DSBlog

Comments (0)

Federal government departments and agencies that handle classified national security information are putting the finishing touches on a two-month review of the safeguards they have in place to protect such information.

The self-assessments were ordered by the White House on November 28th in reaction to WikiLeaks’ unauthorized publication of a massive trove of sensitive U.S. government documents and cables. As we reported at the time, a number of observers cautioned that too strong a counter-reaction could have a chilling effect on the burgeoning information-sharing environment.

Review teams consisting of counterintelligence, security and information-assurance experts at each of the relevant agencies have until January 28th to submit their self-assessments. A January 3rd Office of Management and Budget (OMB) memo poses a number of questions the review teams should answer, including:

• Assess what your agency has done or plans to do to address any perceived vulnerabilities, weaknesses, or gaps on automated systems in the post-WikiLeaks environment…
• Assess your agency’s plans for changes and upgrades to current [and new] classified networks, systems, applications, databases, websites, and online collaboration environments… in terms of the completeness and projected effectiveness of all types of security controls called for by applicable law and guidance…
• Assess all security, counterintelligence, and information assurance policy and regulatory documents that have been established by and for your department or agency.

The memo also asks the teams to formulate plans to resolve any identified issues or to “shift or acquire resources to address those weaknesses or gaps.”

––––––––––––––––

Digital Sandbox is the leader in public safety risk management, providing analytic tools and information products to government agencies and large enterprises, for optimizing risk-based strategic, policy, and budgetary decisions.