Federal Information Security Management Act

Passwords should be designed to prevent them from being discovered by unauthorized persons. All passwords should have at least eight (8) characters. The user-IS should never be used as the password. Words in dictionary, derivates of user-IDs, and common character sequences such as “123456789” should not be employed.

Today, electronic surveillance remains one of the most effective tools the United States has to protect against foreign powers and groups seeking to inflict harm on the nation, but it does not go without a few possessing a few negative aspects either. Electronic surveillance of foreign intelligence has likely saved the lives of many innocent people through prevention of potential acts of aggression towards the United States. There are many pros to the actions authorized under the Foreign Intelligence Surveillance Act (FISA) pertaining to electronic surveillance, but there are also cons. Looking at both the pros and cons of electronic surveillance is important in understanding the overall effectiveness of FISA. [1]

The GLB Safeguard Rule requires that financial institutions develop security programs to protect data; they also must provide provisions to protect customer’s information and it requires institutions to give customers a written privacy notices that explain how their information is shared.

Since the passing of FISA came after a widespread finding of warrantless wiretapping by a number of different government entities, Congress along with the Carter administration, needed to carefully craft a bill that not only reconciled national security needs to conduct domestic surveillance, but also continued to protect individual liberties such as that of the first and fourth amendments. The once top-secret Carter administration memos regarding FISA offer a first-hand glimpse at the thinking that went into

Another step involves security checks upon implementation and describes agency-level threat to the business scenario or the mission. It similarly entails sanctioning the information system for processing and lastly constant monitoring of the security controls. FISMA and NIST's standards are aimed at offering the ways for agencies to achieve their identified missions with safety commensurate with the threat (United States Department of Agriculture, 2015). Together with guidelines from the Office of Management and Budget (OMB), FISMA and NIST create a framework for advancing and growing an information security scheme (SecureIT, 2008). Such framework includes control descriptions and evaluation, program development, and system certification and accreditation. The final objective involves conducting daily functioning of the agency and achieving the agency's articulated objectives with sufficient security commensurate with risk.

(2006) also states, these core measures must be followed by physician staff and clinical staff.

All organizations are expected to comply with local, state and governmental laws. If an organization experiences non-compliance to

Compliance with Laws, Rules, and Regulations is, to me, the most important area in a company’s code of conduct. Complying with laws, rules, and regulations includes preventing harassment and discrimination, improper payments, and environmental compliance. When companies are in compliance they are not putting themselves at risk of huge fines, lawsuits, and negativity towards their company.

The United States became one of the most influential world powers virtually overnight. The system of functionality which maintains this growth and power is the refined codes of business practices which are the cornerstone for domestic and international business relations the world over.

However, critics challenged the constitutionality of FISA and the abuse of the government power under the First, Fourth and Fith amendments of the United States Constitution. The problem led to the erection of “the wall” that inhibited the information sharing between the intelligence and law enforcement communities. The expansion of FISA after the enactment of USA PATRIOT Act significantly broadened the authority of the Executive Branch for the electronic surveillance and removed the wall, allowing the flow of information among Intelligence Community in the fight against terrorism. However, the removal of the wall led to the tension between national security and civil liberties. The FISC review has clarified the requirements for the use of intelligence under FISA to limit abuse of the Executive power. However, much is still needed to be done to properly balance the national security concerns and privacy rights. Consequently, the role of the Congress as an oversight machine is strongly required to limit instances under which the Government may conduct unlawful electronic

What would happen if we did not have the Cybersecurity Act? If we did not have cybersecurity protection then hackers would easily be able to get important information that we need to protect ourselves, and the country, if there were to be very important information leaked to either cyber-criminals, terrorists or hackers then multiple people or America itself may be in trouble. Many businesses, trade groups, government officials, and civil liberty groups will be protected by the Cybersecurity Act, also it gives people, the government, and money more privacy then they have already. The overall goal of CISA (Cybersecurity Information Sharing Act) is to improve information sharing in the hopes of preventing cyber-attacks

For example a clerk will only be able to access a limited amount of information, such as inventory at each store. The limitations will be different for an accountant or the mangers. All information will be protected with several different layers of security. The first layers will be simple hardware protection for access to the network; from there the security will increase with password protection and restrictions to users. (Merkow & Breithaupt 2006)

The Freedom of Information Act was enforced when our government realized the importance of the relationship between access to information and government accountability. This act enables citizens to view a plethora of different files and records from government agencies. This act proved to be “a principal instrument for breaking down bureaucratic secrecy in American public administration” (p. 62).

In 1999 the United States Congress passed the Gramm-Leach-Bliley Financial Services Modernization Act which finished off the repealing process of the Glass-Steagall Act of 1933 (Moffett, Stonehill, & Eiteman, 2012, p. 114). The Glass-Steagall Act had imposed barriers within the United States financial sector, where commercial banking entities were separate from investment banks. This meant that commercial banks were able to operate in higher risk activities that were traditionally reserved for the investment institutes. Commercial banks were now able to directly offer their customers a wider array of loans, including creative mortgage arrangements.

The Federal Government needs to create information systems which are more effective shielded systems to protect their assets and resources at home. The foundation of any mandated cybersecurity strategies that secure our nation national security must incorporate worldwide or state local threats whether targeted toward the federal government or the private sector forces. The OPM breach highlighted the insufficient and inconsistence security approaches the federal government has already used in modernizing the existing cybersecurity policies. There is a requirement for the United States government to institute polices that would incorporate and implement new government cybersecurity structures and centralized the protection of their assets to avert future breaches (Source). Examining the inadequacies in the current national cybersecurity policies and regulations is disappointing as OPM choice to implement these mechanisms and the current authoritative propositions to cybersecurity must change immediately. It was reported that OPM only spent $2 million in 2015 to avert pernicious digital assaults, while the Department of Agriculture spent $39 million. The Department of Commerce, Department of Education, and Department of Labor likewise invested more money in cybersecurity resources than the Office of Personnel Management. The Small Business Administration devoted a similar amount into cybersecurity to recognizing, examining, and alleviate any cyber breaches as OPM, however