In light of the legislation such as the Federal Information Security Management Act (FISMA), there is an increased need to measure the ability of government organizations and companies subject to these standards to protect information. This book provides guidelines for addressing FISMA compliance.