17) GACA GSAAffiliatedCustomerAccounts 2023 02 02.pdf
PDF 176 KB Posted
- Solicitation number
- 47PB5126R0024
- Issued by
- Not on record
About this file
This is a GSA IT guidance document establishing procedures for creating GSA Affiliated Customer Accounts (GACA) for secure collaboration with external government customers and business partners.
GACA is a specialized Gmail account process designed to enable real-time collaboration and file sharing in GSA's Google Drive and Google Sites systems while maintaining security compliance with Federal Information Processing Standard (FIPS) 140-2. The accounts utilize TLS 1.2 encryption for secure access and transmission. GACA accounts are authorized exclusively for sharing information on Google Drive and Google Sites and are prohibited for email communications. The accounts are intended for government agency customers and business partners who do not use Google in their workplace; agencies and civilian partners already using Google do not require GACA accounts, and GSA employees and contractors must not use GACA accounts in lieu of standard gsa.gov accounts. Account creation requires users to establish a Gmail account at http://mail.google.com/mail/signup with a username format of "GSA." followed by first and last name (example: GSA.johnsmith@gmail.com), complete all required fields and accept Terms of Service, and set up mandatory 2-Step Verification using a smartphone capable of receiving text messages. GSA IT Security Staff continuously monitors shared files and Google Sites sharing for compliance; upon detection of non-compliance, users are notified, and if sharing involves a G Suite account holder, no further action is required.
View the file
Other files
Show all 41
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
U.S. General Services Administration Office of the GSA IT www.gsa.gov/cio
For Official Use Only
Date:
Subject:
February 2, 2023 Gmail accounts - GSA Affiliated Customer Accounts (GACA) - for sharing in GSA’s
Google Drive and Google Sites
GSA uses Google to provide employees with a way to collaborate in real time, and to create, edit and share work from anywhere. To enable simliar sharing and collaboration in Google with our government customers and business partners, while also ensuring that this shared information is safeguarded and secure, we’ve created a specialized Gmail account process called GACA – short for the GSA Affiliated Customer Accounts (GACA). Collaborative data stored on GSA’s Google Drive and Google Sites systems are compliant to the Federal Information Processing Standard (FIPS) 140-2. This standard ensures that access and transmission occurs via a secure web page using the TLS 1.2 encryption standard. GACA is only authorized for sharing information on Google Drive and Google Sites, it is not authorized to be used for email communications.
Applicability – GACA is for those who work for our government customers and business partners who do not use Google in their workplace. Agencies and civilian partners that are using Google in their workplace do not need to create a GACA account. GACA accounts must NOT be used by GSA employees and contractors in lieu of a gsa.gov account.
How to create a GSA Affiliated Customer Account (GACA) in Gmail
The person who will be using the GACA account (the government agency customer or the business partner) must create a Gmail account at http://mail.google.com/mail/signup and follow the process below: • enter their first name and last name,
• enter their username: must start with “GSA.” then first name, last name -example: GSA.johnsmith@gmail.com (mandatory),
• complete all required fields, accept the Terms of Service and submit the request, and
• set up 2-Step Verification (also known as two-factor authentication) using a smart phone that can receive simple messages (mandatory).
The GSA IT Security Staff continuously monitors all shared files in Google Drive, and sharing in GSA’s Google Sites. If non-compliance with this process is detected, then our staff will notify users of non-compliance with this process. After notification, if the sharing has been determined to be with a user that maintains a G Suite account, no further action will be required.
http://mail.google.com/mail/signup mailto:GSA.johnsmith@gmail.com
File details come from the government source that posted it. Updated .