The following legislation requires federal agencies to establish capital planning and investment control policies and procedures when procuring information technology: a) E-Government Act of 2002 b) Federal Information Security Management Act (FISMA) c) Government Information Security Reform Act (GISRA) d) Clinger-Cohen Act Clinger-Cohen Act The following legislation requires federal agencies to appoint a Chief Information Officer: a) E-Government Act of 2002 b) Federal Information Security Management Act (FISMA) c) Government Information Security Reform Act (GISRA) d) Clinger-Cohen Act Clinger-Cohen Act The following legislation requires federal agencies to develop, document, and implement an agency-wide information security program: a) E-Government Act of 2002, Section 208 b) Federal Information Security Management Act (FISMA) c) Government Information Security Reform Act (GISRA) d) Clinger-Cohen Act Federal Information Security Management Act (FISMA) The following legislation requires federal agencies to prepare Privacy Impact Assessments (PIAs) when developing or procuring new information technology: a) E-Government Act of 2002, Section 208 b) Federal Information Security Management Act (FISMA) c) Privacy Act, 1974 d) Clinger-Cohen Act E-Government Act of 2002, Section 208 The following legislation requires each agency with an Inspector General to conduct an annual evaluation of agency's information security program, or to appoint an independent external auditor, to conduct the evaluation on their behalf: a) E-Government Act of 2002, Title I b) Federal Information Security Management Act (FISMA)