ArcSight ESM and FISMA

The Federal Information Systems Management Act of 2002 (FISMA) requires government agencies to institute an Information Security Program that effectively manages and periodically re-assesses risk. ArcSight ESM ties the critical areas of asset value, asset vulnerability and security event data together to help government agencies gain an immediate grasp on their operational risk. ArcSight ESM benefits for FISMA include:

• The ability to centrally track attacks and vulnerabilities to government systems
• Support for FIPS 199 Information Classification Requirements
• Automatic identification of successful attacks through the most intelligent correlation engine available
• Accountability through a robust closed loop case management system
• A flexible one-click reporting system that can separate security event information according to asset value, information classification, attacker characteristics, severity and more
• Minimization of time-consuming manual FISMA reporting processes

Related Resources

	Top 10: A Guide to Selecting a SIM Solution for Regulatory Compliance
	Product Brief: ArcSight Compliance Insight Family of Products