Congress 107 - HR 3844 - Federal Information Security Management Act of 2002

Sponsor

Cosponsors

Topics

Administrative procedure Armed Forces and National Security Civil Rights and Liberties, Minority Issues Classified defense information Computer crimes Computer networks Computer security measures Computers and government Confidential communications Crime and Law Enforcement Data banks Delegation of powers Department of Commerce Economics and Public Finance Electronic government information Employee training Encryption Executive reorganization Federal advisory bodies Government contractors Government Operations and Politics Government paperwork Information technology Inspectors general Labor and Employment Law Management audit Military communications Names Office of Management and Budget Planning-programming-budgeting Right of privacy Risk assessment Science, Technology, Communications

Full Text

View Full Bill Text

Votes

Summary

Federal Information Security Management Act of 2002 - Requires the Director of the Office of Management and Budget to oversee Federal agency information security policies and practices, including by requiring each Federal agency to identify and provide information security protections commensurate with the risk and magnitude of harm resulting from the unauthorized use, disclosure, disruption, modification, or destruction of information or information systems. Requires each agency's senior officials to provide security for the information and systems that support their operations and assets and to develop plans and procedures to ensure the continuity of such information and systems.

Requires the: (1) Director to establish and operate a central Federal information security incident center; and (2) head of each agency operating or controlling a national security system to take measures to protect such system.

Authorizes appropriations for FY 2003 through 2007 for information security.

Requires the Director (currently, the Secretary of Commerce) to promulgate standards and guidelines pertaining to Federal information (currently, computer) systems.

Requires the National Institute of Standards and Technology to: (1) develop and submit to the Director standards and guidelines for information (currently, computer) systems used or operated by or for a Federal agency, other than national security systems; and (2) provide adequate security for such systems. Establishes in the Institute an Office for Information Security Programs.

Renames the Computer System Security and Privacy Advisory Board as the Information Security Advisory Board.

Actions

Mar 18, 2002

Referred to the Subcommittee on Environment, Technology, and Standards.
Mar 5, 2002

Referred to the Committee on Government Reform, and in addition to the Committee on Science, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
Mar 5, 2002

Sponsor introductory remarks on measure. (CR E259)
Mar 5, 2002

Introduced in House

Amendments

Related Bills