“Strengthening Security Management through CyberStat Model”

Mar 13

OMB’s FY 2011 Report to Congress on FISMA implementation discusses plans for the CyberStat review process which uses data from the CyberScope reports.

DHS will continue work with agencies to identify and correct weaknesses in their cybersecurity programs. The reviews provide the opportunity for Agencies to identify the cybersecurity capability areas where they may be facing implementation maturity roadblocks, (e.g. technology, organizational culture, internal process, or human capital/financial resource challenges). In addition, CyberStat Reviews highlight areas where Agencies are meeting and exceeding required standards.

The report also noted that:

The CyberStat reviews and CIO interviews present the opportunity to stress to agencies the Administration Priorities and the metrics emphasized by the Administration. These included the metrics constituting continuous monitoring, TIC compliance and traffic consolidation, and HSPD-12 implementation. The Administration FISMA priority data used in the CyberStat reviews data was shared with the President’s Management Council (PMC) and the Secretaries of the Departments. The high visibility given to these priority capabilities will help ensure continued steady progress in their implementation.

The complete report is attached below.

fy11_fisma