I am pleased to be here today to discuss H.R. 3844, the Federal Information Security Management Act of 2002. This bill seeks to strengthen federal government information security by reauthorizing and expanding the information security, evaluation, and reporting requirements enacted into law as the Government Information Security Reform provisions (commonly referred to as GISRA) in the National Defense Authorization Act for Fiscal Year 2001.1 Concerned with reports that continuing, pervasive information security weaknesses place federal operations at significant risk of disruption, tampering, fraud, and inappropriate disclosures of sensitive information, the Congress enacted GISRA to reduce these risks and provide more effective oversight of federal information security.