, director of research at the , a Bethesda, Md.-based security training and certification organization, said he thinks the FISMA revision would actually end up saving money. The new requirements, Paller said, would force agencies to "focus their spending" on measures that they could prove had improved security protections.