5 FAM 620 INFORMATION TECHNOLOGY (IT) PROJECT MANAGEMENT

Save this PDF as:
 WORD  PNG  TXT  JPG

Size: px
Start display at page:

Download "5 FAM 620 INFORMATION TECHNOLOGY (IT) PROJECT MANAGEMENT"

Transcription

1 5 FAM 620 INFORMATION TECHNOLOGY (IT) PROJECT MANAGEMENT 5 FAM 621 GENERAL (Office of Origin: IRM/BMP/SPO/PMD) a. The strategic importance of Information Technology (IT) to the mission of the State Department and the U.S. Government is increasing, and projects are becoming more complex. This means that the IT project/program managers role must now shift from a peripheral function to that of a more demanding career discipline. The Office of Management and Budget (OMB) requires the Department to use qualified project/program managers to manage its major IT projects in accordance with Federal guidance to ensure the successful achievement of cost, schedule, and performance goals. In response to these Government-wide requirements, the Department expanded its IT Project Management Program to include qualifications and continuing education requirements for managers responsible for managing both major and non-major IT projects. b. All IT project/program managers of major and non-major IT investments must be qualified in accordance with the Department s IT Project Manager Program guidance. c. Project/program managers must be selected by the senior management responsible for each bureau s major or non-major IT investments. d. The E-Government Program Management Office (E-Gov PMO) determines the classification of IT projects/programs as major or non-major in accordance with OMB Circular A-11. e. Project/Program managers are responsible for complying with the reporting requirements for major and non-major IT investments administered by the E-Gov PMO. f. Project/program managers must complete the Department approved Project management course training as required. (Project Management Training Requirements.) g. Managing State Projects is the preferred System Development Lifecycle 5 FAM 620 Page 1 of 5

2 Management methodology in the Department for the development, and the operations and maintenance of IT projects and programs. See 5 FAH- 5 H-210 Managing Department of State Projects. h. Project/program managers must not begin a new IT project without the formal approval from the bureau's Executive Director. i. Project/program managers must complete and maintain required Federal and Department Information Security Courses to meet Federal Information Security Management Act (FISMA) role-based training requirements. j. Project/program Managers must complete and maintain required Federal and Department Information Technology and Acquisitions Courses to ensure project and program compliance with the Federal Enterprise Architecture Framework (FEAF) and Federal Acquisitions Regulation (FAR). 5 FAM 622 SCOPE AND AUTHORITY a. This policy applies to all Department organizations and entities as the authority governing management of major and non-major IT investments. The policy provides requirements for project development, integration, modification, and maintenance of the Department IT systems, products, and services. This policy applies to all Department personnel, as well as contractors involved in Department systems and program planning, development, modification, integration, operation, and maintenance. b. The authorities establishing this policy include: (1) Paperwork Reduction Act, Public Law ; (2) Clinger-Cohen Act, Public Law (formerly known as the Information Technology Reform Act); (3) Government Performance and Results Modernization Act of 2010, Public Law ; (4) E-Government Act of 2002, Public Law ; (5) Federal Information Security Management Act of 2002 (FISMA), Public Law , Title III; (6) Government Paperwork Elimination Act of 1998, Public Law ; (7) Electronic Signatures in Global and National Commerce Act, June 30, 2000, Public Law ; (8) OMB Circular A-130 Revised, Appendix III, November 28, 2000; 5 FAM 620 Page 2 of 5

3 (9) HSPD-7, 7 Critical Infrastructure Protection Plans to Protect Federal Critical Infrastructures and Key Resources; (10) Federal Acquisition Regulation (FAR) Sections 7.102, and ; (11) FAR, Subpart 34.2; (12) ANSI/EIA-STD-748-A; (13) Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 794d); (14) Executive Order (Federal Information Technology); (15) NIST SP , Security Considerations in the Information System Development Life Cycle, June 2004; (16) NIST SP , Integrating IT Security into the Capital Planning and Investment Control Process; (17) Privacy Act of 1974, (5 U.S.C. and 552a), as amended; (18) M-07-16, Safeguarding Against and Responding to the Breach of Personally Identifiable Information (May 22, 2007); (19) M-06-15, Safeguarding Personally Identifiable Information (May 22, 2006); (20) M-06-16, Protection of Sensitive Agency Information (June 23, 2006); (21) M-06-19, Reporting Incidents Involving Personally Identifiable Information (July 1, 2006); (22) M-09-02, Information Technology Management Structure and Governance Framework (October 21, 2008); (23) M-10-27, Information Technology Investment Baseline Management Policy (June 28, 2010); (24) M-11-29, Chief Information Officer Authorities (August 8, 2011); (25) M-12-18, Managing Government Records Directive (August 24, 2012); (26) M-13-09, Fiscal Year 2013 PortfolioStat Guidance: Strengthening Federal IT Portfolio Management (March 27, 2013); (27) M-13-13, Open Data Policy, Managing Information as an Asset; (28) Homeland Security Presidential Directive 12 (HSPD-12) (5 FAM 100); (29) OMB, A Common Approach to Federal Enterprise Architecture (May 2, 2012); (30) OMB, Revisions to the Federal Acquisitions Certification for Program and Project Managers (FAC-P/PM) (December 16, 2013); 5 FAM 620 Page 3 of 5

4 (31) OMB Circular A-11, Preparation, Submission and Execution of the Budget (July 26, 2013); (32) OMB, Guidance for Specialized Information Technology Acquisitions Cadres (July 13, 2011); and (33) OPM, Competency Model for IT Program Management (July 12, 2011). 5 FAM 623 IT PROJECT MANAGEMENT PROGRAM 5 FAM Investment Categories The Department IT projects are classified into two categories, major and non-major, and are categorized below based on the following IT project management standards: (1) Major IT investment refers to an IT investment requiring special management attention because of its importance to the mission or function to the government; significant program or policy implications; high executive visibility; high development, operating, or maintenance costs; unusual funding mechanism; or definition as major by the agency s capital planning and investment control process. OMB may work with the agency to declare IT investments as major investments. The Department will consult with the assigned OMB analysts regarding which investments are considered major. Investments not considered major are non-major; and (2) Non-Major IT Investment refers to any IT investment in the Department's IT portfolio that does not meet the definition of Major IT investment. All non-major investments must be reported in the Agency IT Portfolio Summary. 5 FAM Project Manager Training Requirements a. Project/program managers must meet the five basic requirements for managing any IT projects. These requirements are: (1) Acceptable levels of experience, education, and training; (2) Successful completion of the Managing State Projects (MSP) course; 5 FAM 620 Page 4 of 5

5 (3) Successful completion of the Department s contracting course; (4) Successful completion of the Department s mandatory leadership training program; and (5) Successful completion of continuing education requirements of 40 hours or more on an annual basis. The 40 hours are tracked using FAITAS as verified by an employee s supervisor. b. Project management training may be classroom, distance learning, or blended learning (combination of classroom and distance learning) as made available through the Department s Foreign Service Institute (FSI) Skillsoft General Library. FSI courses are aligned with the industry s leading Project Management Body of Knowledge (PMBOK) project management curriculum. c. Non-FSI training costs must be paid using funds from the sponsoring Bureau requiring the training. 5 FAM 624 PROJECT CYCLE a. By using the project cycle, project/program managers can establish project goals, provide direction, and encourage teamwork more effectively. A project cycle consists of periods, phases, and activities. Regardless of the type or development model used, the following are common to any project: (1) Benefit and/or cost and requirements analyses; (2) Formal review and approval procedures; (3) Schedule of activities; (4) Standard documentation; (5) Quality assurance; and (6) Configuration management. b. As an example, the MSP cycle consists of three distinct periods: study, acquisition, and operations, explained in 5 FAH-5 H-210 Managing Department of State Projects. The periods, phases, and activities within a project cycle can be tailored depending upon the project s type, size, and complexity. 5 FAM 625 THROUGH 629 UNASSIGNED 5 FAM 620 Page 5 of 5

I. U.S. Government Privacy Laws

I. U.S. Government Privacy Laws I. U.S. Government Privacy Laws A. Privacy Definitions and Principles a. Privacy Definitions i. Privacy and personally identifiable information (PII) b. Privacy Basics Definition of PII 1. Office of Management

More information

5 FAM 630 DATA MANAGEMENT POLICY

5 FAM 630 DATA MANAGEMENT POLICY 5 FAM 630 DATA MANAGEMENT POLICY (Office of Origin: IRM/BMP/OCA/GPC) 5 FAM 631 GENERAL POLICIES a. Data management incorporates the full spectrum of activities involved in handling data, including its

More information

5 FAM 1060 INFORMATION ASSURANCE MANAGEMENT

5 FAM 1060 INFORMATION ASSURANCE MANAGEMENT 5 FAM 1060 INFORMATION ASSURANCE MANAGEMENT 5 FAM 1061 GENERAL (CT:IM-141; 06-07-2013) (Office of Origin: IRM/IA) a. The Chief Information Security Officer (CISO) operates under the direction and supervision

More information

5 FAM 670 INFORMATION TECHNOLOGY (IT) PERFORMANCE MEASURES FOR PROJECT MANAGEMENT

5 FAM 670 INFORMATION TECHNOLOGY (IT) PERFORMANCE MEASURES FOR PROJECT MANAGEMENT 5 FAM 670 INFORMATION TECHNOLOGY (IT) PERFORMANCE MEASURES FOR PROJECT MANAGEMENT (CT:IM-92; 08-01-2007) (Office of Origin: IRM/BPC/PRG) 5 FAM 671 WHAT ARE IT PERFORMANCE MEASURES AND WHY ARE THEY REQUIRED?

More information

ClOP CHAPTER 1351.39. Departmental Information Technology Governance Policy TABLE OF CONTENTS. Section 39.1

ClOP CHAPTER 1351.39. Departmental Information Technology Governance Policy TABLE OF CONTENTS. Section 39.1 ClOP CHAPTER 1351.39 Departmental Information Technology Governance Policy TABLE OF CONTENTS Section 39.1 Purpose... 1 Section 39.2 Section 39.3 Section 39.4 Section 39.5 Section 39.6 Section 39.7 Section

More information

INFORMATION DIRECTIVE GUIDANCE GUIDANCE FOR MANUALLY COMPLETING INFORMATION SECURITY AWARENESS TRAINING

INFORMATION DIRECTIVE GUIDANCE GUIDANCE FOR MANUALLY COMPLETING INFORMATION SECURITY AWARENESS TRAINING INFORMATION DIRECTIVE GUIDANCE GUIDANCE FOR MANUALLY COMPLETING INFORMATION SECURITY AWARENESS TRAINING Issued by the EPA Chief Information Officer, Pursuant to Delegation 1-19,dated 07/07/2005 GUIDANCE

More information

UNITED STATES DEPARTMENT OF THE INTERIOR BUREAU OF LAND MANAGEMENT MANUAL TRANSMITTAL SHEET

UNITED STATES DEPARTMENT OF THE INTERIOR BUREAU OF LAND MANAGEMENT MANUAL TRANSMITTAL SHEET Form 1221-2 (June 1969) UNITED STATES DEPARTMENT OF THE INTERIOR BUREAU OF LAND MANAGEMENT Release: 1-1718 Date: MANUAL TRANSMITTAL SHEET Subject 1265 Information Technology Investment Management (ITIM)

More information

Minerals Management Service Interim Policy Document

Minerals Management Service Interim Policy Document Minerals Management Service Interim Policy Document Effective Date: August 3, 2005 IPD No. 05-06 Series: Administrative Title: Information Technology Project Management Originating Office: Information

More information

NATIONAL CREDIT UNION ADMINISTRATION OFFICE OF INSPECTOR GENERAL

NATIONAL CREDIT UNION ADMINISTRATION OFFICE OF INSPECTOR GENERAL NATIONAL CREDIT UNION ADMINISTRATION OFFICE OF INSPECTOR GENERAL INDEPENDENT EVALUATION OF THE NATIONAL CREDIT UNION ADMINISTRATION S COMPLIANCE WITH THE FEDERAL INFORMATION SECURITY MANAGEMENT ACT (FISMA)

More information

Information Technology Processes FinCEN is an agency whose mission is dependent on the effective collection,

Information Technology Processes FinCEN is an agency whose mission is dependent on the effective collection, Appendix L Project Management and Information Technology Processes FinCEN is an agency whose mission is dependent on the effective collection, dissemination, and meaningful analysis of large quantities

More information

FISH AND WILDLIFE SERVICE INFORMATION RESOURCES MANAGEMENT. Chapter 7 Information Technology (IT) Security Program 270 FW 7 TABLE OF CONTENTS

FISH AND WILDLIFE SERVICE INFORMATION RESOURCES MANAGEMENT. Chapter 7 Information Technology (IT) Security Program 270 FW 7 TABLE OF CONTENTS TABLE OF CONTENTS General Topics Purpose and Authorities Roles and Responsibilities Policy and Program Waiver Process Contact Abbreviated Sections/Questions 7.1 What is the purpose of this chapter? 7.2

More information

IT SECURITY EDUCATION AWARENESS TRAINING POLICY OCIO-6009-09 TABLE OF CONTENTS

IT SECURITY EDUCATION AWARENESS TRAINING POLICY OCIO-6009-09 TABLE OF CONTENTS OFFICE OF THE CHIEF INFORMATION OFFICER Date of Issuance: May 22, 2009 Effective Date: May 22, 2009 Review Date: Section I. PURPOSE II. AUTHORITY III. SCOPE IV. DEFINITIONS V. POLICY VI. RESPONSIBILITIES

More information

INFORMATION PROCEDURE

INFORMATION PROCEDURE INFORMATION PROCEDURE Information Security Awareness and Training Procedures Issued by the EPA Chief Information Officer, Pursuant to Delegation 1-19, dated 07/07/2005 INFORMATION SECURITY AWARENESS AND

More information

Section 37.1 Purpose... 1. Section 37.2 Background... 3. Section 37.3 Scope and Applicability... 4. Section 37.4 Policy... 5

Section 37.1 Purpose... 1. Section 37.2 Background... 3. Section 37.3 Scope and Applicability... 4. Section 37.4 Policy... 5 CIOP CHAPTER 37 Departmental Cybersecurity Policy TABLE OF CONTENTS Section 37.1 Purpose... 1 Section 37.2 Background... 3 Section 37.3 Scope and Applicability... 4 Section 37.4 Policy... 5 Section 37.5

More information

5 FAH-11 H-500 PERFORMANCE MEASURES FOR INFORMATION ASSURANCE

5 FAH-11 H-500 PERFORMANCE MEASURES FOR INFORMATION ASSURANCE 5 FAH-11 H-500 PERFORMANCE MEASURES FOR INFORMATION ASSURANCE 5 FAH-11 H-510 GENERAL (Office of Origin: IRM/IA) 5 FAH-11 H-511 INTRODUCTION 5 FAH-11 H-511.1 Purpose a. This subchapter implements the policy

More information

NATIONAL CREDIT UNION ADMINISTRATION OFFICE OF INSPECTOR GENERAL

NATIONAL CREDIT UNION ADMINISTRATION OFFICE OF INSPECTOR GENERAL NATIONAL CREDIT UNION ADMINISTRATION OFFICE OF INSPECTOR GENERAL FY 2015 INDEPENDENT EVALUATION OF THE EFFECTIVENESS OF NCUA S INFORMATION SECURITY PROGRAM UNDER THE FEDERAL INFORMATION SECURITY MODERNIZATION

More information

NUMBER OF MATERIAL WEAKNESSES

NUMBER OF MATERIAL WEAKNESSES APPENDIX A: PERFORMANCE AND RESOURCE TABLES MANAGEMENT DISCUSSION AND ANALYSIS MANAGEMENT CONTROLS FEDERAL MANAGER S FINANCIAL INTEGRITY ACT (FMFIA) OF 1982 D uring FY 2005, the Department reviewed its

More information

U.S. Department of Energy Washington, D.C.

U.S. Department of Energy Washington, D.C. U.S. Department of Energy Washington, D.C. ORDER DOE O 200.1A Approved: SUBJECT: INFORMATION TECHNOLOGY MANAGEMENT 1. OBJECTIVES. The Department of Energy s (DOE) overarching mission, to advance the national,

More information

Information Security Guide For Government Executives. Pauline Bowen Elizabeth Chew Joan Hash

Information Security Guide For Government Executives. Pauline Bowen Elizabeth Chew Joan Hash Information Security Guide For Government Executives Pauline Bowen Elizabeth Chew Joan Hash Introduction Table of Contents Introduction 1 Why do I need to invest in information security? 2 Where do I need

More information

United States Antarctic Program Information Resource Management Directive 5000.01 The USAP Information Security Program

United States Antarctic Program Information Resource Management Directive 5000.01 The USAP Information Security Program The National Science Foundation Office of Polar Programs United States Antarctic Program Information Resource Management Directive 5000.01 The USAP Information Security Program Organizational Function

More information

TITLE III INFORMATION SECURITY

TITLE III INFORMATION SECURITY H. R. 2458 48 (1) maximize the degree to which unclassified geographic information from various sources can be made electronically compatible and accessible; and (2) promote the development of interoperable

More information

December 8, 2011. Security Authorization of Information Systems in Cloud Computing Environments

December 8, 2011. Security Authorization of Information Systems in Cloud Computing Environments December 8, 2011 MEMORANDUM FOR CHIEF INFORMATION OFFICERS FROM: SUBJECT: Steven VanRoekel Federal Chief Information Officer Security Authorization of Information Systems in Cloud Computing Environments

More information

OFFICE OF THE INSPECTOR GENERAL SOCIAL SECURITY ADMINISTRATION

OFFICE OF THE INSPECTOR GENERAL SOCIAL SECURITY ADMINISTRATION OFFICE OF THE INSPECTOR GENERAL SOCIAL SECURITY ADMINISTRATION CONTRACTOR SECURITY OF THE SOCIAL SECURITY ADMINISTRATION S HOMELAND SECURITY PRESIDENTIAL DIRECTIVE 12 CREDENTIALS June 2012 A-14-11-11106

More information

Audit of the Department of State Information Security Program

Audit of the Department of State Information Security Program UNITED STATES DEPARTMENT OF STATE AND THE BROADCASTING BOARD OF GOVERNORS OFFICE OF INSPECTOR GENERAL AUD-IT-15-17 Office of Audits October 2014 Audit of the Department of State Information Security Program

More information

Department of Veterans Affairs VA Directive 6004 CONFIGURATION, CHANGE, AND RELEASE MANAGEMENT PROGRAMS

Department of Veterans Affairs VA Directive 6004 CONFIGURATION, CHANGE, AND RELEASE MANAGEMENT PROGRAMS Department of Veterans Affairs VA Directive 6004 Washington, DC 20420 Transmittal Sheet September 28, 2009 CONFIGURATION, CHANGE, AND RELEASE MANAGEMENT PROGRAMS 1. REASON FOR ISSUE: This Directive establishes

More information

U.S. ELECTION ASSISTANCE COMMISSION OFFICE OF INSPECTOR GENERAL

U.S. ELECTION ASSISTANCE COMMISSION OFFICE OF INSPECTOR GENERAL U.S. ELECTION ASSISTANCE COMMISSION OFFICE OF INSPECTOR GENERAL FINAL REPORT: U.S. Election Assistance Commission Compliance with the Requirements of the Federal Information Security Management Act Fiscal

More information

DEPARTMENTAL REGULATION

DEPARTMENTAL REGULATION U.S. DEPARTMENT OF AGRICULTURE WASHINGTON, D.C. 20250 DEPARTMENTAL REGULATION SUBJECT: Identity, Credential, and Access Management Number: 3640-001 DATE: December 9, 2011 OPI: Office of the Chief Information

More information

2.0 ROLES AND RESPONSIBILITIES

2.0 ROLES AND RESPONSIBILITIES 2.0 ROLES AND RESPONSIBILITIES This handout describes applicable roles and responsibilities for the Capital Planning and Investment Process (CPIC) as presented in the NIST Integrating IT Security into

More information

E X E C U T I V E O F F I CE O F T H E P R E S I D EN T

E X E C U T I V E O F F I CE O F T H E P R E S I D EN T EXECUTIVE OFFICE OF THE PRESIDENT OFFICE OF MANAGEMENT AND BUDGET WASHINGTON, D.C. 20503 THE DIRECTOR M-05-24 August 5, 2005 MEMORANDUM FOR THE HEADS OF ALL DEPARTMENTS AND AGENCIES FROM: SUBJECT: Joshua

More information

FITSP-Auditor Candidate Exam Guide

FITSP-Auditor Candidate Exam Guide FITSP-Auditor Candidate Exam An Overview of the FITSP-A Certification 2010 Edition Copyright 2009-2010 FITSI 1 FITSP-Auditor Candidate Exam This page is left intentionally blank Copyright 2009-2010 FITSI

More information

2012 FISMA Executive Summary Report

2012 FISMA Executive Summary Report 2012 FISMA Executive Summary Report March 29, 2013 UNITED STATES SECURITIES AND EXCHANGE COMMISSION WASHINGTON, D.C. 20549 OI'!'ICEOI' lnstfl! C1'0R GENERAt MEMORANDUM March 29,2013 To: Jeff Heslop, Chief

More information

Department of Veterans Affairs VA DIRECTIVE 6510 VA IDENTITY AND ACCESS MANAGEMENT

Department of Veterans Affairs VA DIRECTIVE 6510 VA IDENTITY AND ACCESS MANAGEMENT Department of Veterans Affairs VA DIRECTIVE 6510 Washington, DC 20420 Transmittal Sheet VA IDENTITY AND ACCESS MANAGEMENT 1. REASON FOR ISSUE: This Directive defines the policy and responsibilities to

More information

FSIS DIRECTIVE 1306.3

FSIS DIRECTIVE 1306.3 UNITED STATES DEPARTMENT OF AGRICULTURE FOOD SAFETY AND INSPECTION SERVICE WASHINGTON, DC FSIS DIRECTIVE 1306.3 REVISION 1 12/13/12 CONFIGURATION MANAGEMENT (CM) OF SECURITY CONTROLS FOR INFORMATION SYSTEMS

More information

Exhibit 300: Exhibit 300 - Electronic Medical Record (EMR) (Revision 11) 4. Name of this Capital Asset: Exhibit 300 - Electronic Medical Record (EMR)

Exhibit 300: Exhibit 300 - Electronic Medical Record (EMR) (Revision 11) 4. Name of this Capital Asset: Exhibit 300 - Electronic Medical Record (EMR) Exhibit 300: Capital Asset Plan and Case Summary Part I: Summary Information And Justification (All Capital Assets) Section A: Overview (All Capital Assets) 1. Date of Submission: 4/10/2009 2. Agency:

More information

CMS POLICY FOR THE INFORMATION SECURITY PROGRAM

CMS POLICY FOR THE INFORMATION SECURITY PROGRAM Chief Information Officer Office of Information Services Centers for Medicare & Medicaid Services CMS POLICY FOR THE INFORMATION SECURITY PROGRAM FINAL Version 4.0 August 31, 2010 Document Number: CMS-CIO-POL-SEC02-04.0

More information

POSTAL REGULATORY COMMISSION

POSTAL REGULATORY COMMISSION POSTAL REGULATORY COMMISSION OFFICE OF INSPECTOR GENERAL FINAL REPORT INFORMATION SECURITY MANAGEMENT AND ACCESS CONTROL POLICIES Audit Report December 17, 2010 Table of Contents INTRODUCTION... 1 Background...1

More information

Standards for Security Categorization of Federal Information and Information Systems

Standards for Security Categorization of Federal Information and Information Systems FIPS PUB 199 FEDERAL INFORMATION PROCESSING STANDARDS PUBLICATION Standards for Security Categorization of Federal Information and Information Systems Computer Security Division Information Technology

More information

Subject: 1268-1 Information Technology Configuration Management Manual

Subject: 1268-1 Information Technology Configuration Management Manual Form 1221-2 (June 1969) UNITED STATES DEPARTMENT OF THE INTERIOR BUREAU OF LAND MANAGEMENT Release 1-1741 Date MANUAL TRANSMITTAL SHEET 06/19/2012 Subject: 1268-1 Information Technology Configuration Management

More information

EXECUTIVE OFFICE OF THE PRESIDENT OFFICE OF MANAGEMENT AND BUDGET WASHINGTON, D.C. 20503

EXECUTIVE OFFICE OF THE PRESIDENT OFFICE OF MANAGEMENT AND BUDGET WASHINGTON, D.C. 20503 EXECUTIVE OFFICE OF THE PRESIDENT OFFICE OF MANAGEMENT AND BUDGET WASHINGTON, D.C. 20503 THE DIRECTOR August 6, 2003 M-03-19 MEMORANDUM FOR HEADS OF EXECUTIVE DEPARTMENTS AND AGENCIES FROM: SUBJECT: Joshua

More information

A. Title 5, United States Code (U.S.C.), Section 552a, Records Maintained On Individuals (The Privacy Act of 1974)

A. Title 5, United States Code (U.S.C.), Section 552a, Records Maintained On Individuals (The Privacy Act of 1974) Department of Homeland Security DHS Directives System Directive Number: 103-01 Revision Number: 01 Issue Date: 8/25/2014 ENTERPRISE DATA MANAGEMENT POLICY I. Purpose This Directive establishes the Department

More information

Mission Assurance and Security Services

Mission Assurance and Security Services Mission Assurance and Security Services Dan Galik, Chief Federation of Tax Administrators Computer Security Officer Conference March 2007 Security, privacy and emergency preparedness issues are front page

More information

Legislative Language

Legislative Language Legislative Language SEC. 1. COORDINATION OF FEDERAL INFORMATION SECURITY POLICY. (a) IN GENERAL. Chapter 35 of title 44, United States Code, is amended by striking subchapters II and III and inserting

More information

EPA Classification No.: CIO-2150.3-P-02.1 CIO Approval Date: 08/06/2012 CIO Transmittal No.: 12-003 Review Date: 08/06/2015

EPA Classification No.: CIO-2150.3-P-02.1 CIO Approval Date: 08/06/2012 CIO Transmittal No.: 12-003 Review Date: 08/06/2015 Issued by the EPA Chief Information Officer, Pursuant to Delegation 1-19, dated 07/07/2005 INFORMATION SECURITY INTERIM AWARENESS AND TRAINING PROCEDURES V3.1 JULY 18, 2012 1. PURPOSE The purpose of this

More information

NISTIR 7359 Information Security Guide For Government Executives

NISTIR 7359 Information Security Guide For Government Executives NISTIR 7359 Information Security Guide For Government Executives Pauline Bowen Elizabeth Chew Joan Hash NISTIR 7359 Information Security Guide For Government Executives Pauline Bowen Elizabeth Chew Joan

More information

Office of Inspector General

Office of Inspector General DEPARTMENT OF HOMELAND SECURITY Office of Inspector General Security Weaknesses Increase Risks to Critical United States Secret Service Database (Redacted) Notice: The Department of Homeland Security,

More information

Privacy Impact Assessment (PIA) for the. Certification & Accreditation (C&A) Web (SBU)

Privacy Impact Assessment (PIA) for the. Certification & Accreditation (C&A) Web (SBU) Privacy Impact Assessment (PIA) for the Cyber Security Assessment and Management (CSAM) Certification & Accreditation (C&A) Web (SBU) Department of Justice Information Technology Security Staff (ITSS)

More information

United States Department of Health & Human Services Enterprise Architecture Program Management Office. HHS Enterprise Architecture Governance Plan

United States Department of Health & Human Services Enterprise Architecture Program Management Office. HHS Enterprise Architecture Governance Plan United States Department of Health & Human Services Enterprise Architecture Program Management Office HHS Enterprise Architecture Governance Plan Version 3.0 February 2007 Approvals The Health and Human

More information

Get Confidence in Mission Security with IV&V Information Assurance

Get Confidence in Mission Security with IV&V Information Assurance Get Confidence in Mission Security with IV&V Information Assurance September 10, 2014 Threat Landscape Regulatory Framework Life-cycles IV&V Rigor and Independence Threat Landscape Continuously evolving

More information

5 FAH-8 H-351 CLOUD COMPUTING

5 FAH-8 H-351 CLOUD COMPUTING 5 FAH-8 H-350 CLOUD COMPUTING (Office of Origin: IRM/BMP) 5 FAH-8 H-351 CLOUD COMPUTING GOVERNANCE BOARD a. The Cloud Computing Governance Board (CCGB) exists to provide advice to the Authorizing Official

More information

REVIEW OF NASA S MANAGEMENT AND OVERSIGHT

REVIEW OF NASA S MANAGEMENT AND OVERSIGHT SEPTEMBER 16, 2010 AUDIT REPORT OFFICE OF AUDITS REVIEW OF NASA S MANAGEMENT AND OVERSIGHT OF ITS INFORMATION TECHNOLOGY SECURITY PROGRAM OFFICE OF INSPECTOR GENERAL National Aeronautics and Space Administration

More information

PREFACE TO SELECTED INFORMATION DIRECTIVES CHIEF INFORMATION OFFICER MEMORANDUM

PREFACE TO SELECTED INFORMATION DIRECTIVES CHIEF INFORMATION OFFICER MEMORANDUM PREFACE TO SELECTED INFORMATION DIRECTIVES CIO Transmittal No.: 15-010 CIO Approval Date: 06/12/2015 Issued by the EPA Chief Information Officer, Pursuant to Delegation 1-19, dated 07/07/2005 CHIEF INFORMATION

More information

Public Law 113 283 113th Congress An Act

Public Law 113 283 113th Congress An Act PUBLIC LAW 113 283 DEC. 18, 2014 128 STAT. 3073 Public Law 113 283 113th Congress An Act To amend chapter 35 of title 44, United States Code, to provide for reform to Federal information security. Be it

More information

Department of Homeland Security Management Directive System MD Number: 4900 INDIVIDUAL USE AND OPERATION OF DHS INFORMATION SYSTEMS/ COMPUTERS

Department of Homeland Security Management Directive System MD Number: 4900 INDIVIDUAL USE AND OPERATION OF DHS INFORMATION SYSTEMS/ COMPUTERS Department of Homeland Security Management Directive System MD Number: 4900 INDIVIDUAL USE AND OPERATION OF DHS INFORMATION SYSTEMS/ COMPUTERS 1. Purpose This directive establishes the Department of Homeland

More information

Department of Homeland Security

Department of Homeland Security Evaluation of DHS Information Security Program for Fiscal Year 2013 OIG-14-09 November 2013 Washington, DC 20528 / www.oig.dhs.gov November 21, 2013 MEMORANDUM FOR: FROM: SUBJECT: Jeffrey Eisensmith Chief

More information

CMS Policy for Information Technology (IT) Investment Management & Governance

CMS Policy for Information Technology (IT) Investment Management & Governance Chief Information Officer Office of Information Services Centers for Medicare & Medicaid Services CMS Policy for Information Technology (IT) Investment Management & Governance May 17, 2007 Document Number:

More information

SECTION 53 INFORMATION TECHNOLOGY AND E-GOVERNMENT. Table of Contents

SECTION 53 INFORMATION TECHNOLOGY AND E-GOVERNMENT. Table of Contents SECTION 53 INFORMATION TECHNOLOGY AND E-GOVERNMENT Table of Contents 53.1 Why must I report on information technology (IT) investments? 53.2 What background information must I know? 53.3 How do I ensure

More information

Department of the Interior Privacy Impact Assessment

Department of the Interior Privacy Impact Assessment Department of the Interior August 15, 2014 Name of Project: email Enterprise Records and Document Management System (eerdms) Bureau: Office of the Secretary Project s Unique ID: Not Applicable A. CONTACT

More information

GAO ELECTRONIC GOVERNMENT ACT. Agencies Have Implemented Most Provisions, but Key Areas of Attention Remain

GAO ELECTRONIC GOVERNMENT ACT. Agencies Have Implemented Most Provisions, but Key Areas of Attention Remain GAO United States Government Accountability Office Report to the Committee on Homeland Security and Governmental Affairs, U.S. Senate September 2012 ELECTRONIC GOVERNMENT ACT Agencies Have Implemented

More information

City of Minneapolis Policy for Enterprise Information Management

City of Minneapolis Policy for Enterprise Information Management City of Minneapolis Policy for Enterprise Information Management Origin: Developed by the City Clerk s Office and Business Information Services. Based on requirements set forth in Federal and State regulations

More information

CMS Policy for Information Security and Privacy

CMS Policy for Information Security and Privacy Office of the Administrator Centers for Medicare & Medicaid Services CMS Policy for Information Security and Privacy FINAL Version 2.0 April 11, 2013 Document Number: CMS-OA-POL-SEC01-02.0 CMS Policy for

More information

NASA OFFICE OF INSPECTOR GENERAL

NASA OFFICE OF INSPECTOR GENERAL NASA OFFICE OF INSPECTOR GENERAL OFFICE OF AUDITS SUITE 8U71, 300 E ST SW WASHINGTON, D.C. 20546-0001 April 14, 2016 TO: SUBJECT: Renee P. Wynn Chief Information Officer Final Memorandum, Review of NASA

More information

Security Control Standard

Security Control Standard Department of the Interior Security Control Standard Awareness and Training April 2011 Version: 1.1 Signature Approval Page Designated Official Bernard J. Mazer, Department of the Interior, Chief Information

More information

FEDERAL ELECTION COMMISSION OFFICE OF INSPECTOR GENERAL

FEDERAL ELECTION COMMISSION OFFICE OF INSPECTOR GENERAL FEDERAL ELECTION COMMISSION OFFICE OF INSPECTOR GENERAL FINAL REPORT Audit of the Federal Election Commission s Fiscal Year 2012 Financial Statements November 2012 ASSIGNMENT No. OIG-12-03 FEDERAL ELECTION

More information

Cybersecurity Risk Management Activities Instructions Fiscal Year 2015

Cybersecurity Risk Management Activities Instructions Fiscal Year 2015 Cybersecurity Risk Management Activities Instructions Fiscal Year 2015 An effective risk management program and compliance with the Federal Information Security Management Act (FISMA) requires the U.S.

More information

Statement of Danny Harris, Ph.D. Chief Information Officer U.S. Department of Education

Statement of Danny Harris, Ph.D. Chief Information Officer U.S. Department of Education Statement of Danny Harris, Ph.D. Chief Information Officer U.S. Department of Education Before the U.S. House Oversight and Government Reform Committee Hearing on Agency Compliance with the Federal Information

More information

OFFICE OF INSPECTOR GENERAL. Audit Report. Evaluation of the Railroad Retirement Board Medicare Contractor s Information Security

OFFICE OF INSPECTOR GENERAL. Audit Report. Evaluation of the Railroad Retirement Board Medicare Contractor s Information Security OFFICE OF INSPECTOR GENERAL Audit Report Evaluation of the Railroad Retirement Board Medicare Contractor s Information Security Report No. 08-04 September 26, 2008 RAILROAD RETIREMENT BOARD INTRODUCTION

More information

COMMERCE ACQUISITION MANUAL 1301.671 DEPARTMENT OF COMMERCE PROGRAM AND PROJECT MANAGER CERTIFICATION PROGRAM

COMMERCE ACQUISITION MANUAL 1301.671 DEPARTMENT OF COMMERCE PROGRAM AND PROJECT MANAGER CERTIFICATION PROGRAM 1301.671 Revised May 2015 COMMERCE ACQUISITION MANUAL 1301.671 DEPARTMENT OF COMMERCE PROGRAM AND PROJECT MANAGER CERTIFICATION PROGRAM 1301.671 COMMERCE ACQUISITION MANUAL 1301.671 Table of Contents SECTION

More information

CMS Policy for Configuration Management

CMS Policy for Configuration Management Chief Information Officer Centers for Medicare & Medicaid Services CMS Policy for Configuration April 2012 Document Number: CMS-CIO-POL-MGT01-01 TABLE OF CONTENTS 1. PURPOSE...1 2. BACKGROUND...1 3. CONFIGURATION

More information

A. This Directive applies throughout DHS, unless exempted by statutory authority.

A. This Directive applies throughout DHS, unless exempted by statutory authority. I. Purpose Department of Homeland Security DHS Directives System Directive Number: 103-02 Revision Number: 00 Issue Date: 6/19/2014 ENTERPRISE ARCHITECTURE MANAGEMENT This Directive establishes the Department

More information

NETWORK AND AIS AUDIT, LOGGING, AND MONITORING POLICY OCIO-6011-09 TABLE OF CONTENTS

NETWORK AND AIS AUDIT, LOGGING, AND MONITORING POLICY OCIO-6011-09 TABLE OF CONTENTS OFFICE OF THE CHIEF INFORMATION OFFICER NETWORK AND AIS AUDIT, LOGGING, AND MONITORING POLICY OCIO-6011-09 Date of Issuance: May 22, 2009 Effective Date: May 22, 2009 Review Date: TABLE OF CONTENTS Section

More information

Audit of Veterans Health Administration Blood Bank Modernization Project

Audit of Veterans Health Administration Blood Bank Modernization Project Department of Veterans Affairs Office of Inspector General Audit of Veterans Health Administration Blood Bank Modernization Project Report No. 06-03424-70 February 8, 2008 VA Office of Inspector General

More information

Federal Trade Commission Privacy Impact Assessment

Federal Trade Commission Privacy Impact Assessment Federal Trade Commission Privacy Impact Assessment for the: StenTrack Database System September, 2011 1 System Overview The Federal Trade Commission (FTC) protects America s consumers. As part of its work

More information

Integrated Financial Management Information System (IFMIS) Merger

Integrated Financial Management Information System (IFMIS) Merger for the Information System (IFMIS) Merger DHS/FEMA/PIA-020 December 16, 2011 Contact Point Michael Thaggard Office of Chief Financial Officer (202) 212-8192 Reviewing Official Mary Ellen Callahan Chief

More information

Federal Identity Management Handbook

Federal Identity Management Handbook September 2005 PUBLIC DRAFT Acknowledgements The Office of Management and Budget and the Federal Identity Credentialing Committee would like to acknowledge the significant contributions of the National

More information

Evaluation Report. Weaknesses Identified During the FY 2013 Federal Information Security Management Act Review. April 30, 2014 Report Number 14-12

Evaluation Report. Weaknesses Identified During the FY 2013 Federal Information Security Management Act Review. April 30, 2014 Report Number 14-12 Evaluation Report Weaknesses Identified During the FY 2013 Federal Information Security Management Act Review April 30, 2014 Report Number 14-12 U.S. Small Business Administration Office of Inspector General

More information

GAO DATA CENTER CONSOLIDATION. Strengthened Oversight Needed to Achieve Cost Savings Goal. Report to Congressional Requesters

GAO DATA CENTER CONSOLIDATION. Strengthened Oversight Needed to Achieve Cost Savings Goal. Report to Congressional Requesters GAO United States Government Accountability Office Report to Congressional Requesters April 2013 DATA CENTER CONSOLIDATION Strengthened Oversight Needed to Achieve Cost Savings Goal GAO-13-378 April 2013

More information

REMOTE ACCESS POLICY OCIO-6005-09 TABLE OF CONTENTS

REMOTE ACCESS POLICY OCIO-6005-09 TABLE OF CONTENTS OFFICE OF THE CHIEF INFORMATION OFFICER REMOTE ACCESS POLICY OCIO-6005-09 Date of Issuance: May 22, 2009 Effective Date: May 22, 2009 Review Date: TABLE OF CONTENTS Section I. PURPOSE II. AUTHORITY III.

More information

Since its inception, the PMO has functioned to support government entities in implementing project management practices through the:

Since its inception, the PMO has functioned to support government entities in implementing project management practices through the: South Carolina IT Project Management Office Executive Summary As the benefits offered through the use of project management became more apparent to public and private institutions, governmental entities

More information

STATEMENT OF SYLVIA BURNS CHIEF INFORMATION OFFICER U.S. DEPARTMENT OF THE INTERIOR BEFORE THE

STATEMENT OF SYLVIA BURNS CHIEF INFORMATION OFFICER U.S. DEPARTMENT OF THE INTERIOR BEFORE THE STATEMENT OF SYLVIA BURNS CHIEF INFORMATION OFFICER U.S. DEPARTMENT OF THE INTERIOR BEFORE THE HOUSE COMMITTEE ON OVERSIGHT AND GOVERNMENT REFORM SUBCOMMITTEE ON INFORMATION TECHNOLOGY AND SUBCOMMITTE

More information

Minimum Security Requirements for Federal Information and Information Systems

Minimum Security Requirements for Federal Information and Information Systems FIPS PUB 200 FEDERAL INFORMATION PROCESSING STANDARDS PUBLICATION Minimum Security Requirements for Federal Information and Information Systems Computer Security Division Information Technology Laboratory

More information

MEMORANDUM FOR HEADS OF EXECUTIVE DEPARTMENTS AND AGENCIES

MEMORANDUM FOR HEADS OF EXECUTIVE DEPARTMENTS AND AGENCIES EXECUTIVE OFFICE OF THE PRESIDENT OFFICE OF MANAGEMENT AND BUDGET WASHINGTON, D.C. 20503 M-10-15 April 21, 2010 MEMORANDUM FOR HEADS OF EXECUTIVE DEPARTMENTS AND AGENCIES FROM: Jeffrey Zients Deputy Director

More information

014-00-01-01-01-1146-00. Mixed Life Cycle FY2002

014-00-01-01-01-1146-00. Mixed Life Cycle FY2002 Consolidated American System (CAPPS) and Interagency e Migration Exhibit 300: Part I: Summary Information and Justification (All Capital Assets) I.A. Overview 1. Date of Submission: 2. Agency: Department

More information

SYSTEM NAME: Digital Identity Access Management System (DIAMS) - P281. SYSTEM LOCATION: U.S. Department of Housing and Urban Development, 451 Seventh

SYSTEM NAME: Digital Identity Access Management System (DIAMS) - P281. SYSTEM LOCATION: U.S. Department of Housing and Urban Development, 451 Seventh SYSTEM OF RECORDS NO.: OCIO/QN.01 SYSTEM NAME: Digital Identity Access Management System (DIAMS) - P281 SYSTEM LOCATION: U.S. Department of Housing and Urban Development, 451 Seventh Street, SW, Washington

More information

FEDERAL CHIEF INFORMATION OFFICERS COUNCIL CHARTER

FEDERAL CHIEF INFORMATION OFFICERS COUNCIL CHARTER FEDERAL CHIEF INFORMATION OFFICERS COUNCIL CHARTER NOVEMBER 2012 NAME OF ORGANZATION Federal Chief Information Officers Council Federal CIO Council AUTHORITY Established by Executive Order 13011 (Federal

More information

Overview. FedRAMP CONOPS

Overview. FedRAMP CONOPS Concept of Operations (CONOPS) Version 1.0 February 7, 2012 Overview Cloud computing technology allows the Federal Government to address demand from citizens for better, faster services and to save resources,

More information

US Department of Education Federal Student Aid Integration Leadership Support Contractor June 1, 2007

US Department of Education Federal Student Aid Integration Leadership Support Contractor June 1, 2007 US Department of Education Federal Student Aid Integration Leadership Support Contractor June 1, 2007 Draft Enterprise Data Management Data Policies Final i Executive Summary This document defines data

More information

Office of Inspector General

Office of Inspector General Office of Inspector General DEPARTMENT OF HOMELAND SECURITY U.S. Department of Homeland Security Washington, DC 20528 Office of Inspector General Security Weaknesses Increase Risks to Critical DHS Databases

More information

Reclamation Manual Directives and Standards

Reclamation Manual Directives and Standards Subject: Purpose: Authority: Administrative Cost Tracking: Information Technology (IT) Cost Tracking Pilot in the Financial and Business Management System (FBMS) This Directive and Standard (D&S) serves

More information

OPM System Development Life Cycle Policy and Standards. Table of Contents

OPM System Development Life Cycle Policy and Standards. Table of Contents Table of Contents 1. INTRODUCTION... 4 1.1 Purpose... 4 1.1.1 OPM SDLC Policy... 4 1.1.2 Key Concepts and Principles... 4 1.2 Scope and Applicability... 5 1.3 Compliance, Enforcement and Exceptions...

More information

Department of the Interior Privacy Impact Assessment

Department of the Interior Privacy Impact Assessment Department of the Interior September 8, 2014 Name of Project: Enterprise Forms System Bureau: Office of the Secretary Project s Unique ID (Exhibit 300): 010-000000312 Once the PIA is completed and the

More information

UNITED STATES DEPARTMENT OF EDUCATION OFFICE OF INSPECTOR GENERAL

UNITED STATES DEPARTMENT OF EDUCATION OFFICE OF INSPECTOR GENERAL UNITED STATES DEPARTMENT OF EDUCATION OFFICE OF INSPECTOR GENERAL AUDIT SERVICES June 30, 2016 Control Number ED-OIG/A04O0014 James W. Runcie Chief Operating Officer Federal Student Aid U.S. Department

More information

A Role-Based Model for Federal Information Technology/ Cybersecurity Training

A Role-Based Model for Federal Information Technology/ Cybersecurity Training NIST Special Publication 800-16 Revision 1 (3 rd Draft) A Role-Based Model for Federal Information Technology/ Cybersecurity Training Patricia Toth Penny Klein I N F O R M A T I O N S E C U R I T Y NIST

More information

UNITED STATES DEPARTMENT OF THE INTERIOR BUREAU OF LAND MANAGEMENT MANUAL TRANSMITTAL SHEET. 1283 Data Administration and Management (Public)

UNITED STATES DEPARTMENT OF THE INTERIOR BUREAU OF LAND MANAGEMENT MANUAL TRANSMITTAL SHEET. 1283 Data Administration and Management (Public) Form 1221-2 (June 1969) Subject UNITED STATES DEPARTMENT OF THE INTERIOR BUREAU OF LAND MANAGEMENT MANUAL TRANSMITTAL SHEET 1283 Data Administration and Management (Public) Release 1-1742 Date 7/10/2012

More information

Information Security for IT Administrators

Information Security for IT Administrators Fiscal Year 2015 Information Security for IT Administrators Introduction Safeguarding the HHS Mission Information Security Program Management Enterprise Performance Life Cycle Enterprise Performance Life

More information

FISH AND WILDLIFE SERVICE LOGISTICS

FISH AND WILDLIFE SERVICE LOGISTICS Logistics FISH AND WILDLIFE SERVICE 2.1 What is the purpose of this chapter? This chapter: A. Supplements the Department of the Interior s Federal Acquisition Certification for Contracting Officer Technical

More information

VOLUME 1, CHAPTER 3: FEDERAL FINANCIAL MANAGEMENT IMPROVEMENT ACT OF 1996 COMPLIANCE, EVALUATION, AND REPORTING SUMMARY OF MAJOR CHANGES

VOLUME 1, CHAPTER 3: FEDERAL FINANCIAL MANAGEMENT IMPROVEMENT ACT OF 1996 COMPLIANCE, EVALUATION, AND REPORTING SUMMARY OF MAJOR CHANGES VOLUME 1, CHAPTER 3: FEDERAL FINANCIAL MANAGEMENT IMPROVEMENT ACT OF 1996 COMPLIANCE, EVALUATION, AND REPORTING SUMMARY OF MAJOR CHANGES All changes are denoted by blue font. Substantive revisions are

More information

Information Technology Security Training Requirements APPENDIX A. Appendix A Learning Continuum A-1

Information Technology Security Training Requirements APPENDIX A. Appendix A Learning Continuum A-1 APPENDIX A Appendix A Learning Continuum A-1 Appendix A Learning Continuum A-2 APPENDIX A LEARNING CONTINUUM E D U C A T I O N Information Technology Security Specialists and Professionals Education and

More information

EPA Classification No.: CIO 2123.0-P-01.1 CIO Approval Date: 06/10/2013 CIO Transmittal No.: 13-003 Review Date: 06/10/2016

EPA Classification No.: CIO 2123.0-P-01.1 CIO Approval Date: 06/10/2013 CIO Transmittal No.: 13-003 Review Date: 06/10/2016 Issued by the EPA Chief Information Officer, Pursuant to Delegation 1-84, dated June 7, 2005 CONFIGURATION MANAGEMENT PROCEDURE 1 PURPOSE The purpose of this procedure is to describe the process EPA Program

More information

IT SYSTEM LIFE-CYCLE AND PROJECT MANAGEMENT

IT SYSTEM LIFE-CYCLE AND PROJECT MANAGEMENT United States Department of Agriculture Agricultural Marketing Service Directive 3130.8 IT SYSTEM LIFE-CYCLE AND PROJECT MANAGEMENT I. PURPOSE... 1 II. POLICY... 1 III. DEFINITIONS... 1 IV. DOCUMENTATION

More information

Identity and Access Management Initiatives in the United States Government

Identity and Access Management Initiatives in the United States Government Identity and Access Management Initiatives in the United States Government Executive Office of the President November 2008 Importance of Identity Management within the Federal Government "Trusted Identity"

More information