"Periodic Assessments of the Risk and Magnitude of the Harm

Multiple Choice

"Periodic assessments of the risk and magnitude of the harm that could result from unauthorized access, use, disclosure, disruption, modification, or destruction of information and information systems that support the operations and assets of the agency;"
Which act mandates a security program be implemented in a Federal agency that meets the above criteria?

A) Directive 8570
B) FISMA
C) FISO
D) The Homeland Security Act