(U) NGAI 8955.6_NGA Web Property Standards & Guidelines_Update_1.pdf

UNCLASSIFIED

National Geospatial-Intelligence Agency

INSTRUCTION

NUMBER 8955.6

1 October 2019

Administrative Update 1, 13 May 2020

CIO-T

SUBJECT: NGA Web Property Standards and Guidelines

References: See Enclosure 1.

1. PURPOSE. This Instruction:

a. Establishes policy, assigns responsibilities, and designates authorities for NGA web property standards and guidelines on enterprise domains in accordance with (IAW) Reference (d).

b. Rescinds NGA Instruction (NI) 8955.5, “NGA Instruction for Preparing NGA Web Pages,” 23 May 2009.

2. APPLICABILITY. This Instruction applies to all NGA civilian employees, military service members, other Government agency personnel assigned to NGA, and contractors, hereinafter referred to as personnel.

3. DEFINITIONS. See Glossary.

4. POLICY. It is NGA policy to:

a. Establish web property standards and guidelines to manage compliance, style, and content for NGA web properties on enterprise domains.

b. Disseminate information electronically on multiple security domains IAW relevant US Government laws and policies, DoD policies, IC policies, and NGA policies.

c. Establish uniform style and mandatory content elements for NGA web properties on enterprise domains IAW Reference (d).

5. RESPONSIBILITIES. See Enclosure 2.

NGAI 8955.6

6. EFFECTIVE DATE. This Instruction is effective on the date of signature.

Susan Shuback Associate Chief Information Officer

Enclosures

1. References

2. Responsibilities

3. Appendix

Glossary

TABLE OF CONTENTS

CHANGE LOG

ENCLOSURE 1: REFERENCES

ENCLOSURE 2: RESPONSIBILITIES

Chief Information Officer

Director, Chief Information Officer and Information Technology Services

Director, Future Experience Office

Director, Office of Corporate Communications

Senior Component Official for Privacy

Information Developers and Designers

ENCLOSURE 3: NGA WEB PROPERTY GUIDANCE

GLOSSARY

CHANGE LOG

Change Change Date Revised

By

Pages

Affected Change Description

1 13 May 2020 DXCI 5 Updated reference table

1 13 May 2020 DXCI 6 Removed (Reference (m))

1 13 May 2020 DXCI 7 Revised title IAW ref m - D/CIO-T

Chief Information Officer

ENCLOSURE 1

REFERENCES

(a) Public Law 105-220, “Workforce Investment Act of 1998 - Rehabilitation Act

Amendments, Section 508, Part 1194, Electronic and Information Technology

(b) Office of Management and Budget (OMB) Memorandum M-11-15, “Final Guidance on Implementing the Plain Writing Act of 2010,” 13 April 2011

(c) OMB Memorandum M-15-13, “Policy to Require Secure Connections across

Federal Websites and Web Services,” 08 June 2015

(d) OMB Memorandum M-17-06, “Policies for Federal Agency Public Websites and

Digital Services,” 08 November 2016

(e) Electronic Code of Federal Regulations, Title 36, Chapter XII, Subchapter B, §

1220.12, “NARA’s Records Management Responsibilities,” 05 August 2019

(f) Title 17, United States Code (USC), “Copyrights,” 30 June 2017

(g) Committee on National Security Systems Instruction No. 4009, “Committee on

National Security Systems (CNSS) Glossary,” 06 April 2015

(h) Intelligence Community Directive (ICD) 501, “Discovery and Dissemination for

Retrieval of Information within the Intelligence Community,” 21 January 2009

(i) ICD 710, “Classification Management and Control Markings System,” 21 June 2013

(j) Department of Defense Instruction (DoDI) 5025.13, “DoD Plain Language

Program,” 11 April 2013, Incorporating Change 4, 31 May 2018 23 January 2020

(k) DoDI 8520.02, “Public Key Infrastructure (PKI) and Public Key (PK) Enabling,”

24 May 2011

(l) NGA Directive (NGAD) 8000, “Information Management and the Chief Information Officer,” 12 June 2013, Administrative Update 2, 28 October 2015

(m) NGA Instruction (NGAI) 5500.7, “Handling of Personally Identifiable Information,” 15 February 2013 5401.1, “Privacy and Civil Liberties Program,” 26 January 2020

(n) NGAI 5720.1, “Clearance for Public Release,” 12 May 2015

(o) NGAI 8040.2, Volume 1, “Records and Information Lifecycle Management: Records

Management Program,” 30 March 2016

(p) NGAI 8220.1, “Identity Authentication and Authorization,” 11 April 2018

(q) NGAI 8400.4, “Implementation of Electronic and Information Technology

Accessibility/Section 508 Program,” 05 July 2017, Admin Update 1, 24 January

ENCLOSURE 2

RESPONSIBILITIES

1. Chief Information Officer (CIO).

a. Establishes and oversees web standards for enterprise domains including administration, security, and sustainment of web infrastructure, services, tools, and Domain Name Service (DNS) directory development IAW Reference (l).

b. Designates the Director, CIO and Information Technology Services (D/CIO-T), as the authority to manage the enterprise domain web property framework.

2. D/CIO-T.

a. Manages web properties residing on the enterprise domains.

b. Assigns Director, Future Experience Office (D/TF), to develop NGA web property standards and guidelines for enterprise domains.

3. D/TF.

a. Establishes, assigns, and maintains DNS guidelines and standards.

b. Maintains NGA web style guidance to ensure a consistent user experience across enterprise domains.

c. Reviews, assumes control of, and removes NGA web properties that are not compliant with the standards and guidelines of this Instruction.

d. Promotes usage of best practices to mitigate privacy risks and effectively protect personally identifiable information (PII) collected, stored, or transmitted on NGA web properties. (Reference (m))

e. Maintains the NGA Web Guidance and Resources website (hereinafter referred to as the Online Resources), located at https://www.intranet.nga.ic.gov/web/.

4. Director, Office of Corporate Communications.

a. Manages the review of all NGA products and information that are publicly released (where applicable), all external marketing (e.g., social media, correspondence with the press, and promotional products), and all writing for public release for adherence to NGA messaging standards on public-facing web properties available over the World Wide Web IAW Reference (n).

b. Ensures that information released to the public is unclassified IAW Reference (n).

https://www.intranet.nga.ic.gov/web

c. Coordinates and interacts with media and external sources regarding NGA web properties IAW Reference (n).

5. Senior Component Official for Privacy collaborates with the D/CIO-T Chief Information Officer to ensure that protections and disclaimers are in place for web properties that collect, store, or transmit PII IAW Reference (m).

6. Information Developers and Designers.

a. Comply with web standards and guidance provided in the Online Resources when developing, modifying, and maintaining NGA web properties on enterprise domains.

b. Comply with all header and footer guidance provided at the Online Resources, Content Delivery Network for all NGA web properties.

c. Format and publish NGA web properties that enable all users to retrieve and use information, including Section 508 compliance, IAW References (d), (l), and (q).

ENCLOSURE 3

NGA WEB PROPERTIES GUIDANCE

1. Workflow processes for requesting and developing NGA web properties are provided in the Web Governance Concept of Operations (CONOPS), the relevant Standard Operating Procedures (SOPs), and this Instruction.

2. The CONOPS, SOPs, and links to style guides, design elements, and best practices are provided in the Online Resources.

3. Web Design Style Guidance.

a. NGA web properties meet and maintain high standards of effectiveness and usability to provide quality information that is readily discoverable and accessible to authorized users. (References (d) and (q))

b. The UXD Web Style Guide is a resource to help developers and software engineers overcome common design problems when creating a new web property. A core function of the Online Resources is to provide assistance in the creation of a more consistent “look and feel” across NGA web properties. The Online Resources UXD Web Style Guide is located on the following networks:

NGANet/Joint Worldwide Intelligence Communications System (JWICS) https://www.intranet.nga.ic.gov/web/ http://design.nga.ic.gov

Secret Internet Protocol Router Network (SIPRNet) https://design.nga.smil.mil

Sensitive But Unclassified (SBU) https://designsystem.digital.gov/ http://design.nga.mil

c. The efficient, effective, and consistent use of NGA web properties and web services standards promotes a more citizen-centered Government and user-friendly experience.

4. Writing in Plain Language.

a. Plain language and communication have many benefits. Avoiding vagueness and unnecessary complexity makes it easier for users to understand information and use services. Plain writing assists the user in complying with applicable requirements to better understand the NGA web property. (References (b) and (j))

b. NGA web properties on enterprise domains must conform to the plain writing memorandums and referenced materials identified in the content guidance provided in the Online Resources.

5. Copyright Protections.

a. Copyright is a form of legal protection grounded in the US Constitution and granted by law for original works created in any medium.

b. NGA web properties on enterprise domains must comply with the US Copyright laws and referenced materials IAW Reference (f). Copyright guidance is provided in the Online Resources.

6. Accessibility Guidance.

a. Accessibility is one of the most important aspects of web development.

Accessibility allows the greatest number of users to view content more completely.

Users have a better experience if accessibility is built into web properties from the beginning.

b. US Code and Public Laws require Federal Agencies to ensure electronic and information technology (EIT) is accessible to people with disabilities. Section 508 of the Workforce Investment Act of 1998 applies to all Federal agencies when developing, procuring, maintaining, or using EIT. (References (a) and (q))

c. NGA web properties on enterprise domains comply with Section 508 requirements. Accessibility guidance and tools are located on networks identified in paragraph 3.b. of this Enclosure.

d. For overall questions regarding Section 508 compliance, contact the Section 508 coordinator at NGASection508Coordinator@coe.ic.gov. (References (a) and (q))

7. Analytics, Performance Metrics, and Feedback Guidance.

a. Web analytics are the collection, analysis, and communication of web data for purposes of understanding and optimizing web usage. Web analytics measure web traffic and assess the effectiveness of a web property. The resulting analysis helps the organization determine the value of its content or an application, and provides insight to improve its offerings and the user experience.

b. NGA web properties on enterprise domains should have a web analytics collection capability. (Reference (d)) Web analytic solutions are provided in the Online Resources.

8. Security Guidance.

a. NGA web properties provide Government information and services to support the performance of NGA’s mission. Security and risk management are essential functions incorporated into the lifecycle of NGA web properties, including classification markings, public key infrastructure (PKI) certificates, and hypertext transfer protocol secure (HTTPS) IAW References (c), (k) and (p).

b. Intelligence sources, methods, and activities are safeguarded IAW Reference (i).

Additional information for classification marking requirements is provided in the Online Resources.

c. Websites, services, and online resources available over the public internet that are maintained and operated in whole or in part by NGA are provided through HTTPS.

(References (c) and (k)) Additional information for HTTPS implementation is provided in the Online Resources.

9. Search and Discovery Guidance.

a. Search functions are universal and an expected website feature commonly used to find information. Search engine optimization (SEO) is critical to reaching users who primarily rely on commercial search engines.

b. NGA web properties on enterprise domains must provide search capabilities IAW References (d) and (h). D/TF provides search solutions, how to incorporate a search capability into an NGA web property, and how to maximize discovery of web assets via SEO and NGA search tools. Additional information is provided in the Online Resources.

c. NGA web properties on enterprise domains are published to a registry to assist search and discovery of content and services. Search and Discovery Guides are available in the Online Resources.

d. NGA web properties on enterprise domains contain metadata tags to assist search and discovery. Search and Discovery Guides are located on networks identified in paragraph 3.b. within this Enclosure provided in the Online Resources.

10. NGA Dissemination on Domain Networks Guidance.

a. IC computer domain networks disseminate intelligence information. NGA has multiple IC domain networks based on classification. Web properties are stored on servers that are connected to the domain networks and are reachable using DNS.

When the DNS is translated into an Internet Protocol (IP) address, an information system (IS) can pinpoint the location of another IS/server where the web property is stored.

b. NGA web properties on all enterprise domains must register for a DNS Uniform Resource Locator (URL) to ensure that users can quickly identify the web property as a

Government entity that is legitimate, secure, and authoritative. (Reference (d)) DNS Naming Guidelines is provided in the Online Resources.

11. Records Management Guidance.

a. Records and Information Management (RIM) is planning, controlling, directing, organizing, training, promoting, and other managerial activities related to the lifecycle of records. RIM ensures GEOINT is timely, relevant, available, and accurate. (Reference (o))

b. NGA web properties on enterprise domains must comply with the National Archives and Records Administration’s Guidance on Managing Web Records.

(References (e) and (o)) Web records are defined as records generated, captured, or received using web technologies. Records Management Guidance for Web Properties is provided in the Online Resources.

GLOSSARY

Content Delivery Network (CDN)

NGA’s online resource for stable, reliable, globally available open-source Javascript libraries, CSS frameworks, and the Ecobar, at https://cdn.nga.ic.gov. (Definition created by NGA for NGA purposes only)

Developer A programmer who specializes in or is specifically engaged in the development of web applications (applications native to the web and mobile-ready services that are published through the GEOINT App Store [e.g., Integrated Analytic Environment]), or applications that are run from a web server to a web browser.

(Definition created by NGA for NGA purposes only)

Domain Network An administrative grouping of computers, hosts, and servers with a centralized managed login, access to resources, and permissions, and categorized by the highest classification level of the data it transmits. (Definition created by NGA for NGA purposes only)

Enterprise Domains All domains that support NGA’s public, internal (intranet), and external (e.g., SOUTHCOM, Geomatics, and NGA Support Team) web properties. (Definition created by NGA for NGA purposes only)

Intranet A computer network, especially one based on internet technology, that an organization uses for its own internal (and usually private) purposes and that is closed to outsiders.

(Reference (g))

Metadata

Information describing the characteristics of data including, for example, structural metadata describing data structures (e.g., data format, syntax, and semantics) and descriptive metadata describing data contents (e.g., information security labels).

(Reference (g))

NGA Web Property Any web content that originates from NGA, receives funding from or by NGA, resides on an NGA web server, accessible from an NGA DNS name, contains an NGA URL, and/or presents as an NGA resource. (Definition created by NGA for NGA purposes only)

Public-Facing A web property that provides Government information or services to the public or a specific user group across a variety of delivery platforms and devices. (Reference (d)) https://cdn.nga.ic.gov/

Web Property Points of presence (e.g., websites, social media accounts, blogs, platforms, and digital images) on the web that are assets of an entity (e.g., individual, corporation, or Agency) used for the purpose of representing a brand, person, or identity. (Definition created by NGA for NGA purposes only)

Website A connected group of pages on the web regarded as a single entity, usually maintained by a person or organization and devoted to a single topic or several closely related topics.

(Definition created by NGA for NGA purposes only)