Federal IT Regs and Compliance Quiz

Which act requires federal agencies to improve their management of IT resources?

• Sarbanes-Oxley Act

• Clinger-Cohen Act

• Federal Information Security Management Act (FISMA)

• Health Insurance Portability and Accountability Act (HIPAA)

The Digital Accountability and Transparency Act (DATA) focuses primarily on improving the transparency and accountability of federal spending to reduce waste and fraud.

• True

• False

What is the primary goal of the Federal Information Security Management Act (FISMA)?

• To protect consumer financial information

• To ensure the confidentiality, integrity, and availability of federal information systems

• To improve the procurement process of IT resources

• To enforce privacy standards in health care information

As an IT Project Manager, which of the following is NOT a responsibility under compliance for federal IT projects?

• Ensuring all team members are trained on security protocols

• Regularly updating software to meet new security standards

• Choosing the cheapest solutions to remain under budget, regardless of compliance

• Conducting risk assessments to identify potential vulnerabilities

The Federal Risk and Authorization Management Program (FedRAMP) is designed to standardize security assessment and authorization for cloud products and services used by federal agencies.

• True

• False

Which standard provides a framework for managing and mitigating risks in federal IT projects?

• ISO 27001

• NIST Special Publication 800-53

• COBIT

• ITIL

In the context of federal IT projects, what is the primary focus of risk management?

• Maximizing the project's return on investment

• Ensuring that all project activities are completed on time

• Protecting information and systems from cyber threats

• Keeping the project within its allocated budget