Hello,
This is normal behavior for the FWSM platform. When you add or make a change to an access-list, the CPU has to re-compile the entire ACL and then push it down into the network processors who actually evaluate the incoming traffic.
The CPU will rise while this compilation takes place, but the process will constantly yield to other processes so that the compilation process does not affect your traffic.
Hope that helps.
-Mike