44 USC 3551 + 3552. SECTION 3551 PURPOSES: (a) the purposes of FISMA are to (1) provide a comprehensive framework for ensuring the effectiveness of information security controls over information resources that support Federal operations + assets; (2) recognize the highly networked nature of the current Federal computing environment + provide effective government-wide management + oversight of the related information security risks; (3) provide for development + maintenance of minimum controls required to protect Federal information + information systems; (4) provide a mechanism for improved oversight of Federal agency information security programs including reports to Congress; (5) acknowledge that commercially developed information security products offer advanced + dynamic security solutions; (6) recognize that the selection of specific technical hardware + software for information security solutions should be left to individual agencies from among offerings; (7) provide for the development + use of effective information security tools + processes; (8) provide for the appropriate exchange of information related to cybersecurity. SECTION 3552 DEFINITIONS: INFORMATION SECURITY = protecting information + information systems from unauthorized access + use + disclosure + disruption + modification + or destruction in order to provide INTEGRITY + CONFIDENTIALITY + AVAILABILITY; INFORMATION SYSTEM = a discrete set of information resources organized for the collection + processing + maintenance + use + sharing + dissemination + or disposition of information; NATIONAL SECURITY SYSTEM defined per Section 3557; the term INCIDENT means an occurrence that (A) actually or imminently jeopardizes integrity + confidentiality + or availability OR (B) constitutes a violation or imminent threat of violation of policies + procedures + acceptable use policies.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.