The ________ requires agencies to identify sensitive systems, conduct computer security training, and develop computer security plans.

• A. Computer Security Act of 1987
• B. Federal Information Security Act
• C. Privacy Act
• D. Patriot Act

Answer: (A)

Identifying sensitive systems, providing computer security training, and developing computer security plans are requirements that come from the Computer Security Act of 1987. This act established federal responsibilities for computer security, directing agencies to inventory sensitive systems, train personnel in security practices, and create formal security plans, with standards guidance from NIST. The Privacy Act focuses on protecting personal information in records; the Patriot Act deals with anti-terrorism authorities; and FISMA later formalized agency-wide security programs, but the three specific requirements align most directly with the 1987 Act.