CAP Federal Compliance and Regulatory Requirements

Question 1

Which federal law established the modern framework for federal information security and was significantly updated in 2014?

Accepted Answer

Federal Information Security Modernization Act (FISMA)

Answer

FISMA 2014 updated the original 2002 law to strengthen DHS's role, require automated monitoring, and improve incident reporting.

Question 2

Which federal agency is responsible for issuing FIPS publications that federal agencies must comply with?

Accepted Answer

NIST

Answer

The National Institute of Standards and Technology (NIST) issues Federal Information Processing Standards (FIPS) publications.

Question 3

OMB Circular A-130 provides federal policy guidance on which broad area?

Accepted Answer

Managing federal information resources, including IT security and privacy

Answer

OMB Circular A-130 establishes federal policy for managing information resources, including requirements for information security and privacy.

Question 4

Which federal privacy law gives US citizens the right to access and correct records held by federal agencies?

Accepted Answer

Privacy Act of 1974

Answer

The Privacy Act of 1974 governs federal agency collection, maintenance, use, and dissemination of personally identifiable information.

Question 5

Executive Order 13800 directed federal agencies to take what primary action regarding cybersecurity risk?

Accepted Answer

Use the NIST Cybersecurity Framework to manage institutional risk

Answer

EO 13800 required agency heads to use the NIST Cybersecurity Framework to manage cybersecurity risk as part of enterprise risk management.

CAP - Certified Accreditation Professional Practice Test