Vivek Kundra: FISMA Does Not Meet Federal Security Needs

Vivek Kundra, Federal CIO at the Potomac Officers' Club
In testimony before the House Committee on Oversight and Government Reform’s Subcommittee on Government Management, Organization and Procurement, he said that FISMA has raised governmental awareness of information security concerns, but suggested that at seven years old it has already outlived its usefulness: “The performance information currently collected under FISMA does not fully reflect the security posture of federal agencies,” he continued, “The processes used to collect the information are cumbersome, labor – intensive, and take time away from meaningful analysis. The federal community is focused on compliance, not outcomes.”
Kundra elaborated in a later interview, “We need to start changing the way we measure IT projects — not on an annual basis…We need to change the way we manage IT by changing the frequency of when we evaluate where we are. Moore’s Law states that processing speeds double every 18 months. But the average procurement takes 12 to 18 months.”



[...] Obama names, they will work closesly with recently-confirmed Federal CTO Aneesh Chopra and CIO Vivek Kundra to secure and streamline national data [...]