FAA Looking to Move Enterprise System to FISMA High

The Federal Aviation Administration has issued a request for information (RFI) for moving its FAA Enterprise Network Services program (FENS) to Federal Information Security Management Act (FISMA) High standards. In its reasoning, the agency noted that FENS was deemed a “Safety-Critical system and is High for Integrity and Availability and Moderate for Confidentiality.” The RFI also notes that the National Airspace System (NAS) has been deemed critical infrastructure. The RFI comes after an inspector general’s report in January that found flaws with the FAA’s management of FISMA requirements. The RFI remains open until September 4.

Recent