The Performance Of Federal Cios PDF Download

The increased importance of national and IT security for the United States, specifically after the events of September 11, 2001, resulted in the Federal Information of Security Management Act (FISMA, Public Law 107347, Title III) being passed by the Congress in 2002. FISMA requires agency's CIO to carry out certain duties and responsibilities diligently in order to enhance the agency-wide information security activities. Using IT security report card measure that is responsive to the efficiency and effectiveness of IT security performance of the top 24 federal agencies during 2004-2007, this study examines whether CIO's competencies are determinants of IT security performance. Based on data gathered from US government resources which includes FISMA report cards, agencies organizational charts, and IT budget, we find that IT security performance is positively associated with CIOs who have technical skills, long tenure and domain experience in similar federal agencies. However, managerial skills appear to have a stronger positive impact on IT security performance when CIOs report directly to agency heads. Findings also disclose that the current IT security performance is positively correlated with agency's prior performance. These results suggest that top executives should consider specific CIO's capabilities when making strategic decisions to appoint or promote a new CIO in the federal government agencies.