Reportable condition

Definition
A reportable condition exis ts when a security or m a nage m e nt control weakness does not rise to level of a signif i cant deficiency, yet is still important enough to be reporte d to internal m a nagem e nt. A s e curity weakness not deem ed to be a sign ificant deficien cy by agency m a nagem e nt, yet affecting the efficiency and effectiveness of agency operations, m a y be considered a reportable condition. H o weve r, due to lower risk, corrective action m a y be scheduled over a longer perio d of tim e. A reportable condition und er FISMA is not reported as a m a terial weakness under FMFIA.