Author: Qamer Javed

The protection of federal information requires a consistent and rigorous approach. Government agencies handle a large volume of data, some of which may be quite sensitive; a standard framework of security controls is thus warranted. These controls are not recommendations, instead they are usually imposed as binding requirements to ensure that at least the basic level of security applies throughout the federal government. Major penalties can include fiscal impacts and reputational consequences due to non-compliance. This article will explore the main sources of guidance that outline those key security controls. How Federal Information Security Guidance Shapes a Strong Information Security…