Federal Information Security Modernization Act of 2014

E88756

United States federal statute information security law

The Federal Information Security Modernization Act of 2014 is a U.S. law that updates and strengthens federal government information security practices by clarifying agency responsibilities, enhancing oversight, and modernizing the framework for protecting federal information systems.

Try in SPARQL Jump to: Surface forms Disambiguation Statements Elicitation Referenced by

All labels observed (4)

Label	Occurrences
Federal Information Security Modernization Act	11
Federal Information Security Modernization Act of 2014 canonical	6
FISMA 2014	1
Federal Information Security Modernization Act (FISMA)	1

How this entity was disambiguated

This entity first appeared as the object of triple T721415 — resolving that mention is where its identity was fixed. The disambiguator weighed these candidate entities and picked the highlighted one (or “None”, minting a new entity). This is how homonymy is resolved: the same surface form can point to different entities.

NED1 Entity disambiguation (via context triple) gpt-5-mini-2025-08-07

Target entity: Federal Information Security Modernization Act of 2014
Context triple: [Cybersecurity Information Sharing Act of 2015, relatedTo, Federal Information Security Modernization Act of 2014]

A. Cybersecurity Information Sharing Act of 2015
The Cybersecurity Information Sharing Act of 2015 is a U.S. federal law that facilitates the sharing of cyber threat information between private companies and the government to improve national cybersecurity while addressing privacy and civil liberties concerns.
B. Cybersecurity and Infrastructure Security Agency Act of 2018
The Cybersecurity and Infrastructure Security Agency Act of 2018 is a U.S. federal law that formally established the Cybersecurity and Infrastructure Security Agency (CISA) within the Department of Homeland Security to lead national efforts to protect critical infrastructure from cyber and physical threats.
C. Executive Order 13556
Executive Order 13556 is a U.S. presidential directive that establishes a government-wide program for managing and safeguarding Controlled Unclassified Information (CUI).
D. OPEN Government Act of 2007
The OPEN Government Act of 2007 is a U.S. federal law that strengthened and modernized the Freedom of Information Act by improving transparency, clarifying response deadlines, and enhancing the rights and remedies available to requesters.
E. National Infrastructure Protection Plan
The National Infrastructure Protection Plan is a U.S. strategic framework that coordinates government and private-sector efforts to safeguard and enhance the resilience of the nation’s critical infrastructure and key resources.
F. None of above. chosen
G. Unsure - the case is ambiguous/there is not enough information to decide.

NED2 Entity disambiguation (via description) gpt-5-mini-2025-08-07

Target entity: Federal Information Security Modernization Act of 2014
Target entity description: The Federal Information Security Modernization Act of 2014 is a U.S. law that updates and strengthens federal government information security practices by clarifying agency responsibilities, enhancing oversight, and modernizing the framework for protecting federal information systems.

A. Cybersecurity Information Sharing Act of 2015
The Cybersecurity Information Sharing Act of 2015 is a U.S. federal law that facilitates the sharing of cyber threat information between private companies and the government to improve national cybersecurity while addressing privacy and civil liberties concerns.
B. Cybersecurity and Infrastructure Security Agency Act of 2018
The Cybersecurity and Infrastructure Security Agency Act of 2018 is a U.S. federal law that formally established the Cybersecurity and Infrastructure Security Agency (CISA) within the Department of Homeland Security to lead national efforts to protect critical infrastructure from cyber and physical threats.
C. Executive Order 13556
Executive Order 13556 is a U.S. presidential directive that establishes a government-wide program for managing and safeguarding Controlled Unclassified Information (CUI).
D. OPEN Government Act of 2007
The OPEN Government Act of 2007 is a U.S. federal law that strengthened and modernized the Freedom of Information Act by improving transparency, clarifying response deadlines, and enhancing the rights and remedies available to requesters.
E. National Infrastructure Protection Plan
The National Infrastructure Protection Plan is a U.S. strategic framework that coordinates government and private-sector efforts to safeguard and enhance the resilience of the nation’s critical infrastructure and key resources.
F. None of above. chosen

Statements (47)

Predicate	Object
instanceOf	United States federal statute ⓘ information security law ⓘ
aimsToImprove	federal incident response coordination ⓘ visibility into federal information security posture for oversight bodies ⓘ
aimsToReduce	cybersecurity risks to federal agencies ⓘ
amends	Federal Information Security Management Act of 2002 ⓘ
appliesTo	federal executive branch agencies ⓘ
assignsResponsibilityTo	Office of Management and Budget for federal information security policy ⓘ agency heads for implementing information security programs ⓘ
clarifiesRoleOf	Chief Information Officers in information security ⓘ Inspectors General in evaluating agency information security programs ⓘ
country	United States of America ⓘ surface form: United States
designates	Cybersecurity and Infrastructure Security Agency ⓘ surface form: Department of Homeland Security as the lead civilian cybersecurity agency
encourages	use of automated and continuous diagnostics and mitigation tools ⓘ
enhances	coordination of federal civilian cybersecurity operations ⓘ oversight of agency information security by Office of Management and Budget ⓘ
establishes	framework for federal information security management ⓘ
excludes	national security systems ⓘ
focusesOn	protection of confidentiality, integrity, and availability of federal information ⓘ risk-based information security management ⓘ
implements	requirements for agency-wide information security programs ⓘ
jurisdiction	United States government ⓘ surface form: federal government of the United States
language	English ⓘ
legalArea	IT governance ⓘ administrative law ⓘ
primaryGoal	clarify agency information security responsibilities ⓘ enhance oversight of federal information security programs ⓘ improve protection of federal information and information systems ⓘ modernize federal information security management ⓘ
relatedTo	Federal Information Security Management Act of 2002 ⓘ National Institute of Standards and Technology information security standards ⓘ
requires	continuous monitoring of federal information systems ⓘ federal agencies to develop, document, and implement information security programs ⓘ incident detection and response capabilities ⓘ periodic risk assessments of information systems ⓘ reporting of information security incidents ⓘ
requiresReportingTo	United States Congress ⓘ surface form: Congress United States Department of Homeland Security ⓘ surface form: Department of Homeland Security Office of Management and Budget ⓘ
sector	public sector information technology ⓘ
shortName	Federal Information Security Modernization Act of 2014 self-linksurface differs ⓘ surface form: FISMA 2014
strengthensAuthorityOf	United States Department of Homeland Security ⓘ surface form: Department of Homeland Security
subjectMatter	cybersecurity ⓘ federal information security ⓘ protection of federal information systems ⓘ
supports	federal enterprise-wide cybersecurity posture ⓘ
year	2014 ⓘ

How these facts were elicited

Referenced by (19)

Full triples — surface form annotated when it differs from this entity's canonical label.

Cybersecurity Information Sharing Act of 2015 → relatedTo → Federal Information Security Modernization Act of 2014 ⓘ

National Cybersecurity Protection System → legalAuthority → Federal Information Security Modernization Act of 2014 ⓘ

this entity surface form: Federal Information Security Modernization Act

Controlled Unclassified Information program → relatedTo → Federal Information Security Modernization Act of 2014 ⓘ

this entity surface form: Federal Information Security Modernization Act

FBI data governance policies → constrainedBy → Federal Information Security Modernization Act of 2014 ⓘ

this entity surface form: Federal Information Security Modernization Act

Chief Information Officer of the U.S. Department of Labor → legalBasis → Federal Information Security Modernization Act of 2014 ⓘ

Office of the Chief Information Security Officer of GSA → followsFramework → Federal Information Security Modernization Act of 2014 ⓘ

this entity surface form: Federal Information Security Modernization Act (FISMA)

Federal Information Security Modernization Act of 2014 → shortName → Federal Information Security Modernization Act of 2014 self-linksurface differs ⓘ

this entity surface form: FISMA 2014

National Cybersecurity and Communications Integration Center → legalBasis → Federal Information Security Modernization Act of 2014 ⓘ

EINSTEIN → relatedTo → Federal Information Security Modernization Act of 2014 ⓘ

this entity surface form: Federal Information Security Modernization Act

Federal Information Processing Standards → relatedTo → Federal Information Security Modernization Act of 2014 ⓘ

this entity surface form: Federal Information Security Modernization Act

Office of the Chief Information Officer of DHS → follows → Federal Information Security Modernization Act of 2014 ⓘ

this entity surface form: Federal Information Security Modernization Act

Office of the Chief Information Officer (USAID) → follows → Federal Information Security Modernization Act of 2014 ⓘ

this entity surface form: Federal Information Security Modernization Act

Chief Information Officers Council of the United States → legalBasis → Federal Information Security Modernization Act of 2014 ⓘ

this entity surface form: Federal Information Security Modernization Act

Federal Chief Information Officer of the United States → legalBasis → Federal Information Security Modernization Act of 2014 ⓘ

this entity surface form: Federal Information Security Modernization Act

Office of the Chief Information Officer (DOE) → legalBasis → Federal Information Security Modernization Act of 2014 ⓘ

this entity surface form: Federal Information Security Modernization Act

Federal Information Security Management Act of 2002 → replacedBy → Federal Information Security Modernization Act of 2014 ⓘ

Federal Information Security Management Act of 2002 → relatedTo → Federal Information Security Modernization Act of 2014 ⓘ

Office of Management and Budget for federal information security policy → legalBasis → Federal Information Security Modernization Act of 2014 ⓘ

Office of the Chief Information Officer of the U.S. Department of Commerce → follows → Federal Information Security Modernization Act of 2014 ⓘ

this entity surface form: Federal Information Security Modernization Act

All labels observed (4)

How this entity was disambiguated Show

Statements (47)

How these facts were elicited Show

Referenced by (19)

How this entity was disambiguated

How these facts were elicited