In $2002,$ Congress passed the Federal Information Security Management Act $($FISMA$),$ which mandates that all federal agencies $\_\_\_\_\_.$

a$.$ periodic assessment of risk

b$.$ develop policies and procedures based on risk assessments

c$.$ provide security awareness training

d$.$ all of the other answers are correct