Watch this video on YouTube
FISMA requires federal agencies to protect IT systems and data. How often should compliance be audited by an external organization?