FISMA Archives

Demonstrators gather outside of the offices of the U.S. Department of Education in Washington, D.C. on March 13, 2025 to protest against mass layoffs and budget cuts at the agency, initiated by the Trump administration and DOGE. (Photo by Bryan Dozier / Middle East Images / Middle East Images via AFP) (Photo by BRYAN DOZIER/Middle East Images/AFP via Getty Images)

Education CIO office lost more than half of its employees to Trump’s reduction in force, watchdog says

Some sub-offices were left completely empty, the Office of the Inspector General found using Microsoft Teams, since the agency refused to supply staffing data.

Jun 24, 2026 By K. Sophie Will

Small Business Administration headquarters. (Tajha Chappellet-Lanier)

Auditors find problems with SBA’s information security program

The agency has fallen short on nine of 10 security controls under OMB guidance, according to a new OIG report on FISMA compliance.

May 20, 2026 By Matt Bracken

Why automation is key to modernizing federal IT compliance

By replacing spreadsheet-based processes with FedRAMP-authorized automated workflows, federal agencies can gain real-time visibility, improve audit readiness, and reduce risk by strengthening compliance with key mandates.

Jan 5, 2026 By Jason Venner

Could a FedRAMP rehaul usher in the US government’s AI age?

As the cloud services authorization program readies for a revamp geared toward the private sector, commercial AI providers are in wait-and-see mode.

Apr 4, 2025 By Rebecca Heilweil

The Environmental Protection Agency’s logo is displayed on a door at its headquarters on March 16, 2017, in Washington, D.C. (Photo by Justin Sullivan/Getty Images)

EPA watchdog finds lack of IT systems inventory, software asset management data

The Office of Inspector General audit offered recommendations on how the agency should address its software management needs.

Apr 3, 2025 By Caroline Nihill

ISTANBUL, TURKEY – MAY 05: A Bitcoin logo in the window of a cryptocurrency exchange kiosk on May 5, 2023 in Istanbul, Turkey. (Photo by Aziz Karimov/Getty Images)

Even the US government can fall victim to cryptojacking

Documents reveal that USAID was victimized by a password spray attack that resulted in roughly $500,000 in Microsoft service charges.

Jan 31, 2025 By Rebecca Heilweil Tim Starks

Agencies push for digital transformation amid security challenges

Federal agencies are accelerating digital transformation efforts to meet public expectations and comply with mandates, but transitioning securely to platforms like Salesforce often requires specialized help, according…

Nov 13, 2024 By Scoop News Group

Watchdog recommends changes in FISMA metrics, as agencies still ‘mostly ineffective’ at implementation

Most civilian agencies reviewed by the Government Accountability Office didn’t demonstrate effective FISMA implementation.

Jan 9, 2024 By Madison Alder

OMB guidance asks agencies to provide inventory of IoT assets

The memo also calls on the CISO Council to create a working group charged with compiling sector-specific best practices playbooks that cover IoT and operational technology.

Dec 6, 2023 By Matt Bracken

WASHINGTON, DC – JULY 21, 2022: Chairman Gary Peters (D-MI) listens as Transportation Security Administrator David Pekoske speaks during his confirmation hearing before the Senate Homeland Security and Governmental Affairs committee (Photo by Anna Moneymaker/Getty Images).

FISMA reform bill advances in Senate

The long-awaited bill seeks to improve cybersecurity coordination between agencies and codify the role of the federal CISO.

Jul 26, 2023 By John Hewitt Jones