  Information, Security, Technology, Information technology, Cms information security