The Role of Nist in Cyber Security Under Fisma Essay 2022

Running head: ESSAY ON THE ROLE OF NIST IN CYBER-SECURITY UNDER FISMA
ESSAY
ON
THE ROLE OF NIST
IN
CYBER-SECURITY
UNDER
FISMA
Name of the Student
Name of the University
Author Note:

1Cyber Security
The purpose of this paper is to discuss about the importance of NIST in the field of
Cyber-Security under the FISMA regulation. In order to discuss about the nominated topic
several research paper has been selected with the purpose to analyze how the NIST has
affected the aspect of cyber security. Followed by the above mentioned objective the
researcher Pernik, Wojtkowiak and Verschoor-Kirss (2016) has mentioned that “The
Federal Information Security Management Act (FISMA) – as part of the E-Governance
Act of 2002 – instituted a risk management framework developed by the National
Institute of Standards and Technology (NIST) to standardise cyber security processes
throughout US government agencies.30 The act established a Federal Chief Information
Officer within the Office of Management and Budget (OMB), responsible for overseeing
the government’s use of technology both in terms of spending and strategy.31 It
clarified and strengthened NIST’s responsibilities for developing security standards for
federal computer systems (except for defence and intelligence systems), established a
central federal incident centre, and made OMB responsible for promulgating federal
cyber security standards.” Which indicates that in the application of effective NIST
regulation helps to enhance the security standards of the computer systems. Followed by this
in this research paper it has been noticed that the researcher has mentioned that under the
federal Information Security Management Act (FISMA), NIST has provided effective
controls and regulation on protecting the systems with the purpose to provide adequate
security and protection to the IT systems of government and the others. Followed by this
process under the act of FISMA it has been noticed that it has taken action to regulate the
cyber security awareness among the private sectors and the government sectors as well.
Along with this, it is also noticed that it allows the capability of enhancing the procedure to
prevent the intrusion, it also enhances the intelligence ability of the systems as well as
elaborating the cyber chain education with the purport to enhance the security of the IT

2Cyber Security
technology as well as the other cyber operations. Followed by this discussion Fischer (2014)
has mentioned that “Under current law, all federal agencies have cyber-security
responsibilities relating to their own systems, and many have sector-specific
responsibilities for CI.” Which indicates that the application of NIST in the field of cyber
operations with the purpose to enhance the cyber security has significantly impacted the
security standards and effectiveness of the computer systems of several business sectors and
government sectors as well. Followed by the above statement it has been also noticed that the
Obama Administrator has approached to draw an integrated solution for the analysing,
detecting as well as preventing the federal systems for the cyber- security threats. Along with
the above mentioned objective it has been noticed that several significant security laws has
taken place with the purpose to enhance the cyber security. Those laws are related to the
cybercrimes, data breach, and information sharing as well as related to the aspect of
reformation of FISMA which has significantly impacted the security protocols of cyber
operations. Followed by the above mentioned discussion it has been also noticed that
according to Shackelford et al., (2015) “In February 2013, President Obama issued an
executive order that, among other things, expanded public-private information sharing
and tasked the National Institute for Standards and Technology (NIST) with
establishing a voluntary “Cybersecurity Framework” comprised partly of private-
sector best practices that companies could adopt to better secure critical
infrastructure.” Followed by the above mentioned statement it has been noticed that the
application of the NIST with the purpose to enable effective cyber-security framework, has
highly affected the security concern of the cyber operations among the government as well as
among the private working sectors. Along with describing this aspect it has been also
observed that several organizations has expressed their opinion by stating that the application
of NIST regulation under the FISMA has significantly impacted the security concerns

3Cyber Security
however, the cyber operations has become more complex which is requires more efforts from
the organizational end. Hence, considering the all of the above discussion it can be stated that
there is a significant role of NIST in the Cyber-security under the FISMA as it has been
proven by several researcher that this has enhances the security concern of the government as
well as the private sectors computer systems with the purpose to protect the important data
and operations.

4Cyber Security
Reference:
[1] P. Pernik, J. Wojtkowiak, and A. Verschoor-Kirss 2016. National cyber security
organisation: United States. NATO Cooperative Cyber Defence Centre of Excellence:
Tallinn.
[2] E.A. Fischer, 2014. Cybersecurity issues and challenges: In brief.
[3] S.J. Shackelford, A.A. Proia, B. Martell and A.N. Craig 2015. Toward a global
cybersecurity standard of care: Exploring the implications of the 2014 NIST cybersecurity
framework on shaping reasonable national and international cybersecurity practices. Tex. Int'l
LJ, 50, p.305.