What does M-03-19 cover?

• A. Reporting Instructions for the Federal Information Security Management Act and Updated Guidance on Quarterly IT Security Reporting
• B. E-Authentication Guidance for Federal Agencies
• C. Privacy and Privacy Reporting
• D. Trusted Internet Connections Initiative

Answer: (A)

M-03-19 is about how federal agencies report information security status under FISMA and provides updated guidance on quarterly IT security reporting. It outlines reporting instructions, what metrics to include, and the cadence for submitting reports to oversight bodies. This makes the choice that mentions Reporting Instructions for the Federal Information Security Management Act and Updated Guidance on Quarterly IT Security Reporting the best fit. The other topics refer to different policy areas—E-Authentication guidance deals with how agencies verify identities for access, privacy reporting covers privacy-related requirements, and TIC focuses on network boundary and traffic controls—not the FISMA reporting guidance covered by M-03-19.