Failure to authorize an operational system to process demonstrates that management has not exercised due care in protecting the system in the event of a security incident. Which of the following Acts

The Clinger-Cohen Act of 1996 focuses on IT investment management and acquisition, not directly on the authorization of operational systems for security purposes in case of an incident.

The Computer Security Act of 1987 predates FISMA and focused on establishing minimum security requirements and training for federal computer systems, but FISMA significantly expanded and clarified these responsibilities, making it the more direct violation for authorization failures.

FISMA 2002 mandates that federal agencies develop, document, and implement an agency-wide information security program to protect information and information systems, including the formal authorization of systems to operate (ATO). Failure to authorize a system demonstrates a lapse in meeting these mandated security program requirements, thus violating FISMA's provisions for due care and system protection.

FIPS 102 is a Federal Information Processing Standard that deals with guidelines for computer security certification and accreditation, but it is a standard, not an Act that can be violated in the same legal sense as FISMA.