FISMA lays a good foundation for securing info assets, says Christopher Fountain.