GAO: Agencies can’t get FISMA Just Right; DHS Responds That Guidance Needs To Be Updated. A new GAO report says major agencies continue to struggle with implementing the Federal Information Security Management Act. The GAO takes to task the Office of Management and Budget and the Department of Homeland Security for not developing effective measures or establishing performance targets to report on agencies’ progress. In 2012, all but one of the 24 major federal agencies had weaknesses in the controls intended to limit or detect access to computer resources.”]
Source: https://www.bankinfosecurity.com/gao-agencies-cant-get-fisma-just-right-a-6108