GAO: Agencies’ Implementation of FISMA Requirements Was Inconsistent

As authorized by the Federal Information Security Modernization Act of 2014, GAO reviewed 23 federal civilian agencies, looking at their reports and other performance data to evaluate the effectiveness of their implementation of cybersecurity policies and practices, and the extent to which their officials consider FISMA effective at improving the security of their information systems.