Why was the Computer Security Act of 1987 passed?

• A. To improve the security and privacy of sensitive information in Federal systems, and to establish minimum acceptable security practices for such systems.
• B. To regulate private sector networks
• C. To create the RMF
• D. To restrict agency data

Answer: (A)

Protecting federal information systems and setting a baseline for security practices. The Computer Security Act of 1987 was designed to strengthen how the U.S. government protects sensitive information in its computer systems by requiring agencies to identify what data needs protection, implement appropriate security controls, and address privacy concerns in system design and operation. It also assigned the responsibility to the National Institute of Standards and Technology to develop security standards and guidelines for federal systems and to work with agencies on implementing them. This act focuses on federal environments; it does not regulate private sector networks, and the RMF (risk management framework) was developed later, not by this act.