Note This law applies to U.S. customers only. Customers should rely on appropriate legal counsel and outside auditors for interpretation of the act’s requirements. Suggestions in this document are not to be construed as a substitute for legal advice or a definitive list of all possible legal considerations.
The Federal Information Security Management Act of 2002 provides for development and maintenance of minimum controls required to protect Federal information and information systems. Telecommunications systems and commercially-developed information security systems are included in the systems referenced under this act.
As a result, in most cases, government agencies can use security-related features of Messaging to secure telecommunications data. Messaging security features can also help prevent unauthorized access to the customer’s network, in general.
Features related to system security and documented in more detail in other sections of this document are listed in following table:
| Feature | How related to FISMA | Where documented |
|---|---|---|
| Encryption | Transmitted data is protected from packet-sniffing and eavesdropping and other unauthorized access. | |
| System access control | Access to data is protected from unauthorized personnel | |
| Authentication | Access to the system is restricted by login/password. | |
| Logging | Security-related events are logged | |
| Firewall | Access to Messaging network is protected | |
| Backup of data | Data saved on backup media or backup server. Protected by encryption and key | See |
| Toll fraud prevention | Unauthorized use of long-distance is prevented | See |