What is Federal Information Security Management Act (FISMA)?

United States recoganized the importance of information security to the economic and security interests of the state and enacted the FISMA in 2002. FISMA has assigned specific responsibilities to the agencies National Institute of Standards and Technology (NIST) and Office of the Management and Budget (OMB). NIST develops the standards, tests, metrics, and validation programs to promote, measure, and validate the security information systems and services. FISMA requires federal agency officials to conduct annual reviews of the agency's information security program and report the results to OMB. NIST defines a broad framework for managing information security comprising of inventory of information, risk level categorization, security controls, risk assessment, system security plan, accredition and certification, and continuous monitoring.

In the grand scheme of things related to security of infromation and infromation systems of US federal agencies, EventLog Analyzer effectively addresses the security controls, risk assessment, and continuous monitoring aspects of the framework.

The following controls are covered in the reports:

• Audit and Accountability (AU)
  
• Certification, Accreditation, and Security Assessments (CA)
  
• Contingency Planning (CP)
  
• Access Control (AC)
  
• Identification and Authentication (IA)
  
• Configuration Management (CM)
  

EventLog Analyzer provides the following reports to help comply with the FISMA regulation controls:

• Audit and Accountability (AU)
  
  • Object Handle
    
  • Object Created
    
  • Object Modified
    
  • Object Deleted
    
  • Object Accessed
• Certification, Accreditation, and Security Assessments (CA)
  
  • Windows Services
• Contingency Planning (CP)
  
  • Windows Restore
    
  • Windows Backup
• Access Control (AC)
  
  • Terminal Service Session
    
  • Unsuccessful User Logons
    
  • Successful User Logoffs
    
  • Successful User Logons
• Identification and Authentication (IA)
  
  • Individual User Action
• Configuration Management (CM)
  
  • Anti-malwares
    
  • Other Software
    
  • Windows Software Updates

FISMA Compliance - Windows Event IDs