{"id":78544,"date":"2023-03-31T11:00:00","date_gmt":"2023-03-31T15:00:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=78544"},"modified":"2024-08-06T10:37:13","modified_gmt":"2024-08-06T14:37:13","slug":"what-is-fisma-compliance","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance","title":{"rendered":"What Is FISMA Compliance?"},"content":{"rendered":"\n<p>U.S.government agencies control and store a lot of sensitive data. The Federal Information Security Management Act (FISMA) was adopted as a framework to keep that information from falling into the wrong hands.<\/p>\n\n\n\n<p>Complying with FISMA requirements is mandatory for federal and state agencies, but it also carries significant benefits that can translate into readiness for current and emerging cybersecurity threats. This article breaks down what FISMA is, its requirements,non-compliance penalties, and how JumpCloud can help your organization to comply with FISMA.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-what-is-the-federal-information-security-management-act-fisma\"><strong>What Is the Federal Information Security Management Act (FISMA)?<\/strong><\/h2>\n\n\n\n<p>FISMA, is a U.S. federal legislation that provides a framework for protecting government information and operations. It was enacted into law in 2002 as part of the E-Government Act and has become one of the most significant regulations for reducing information security risks.&nbsp;<\/p>\n\n\n\n<p>The E-Government Act was enacted to allow U.S. federal and state agencies to improve e-government services and processes while enabling them to manage federal spending regarding information security. At the core of the E-Government Act is the FISMA framework, which provides a framework for U.S. agencies to leverage to minimize information security risks while emphasizing cost-effectiveness.&nbsp;<\/p>\n\n\n\n<p>The framework has&nbsp; broadened to also include private businesses that hold contracts with the U.S. government. FISMA assigns some of its responsibilities to other federal agencies, such as NIST(<a href=\"https:\/\/jumpcloud.com\/blog\/nist-compliance-standards\">National Institute of Standards and Technology)<\/a> and OMB (Office of Management and Budget).<\/p>\n\n\n\n<p>FISMA requires agency officers including chief information officers (CIOs) and inspector generals (IGs) to formulate and implement policies and controls that can mitigate information security risks to acceptable levels and in a cost-effective manner.&nbsp;<\/p>\n\n\n\n<p>Once implemented, these officials must undertake an annual review of their security programs and report the same to OMB, which uses the supplied data to assist in its oversight responsibilities. The OMB can also leverage this data when preparing a compliance report for congressional oversight.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-fisma-compliance-requirements\"><strong>FISMA Compliance Requirements<\/strong><\/h2>\n\n\n\n<p>The requirements for complying with FISMA are vast and are intended to offer flexibility. The steps a company needs to take will differ depending on factors such as the type of organization, information the organization handles, risk profiles, and more. <a href=\"https:\/\/jumpcloud.com\/blog\/nist-800-53-compliance-checklist\">NIST<\/a> outlines several steps toward complying with FISMA. These are some of those requirements:&nbsp;<\/p>\n\n\n\n<ul>\n<li><strong>Maintaining information security inventory<\/strong>. Federal agencies and contractors must keep an updated inventory of all their IT assets. In addition, the inventory must also maintain an updated identification of any interface, such as an application programming interface (API) that a system uses to interact with other systems or networks.&nbsp;<\/li>\n\n\n\n<li><strong>Risk categorization<\/strong>. Agencies must categorize information systems based on risk levels. For example, systems that store the most sensitive data need to be implemented with robust security measures to prevent their data from being compromised and remaining <a href=\"https:\/\/jumpcloud.com\/resources\/data-compliance-guide\" target=\"_blank\" rel=\"noreferrer noopener\">compliant<\/a>.&nbsp;<\/li>\n\n\n\n<li><strong>Maintaining security controls<\/strong>. FISMA requires agencies to meet security requirements defined by <a href=\"https:\/\/www.govinfo.gov\/app\/details\/GOVPUB-C13-e55b569514e17617e8460a8e07308191\" target=\"_blank\" rel=\"noreferrer noopener\">Federal Information Processing Standard (FIPS) 200<\/a>. However, while agencies are not obligated to implement every security control, they need to document selected controls in their security plans once they have implemented them.&nbsp;<\/li>\n\n\n\n<li><strong>Refining controls using a risk assessment procedure<\/strong>. Agencies need to validate their security measures to determine if they need any other controls.&nbsp;<\/li>\n\n\n\n<li><strong>Conducting annual security reviews<\/strong>. FISMA requires information security program officials to conduct annual security reviews to ensure they have implemented sufficient security measures. Continuous monitoring must include status reporting, configuration management, and any changes made to the system.&nbsp;<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading\" id=\"h-nist-800-53-framework-nbsp\"><strong>NIST 800-53 Framework&nbsp;<\/strong><\/h3>\n\n\n\n<p>Agencies must implement risk-based information security programs that comply with applicable legislation, executive directives, and orders.&nbsp; <a href=\"https:\/\/csrc.nist.gov\/projects\/risk-management\/fisma-background\" target=\"_blank\" rel=\"noreferrer noopener\">NIST Risk Management Framework (RMF)<\/a> defines a holistic, flexible, and repeatable seven-step process that agencies must implement to manage security and privacy risks.&nbsp;<\/p>\n\n\n\n<p>The NIST RMF\u2019s risk-based approach helps agencies and contractors to:<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-prepare\"><strong><em>Prepare<\/em><\/strong><\/h4>\n\n\n\n<p>Agencies must carry out essential activities and prepare all the departments within the organization to manage risks associated with security and privacy. The outcome of this step includes:<\/p>\n\n\n\n<ul>\n<li>Identifying key risk management roles within the agency<\/li>\n\n\n\n<li>Establishing risk management strategies and tolerance levels<\/li>\n\n\n\n<li>Developing and implementing an organization-wide strategy for continuous monitoring<\/li>\n\n\n\n<li>Identifying standard security controls and measures&nbsp;<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-categorize\"><strong><em>Categorize<\/em><\/strong><\/h4>\n\n\n\n<p>FISMA requires agencies to determine impact levels regarding security and privacy controls when it comes to hosted data and applications. The outcome of this phase includes:<\/p>\n\n\n\n<ul>\n<li>Documenting system characteristics<\/li>\n\n\n\n<li>Categorizing security of the system and data<\/li>\n\n\n\n<li>Classifying the decisions that information security officials have reviewed and approved&nbsp;<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-select-nist-sp-800-53-controls\"><strong><em>Select NIST SP 800-53 Controls<\/em><\/strong><\/h4>\n\n\n\n<p>Agencies must choose, customize, and document all the security controls they deem necessary to protect their systems. The outcome of this step includes:<\/p>\n\n\n\n<ul>\n<li>Selecting control baselines and customizing them&nbsp;<\/li>\n\n\n\n<li>Designating security controls as system-specific, hybrid, or common&nbsp;<\/li>\n\n\n\n<li>Allocating security controls to specific system components<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-implement-controls\"><strong><em>Implement Controls<\/em><\/strong><\/h4>\n\n\n\n<p>Agencies should implement security controls and privacy measures for their system. This phase has two basic outcomes:&nbsp;<\/p>\n\n\n\n<ul>\n<li>Implementing security and privacy control measures&nbsp;<\/li>\n\n\n\n<li>Updating security and privacy plans to reflect the controls as implemented within the agency<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-assess\"><strong><em>Assess<\/em><\/strong><\/h4>\n\n\n\n<p>Agencies need to evaluate if the implemented controls are operating as intended and generating the desired results. Some of the outcomes of this step include:<\/p>\n\n\n\n<ul>\n<li>Selecting the assessors or assessment team&nbsp;<\/li>\n\n\n\n<li>Developing security and privacy assessment plans<\/li>\n\n\n\n<li>Reviewing and approving assessment plans<\/li>\n\n\n\n<li>Developing security and privacy assessment reports<\/li>\n<\/ul>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-authorize\"><strong><em>Authorize<\/em><\/strong><\/h4>\n\n\n\n<p>FISMA requires agencies to provide accountability measures by requiring senior officers to determine whether the security and privacy risk levels are acceptable. For example, agency officials must provide risk responses and approve or deny authorization for the system or common security controls.&nbsp;<\/p>\n\n\n\n<h4 class=\"wp-block-heading\" id=\"h-continuously-monitor\"><strong><em>Continuously Monitor<\/em><\/strong><\/h4>\n\n\n\n<p>Agency officials need to maintain an ongoing situational awareness of the status of the security exposure and support risk management decisions.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-fisma-non-compliance-penalties\"><strong>FISMA Non-Compliance Penalties<\/strong><\/h2>\n\n\n\n<p>Agencies and contractors face a range of potential consequences for not complying with FISMA requirements. These penalties include:<\/p>\n\n\n\n<ul>\n<li><strong>Reduction in federal funding<\/strong>. Federal contractors can lose some federal funding when they breach their contractual obligations regarding FISMA compliance.&nbsp;<\/li>\n\n\n\n<li><strong>Censure from Congress<\/strong>. In case of a data breach, Congress can call the contractor or the agency to determine the scope of the damage and evaluate whether the breach is related to non-compliance with FISMA requirements. If Congress determines that the agency or contractor didn\u2019t comply with FISMA requirements during the breach, it can <strong>remove<\/strong> the organization from future contracts.&nbsp;<\/li>\n\n\n\n<li><strong>Reputational damage<\/strong>. Failing to comply with FISMA requirements can lead to potential data breaches, resulting in reputational damage for the affected agency or contractor.&nbsp;<\/li>\n<\/ul>\n\n\n\n\n<div class=\"promotion-banner-small is-flex-direction-column has-items-aligned-flex-start has-items-aligned-center-tablet\">\n    <div class=\"promo-small-image is-hidden-mobile\">\n        <img decoding=\"async\" src=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/02\/image-1-1-aspect-ratio-160-110-1.png\" alt=\"JumpCloud\">\n    <\/div>\n    <div class=\"promo-small-content\">\n        <p class=\"is-type-body-tiny is-type-weight-bold is-important promo-small-title\">\n            The IT Manager\u2019s Guide to Data Compliance Hygiene        <\/p>\n        <p class=\"is-type-body-default is-important\">\n            How to ace your audit        <\/p>\n    <\/div>\n    <div class=\"promo-small-cta\">\n        <a href=\"https:\/\/jumpcloud.com\/resources\/data-compliance-guide\" data-promo=\"Data Compliance Hygiene\" class=\"button is-primary-green promo-small-banner-link\">Get the Guide <\/a>\n    <\/div>\n<\/div>\n\n\n\n\n<h2 class=\"wp-block-heading\" id=\"h-how-to-achieve-fisma-compliance\"><strong>How to Achieve FISMA Compliance<\/strong><\/h2>\n\n\n\n<p>FISMA has emerged as an essential framework for reducing risks and keeping data safer, allowing agencies to minimize financial risks associated with data breach recovery. For non-government organizations (NGOs), FISMA compliance is crucial to becoming a contractor for U.S. federal and state agencies.&nbsp;<\/p>\n\n\n\n<p>However, like any other regulatory compliance, complying with FISMA requirements can be time-consuming and costly for an organization. <a href=\"https:\/\/jumpcloud.com\/solutions\/compliance\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud\u2019s Directory Platform\u00ae<\/a> is an intuitive, all-in-one cloud-based identity and access management (IAM) solution that can help you streamline compliance with FISMA requirements and other regulations.JumpCloud\u2019s Directory\u00ae Platform<\/p>\n\n\n\n<p>FISMA places heavy emphasis on the adoption of multi-factor authentication (MFA) and encryption. The publication <em>2022 CIO FISMA Metrics<\/em> includes the following checklist covering authentication methods:<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"512\" height=\"320\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2023\/03\/FISMA.png\" alt=\"FISMA metrics\" class=\"wp-image-78547\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/03\/FISMA.png 512w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/03\/FISMA-300x188.png 300w\" sizes=\"(max-width: 512px) 100vw, 512px\" \/><figcaption class=\"wp-element-caption\"><em>FY 2022 CIO FISMA Metrics Version 1.1&nbsp;<\/em><\/figcaption><\/figure>\n\n\n\n<p>As a <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-cloud-compliance\">cloud-compliance solution<\/a>, JumpCloud Directory enables IT teams to secure access to crucial IT assets within the organization \u2014 whether such assets are hosted on-prem or in cloud-based environments. It allows organizations to adhere to <a href=\"https:\/\/jumpcloud.com\/blog\/it-governance-vs-compliance\">IT governance and compliance<\/a> standards by incorporating security controls such as <a href=\"https:\/\/jumpcloud.com\/platform\/conditional-access\" target=\"_blank\" rel=\"noreferrer noopener\">conditional access<\/a>, <a href=\"https:\/\/jumpcloud.com\/platform\/multi-factor-authentication-mfa\" target=\"_blank\" rel=\"noreferrer noopener\">MFA<\/a>, multi-platform<a href=\"https:\/\/jumpcloud.com\/platform\/cloud-device-management\" target=\"_blank\" rel=\"noreferrer noopener\"> device management<\/a>, and more.<\/p>\n\n\n\n<p>For example, JumpCloud provides:<\/p>\n\n\n\n<ul>\n<li><a href=\"https:\/\/jumpcloud.com\/blog\/what-are-ssh-keys\">SSH keys for servers<\/a>, which are more secure than passwords<\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/blog\/certificate-based-authentication-for-radius\">Passwordless certificates<\/a> to secure RADIUS Wi-Fi access<\/li>\n\n\n\n<li><a href=\"https:\/\/jumpcloud.com\/platform\/single-sign-on\" target=\"_blank\" rel=\"noreferrer noopener\">SAML and OIDC<\/a> for authentication into web apps<\/li>\n\n\n\n<li><a href=\"https:\/\/support.jumpcloud.com\/s\/article\/Getting-Started-Conditional-Access-Policies\" target=\"_blank\" rel=\"noreferrer noopener\">Conditional access rules<\/a> for <a href=\"https:\/\/jumpcloud.com\/blog\/privileged-access-management\">privileged access management<\/a><\/li>\n<\/ul>\n\n\n\n<p>Ready to start getting compliant? Read our&nbsp;<a href=\"https:\/\/jumpcloud.com\/resources\/it-compliance-quickstart-guide\" target=\"_blank\" rel=\"noreferrer noopener\">IT Compliance Quickstart Guide<\/a> to give you more insights as you prepare to shore up your IT security baseline. <\/p>\n\n\n\n<p>Would you prefer tailored, white-glove implementation assistance? Learn more about <a href=\"https:\/\/jumpcloud.com\/professional-services\">JumpCloud Professional Services<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Learn what FISMA compliance is, what FISMA requires, and how you can become compliant using JumpCloud.<\/p>\n","protected":false},"author":150,"featured_media":78548,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[],"collection":[2775],"platform":[],"funnel_stage":[3016],"coauthors":[2535],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>What Is FISMA Compliance? - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn what FISMA compliance is, what FISMA requires, and how you can become compliant using JumpCloud.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What Is FISMA Compliance?\" \/>\n<meta property=\"og:description\" content=\"Learn what FISMA compliance is, what FISMA requires, and how you can become compliant using JumpCloud.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:published_time\" content=\"2023-03-31T15:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-08-06T14:37:13+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/03\/Business.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"640\" \/>\n\t<meta property=\"og:image:height\" content=\"428\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"David Worthington\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"David Worthington\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"7 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance\"},\"author\":{\"name\":\"David Worthington\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e\"},\"headline\":\"What Is FISMA Compliance?\",\"datePublished\":\"2023-03-31T15:00:00+00:00\",\"dateModified\":\"2024-08-06T14:37:13+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance\"},\"wordCount\":1349,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/03\/Business.jpg\",\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance\",\"url\":\"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance\",\"name\":\"What Is FISMA Compliance? - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/03\/Business.jpg\",\"datePublished\":\"2023-03-31T15:00:00+00:00\",\"dateModified\":\"2024-08-06T14:37:13+00:00\",\"description\":\"Learn what FISMA compliance is, what FISMA requires, and how you can become compliant using JumpCloud.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/03\/Business.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/03\/Business.jpg\",\"width\":640,\"height\":428,\"caption\":\"Business man staring at a computer screen, deep in thought\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What Is FISMA Compliance?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e\",\"name\":\"David Worthington\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d9acf1381c6e5b50c0f50d47b7b05411\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g\",\"caption\":\"David Worthington\"},\"description\":\"I'm the JumpCloud Champion for Product, Security. JumpCloud and Microsoft certified, security analyst, a one-time tech journalist, and former IT director.\",\"sameAs\":[\"https:\/\/jumpcloud.com\/blog\",\"david.worthington@jumpcloud.com\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"What Is FISMA Compliance? - JumpCloud","description":"Learn what FISMA compliance is, what FISMA requires, and how you can become compliant using JumpCloud.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance","og_locale":"en_US","og_type":"article","og_title":"What Is FISMA Compliance?","og_description":"Learn what FISMA compliance is, what FISMA requires, and how you can become compliant using JumpCloud.","og_url":"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance","og_site_name":"JumpCloud","article_published_time":"2023-03-31T15:00:00+00:00","article_modified_time":"2024-08-06T14:37:13+00:00","og_image":[{"width":640,"height":428,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/03\/Business.jpg","type":"image\/jpeg"}],"author":"David Worthington","twitter_card":"summary_large_image","twitter_misc":{"Written by":"David Worthington","Est. reading time":"7 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance"},"author":{"name":"David Worthington","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e"},"headline":"What Is FISMA Compliance?","datePublished":"2023-03-31T15:00:00+00:00","dateModified":"2024-08-06T14:37:13+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance"},"wordCount":1349,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/03\/Business.jpg","inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance","url":"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance","name":"What Is FISMA Compliance? - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/03\/Business.jpg","datePublished":"2023-03-31T15:00:00+00:00","dateModified":"2024-08-06T14:37:13+00:00","description":"Learn what FISMA compliance is, what FISMA requires, and how you can become compliant using JumpCloud.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/03\/Business.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2023\/03\/Business.jpg","width":640,"height":428,"caption":"Business man staring at a computer screen, deep in thought"},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/what-is-fisma-compliance#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"What Is FISMA Compliance?"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e","name":"David Worthington","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d9acf1381c6e5b50c0f50d47b7b05411","url":"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g","caption":"David Worthington"},"description":"I'm the JumpCloud Champion for Product, Security. JumpCloud and Microsoft certified, security analyst, a one-time tech journalist, and former IT director.","sameAs":["https:\/\/jumpcloud.com\/blog","david.worthington@jumpcloud.com"]}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/78544"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/150"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=78544"}],"version-history":[{"count":3,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/78544\/revisions"}],"predecessor-version":[{"id":113656,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/78544\/revisions\/113656"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/78548"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=78544"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=78544"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=78544"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=78544"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=78544"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=78544"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=78544"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}