The Computer Security Act of 1987,

Public Law Public law is the part of law that governs relations between legal persons and a government, between different institutions within a state, between different branches of governments, as well as relationships between persons that are of direct ...

No. 100-235 (H.R. 145), (Jan. 8, 1988), was a

United States federal law The law of the United States comprises many levels of codified and uncodified forms of law, of which the most important is the nation's Constitution, which prescribes the foundation of the federal government of the United States, as well as va ...

enacted in 1987. It was intended to improve the security and privacy of sensitive information in federal computer systems and to establish minimally acceptable security practices for such systems. It required the creation of computer security plans, and appropriate training of system users or owners where the systems would display, process or store sensitive information.

History

It was repealed by the

Federal Information Security Management Act of 2002 The Federal Information Security Management Act of 2002 (FISMA, , ''et seq.'') is a United States federal law enacted in 2002 as Title III of the E-Government Act of 2002 (, ). The act recognized the importance of information security to the eco ...

SEC. 305. (a)

Provisions

* Assigned the

National Institute of Standards and Technology The National Institute of Standards and Technology (NIST) is an agency of the United States Department of Commerce whose mission is to promote American innovation and industrial competitiveness. NIST's activities are organized into physical sci ...

(NIST, At the time named National Bureau of Standards) to develop standards of minimum acceptable practices with the help of the

NSA The National Security Agency (NSA) is a national-level intelligence agency of the United States Department of Defense, under the authority of the Director of National Intelligence (DNI). The NSA is responsible for global monitoring, collecti ...

* Required establishment of security policies for Federal computer systems that contain sensitive information. * Mandatory security awareness training for federal employees that use those systems.

References

HR 145

Electronic Privacy Information Center

External links

* * * {{Authority control 1987 in law 100th United States Congress United States federal computing legislation