Patrick D. Howard 
FISMA Principles and Best Practices [PDF ebook] 
Beyond Compliance

While many agencies struggle to comply with Federal Information Security Management Act (FISMA) regulations, those that have embraced its requirements have found that their comprehensive and flexible nature provides a sound security risk management framework for the implementation of essential system security controls. Detailing a proven appro