FISMA establishes a framework for ensuring the effectiveness of information security controls over federal information resources. It mandates the creation of a comprehensive security program for the federal government, focusing on the protection of information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction.