CGRC · Question #359
Which of the following provides instructions for annual FISMA reporting and emphasizes monitoring the security state of information systems on an ongoing bases with a frequency sufficient to make ongo
The correct answer is B. OMB memorandum M-11-33, FY 2011. The question asks for the specific directive that guides annual FISMA reporting and promotes continuous monitoring for risk-based decisions.
Question
Which of the following provides instructions for annual FISMA reporting and emphasizes monitoring the security state of information systems on an ongoing bases with a frequency sufficient to make ongoing, risk-based decisions? Response:
Options
- AClinger-Cohen Act
- BOMB memorandum M-11-33, FY 2011
- COMB Circular A-130, Appendix III, 1997
- DFISMA, 2002
How the community answered
(14 responses)- A7% (1)
- B93% (13)
Why each option
The question asks for the specific directive that guides annual FISMA reporting and promotes continuous monitoring for risk-based decisions.
OMB Memorandum M-11-33, issued in FY 2011, provided key instructions for annual FISMA reporting and significantly emphasized moving from static, periodic assessments to ongoing monitoring of information systems' security state. This memorandum explicitly promoted continuous diagnostics and mitigation to enable agencies to make ongoing, risk-based security decisions, aligning perfectly with the question's description of continuous monitoring.
Concept tested: FISMA reporting and continuous monitoring guidance
Source: https://www.whitehouse.gov/omb/memoranda/2011/m-11-33/
Topics
Community Discussion
No community discussion yet for this question.