The Federal Information Security Management Act (FISMA) is a United States federal law that was enacted in 2002 to establish a framework for ensuring the security of government information and systems