The file's text, extracted by GovTribe without its formatting.
Law, Regulation, Policy Web Address
Public Laws
| Clinger-Cohen Act |
| http://www.cio.gov/Documents/it_management_reform_act_Feb_1996.htm |
| Federal Financial Improvement Act |
| http://www.whitehouse.gov/omb/financial/fm_systems.html |
| Federal Information Security Management Act (FISMA) of 2002 (Title III of E-Gov) |
| http://csrc.ncsl.nist.gov/policies/ |
| Federal Managers’ Financial Integrity Act of 1982 |
| http://www.whitehouse.gov/omb/financial/fmfia1982.html |
| Federal Records Act |
| http://www.access.gpo.gov/uscode/title44/chapter33_.html |
| Freedom of Information Act of 1974 |
| http://www.usdoj.gov/04foia/foiastat.htm |
| FOIA and the Electronic Records Management Act-36 CFR Parts 1-4 |
| http://www.archives.gov/about/regulations/part-1234.html |
| Government Paperwork Elimination Act (GPEA) |
| http://www.archives.gov/records_management/policy_and_guidance/electronic_signature_technology.html |
Paperwork Reduction Act http://www.archives.gov/federal_register/public_laws/acts.html#pra
| 44 U.S.C. 1061-1065, Government Information Security Reform Act |
| http://csrc.nist.gov/policies/Subtitle-G2.pdf |
| Rehabilitation Act of 1973 (Section 508) |
| http://www.section508.gov/index.cfm?FuseAction=Content&ID=12 |
| Children’s Online Privacy Protection Act of 1998 (COPPA) |
| http://www.ftc.gov/ogc/coppa1.htm |
| Small Business Paperwork Relief Act of 2002 |
| http://www.whitehouse.gov/omb/inforeg/sbpra102803.html |
Executive Orders
| Executive Order 13231 – “Critical Infrastructure Protection in the Information Age” |
| http://www.whitehouse.gov/news/releases/2001/10/20011016-12.html |
| Executive Order 13011 – “Federal Information Technology” |
| http://www.cio.gov/index.cfm?function=executiveorder |
| Executive Order 13166, “Improving Access to Services for People with Limited English Proficiency” |
| http://www.usdoj.gov/crt/cor/Pubs/eolep.htm |
Additional Federal Regulations and Guidelines
| OMB Circular A-11 – “Preparation and Submission of Budget Estimates” |
| http://www.whitehouse.gov/omb/circulars/a11/04toc.html |
| OMB Circular A-123 – “Management Accountability and Control” |
| http://www.whitehouse.gov/omb/circulars/a123/a123.html |
| OMB Circular A-127 – “Financial Management Systems” |
| http://www.whitehouse.gov/omb/circulars/a127/a127.html |
| OMB Circular A-130 – “Management of Federal Information Resources”, Appendix III – “Security of Federal Information Resources” |
| http://www.whitehouse.gov/omb/circulars/a130/a130.html |
| OMB Circular A-130, App 1 |
| http://www.whitehouse.gov/omb/circulars/a130/a130appendix_i.html |
| OMB Memorandum 97-02 – “Funding Information Systems Investments” |
| http://www.whitehouse.gov/omb/bulletins/97-02.html |
| OMB Memorandum 97-16 – “Information Technology Architectures” |
| http://www.whitehouse.gov/omb/memoranda/m97-16.html |
| OMB Memorandum 00-15 – “OMB Guidance on Implementing the Electronic Signatures in Global and National Commerce Act” |
| http://www.whitehouse.gov/omb/memoranda/m00-15.html |
| General Accounting Office (GAO) Accounting and Information Management Division (AIMD) Report 94-115 – “Executive Guide: Improving Mission Performance Through Strategic Information Management and Technology” |
| http://www.access.gpo.gov/cgibin/useftp.cgi?IPaddress=wais.access.gpo.gov&filename=ai94115.txt&directory=/diskb/wais/data/gao |
| CPR Data Item Description DI-MGMT-81466A |
| http://www.acq.osd.mil/pm/currentpolicy/cpr_cfsr/CPR%20Final%203-30-05.pdf |
| Records Management - Code of Federal Regulations (CFR), Parts 1220-1238 |
| http://www.archives.gov/about_us/regulations/subchapter_b.html |
| Federal Enterprise Architecture Practical Guidance |
| http://www.whitehouse.gov/omb/egov/documents/FEA_Practice_Guidance.pdf |
| OMB Enterprise Architecture Assessment Framework |
| http://www.whitehouse.gov/omb/egov/a-2-EAAssessment.html |
| Federal Transition Framework |
| http://www.egov.gov/ftf |
| Federal Enterprise Architecture Reference Models |
| http://www.whitehouse.gov/omb/egov/a-2-EAModelsNEW2.html |
| Practical Guide to Federal Enterprise Architecture |
| http://www.cio.gov/archive/bpeaguide.pdf |
Standards
| International Organization for Standardization |
| http://www.iso.ch/iso/en/ISOOnline.openerpage |
| IRS Publication 1075 – “Tax Information Security Guidelines for Federal, State, and Local Agencies” |
| http://www.irs.gov/pub/irs-pdf/p1075.pdf |
| Software Engineering Institute (SEI) and the Capability Maturity Model Integration (CMMI) |
| http://www.sei.cmu.edu/cmmi/ |
| Infrastructure Technology Infrastructure Library (ITIL) |
| http://www.itil-officialsite.com/home/home.asp |
| NIST 800 Series Standards and Guidelines |
| http://csrc.nist.gov/publications/nistpubs/ |
Security and Privacy Constraints -
| Law, Regulation, Policy |
| Web Address |
Public Laws
| Computer Fraud and Abuse Act of 1987 |
| http://cio.doe.gov/Documents/CFA.HTM |
| Computer Matching and Privacy Protection Act of 1988 |
| http://www.ed.gov/about/offices/list/ocio/legislation.html |
| Computer Security Act of 1987 |
| http://www.cio.gov/Documents/computer_security_act_Jan_1998.html |
| Electronic Signatures in Global and National Commerce Act of 2000 (E-Sign) |
| http://frwebgate.access.gpo.gov/cgi-bin/getdoc.cgi?dbname=106_cong_bills&docid=f:s761enr.txt.pdf |
| Children's Online Privacy Protection Act of 1998 (COPPA) |
| http://www.ftc.gov/ogc/coppa1.htm |
| Federal Records Act |
| http://www.access.gpo.gov/uscode/title44/chapter33_.html |
| Freedom of Information Act of 1974 |
| http://www.usdoj.gov/04foia/foiastat.htm |
| Privacy Act of 1974 |
| http://www.usdoj.gov/04foia/privstat.htm |
| 18 U.S.C. 1367, 2232, 2510, 2510 Notes, 2511 to 2521, 2701, 2701 Note, 2702 to 2711, 3117, 3121 Note, 3122 to 3127, Electronic Communications Privacy Act of 1986 |
| N/A |
Standards
| FIPS PUB 73 – “Guidelines for Security of Computer Applications” |
| http://csrc.nist.gov/publications/fips/fips73/fips73.PDF |
| FIPS PUB 83 – “Guidelines on User Authentication Techniques for Computer Network Access Control” |
| http://csrc.nist.gov/publications/fips/ |
| FIPS PUB 112 – “Password Usage” |
| http://www.itl.nist.gov/fipspubs/fip112.htm |
| FIPS PUB 113 – “Computer Data Authentication” |
| http://www.itl.nist.gov/fipspubs/fip113.htm |
| National Institute of Standards and Technology |
| http://www.nist.gov/ |
| NIST Special Publication 800-64 – “Security Considerations in the Information System Development Life Cycle” |
| http://csrc.nist.gov/publications/nistpubs/800-64/NIST-SP800-64.pdf |
| NIST Special Publication 800-53 – “Recommended Security Controls for Federal Information Systems, Draft” |
| http://csrc.nist.gov/publications/nistpubs/800-53/SP800-53.pdf |
| NIST Special Publication 800-34 – “Contingency Planning Guide for Information Technology Systems” |
| http://csrc.nist.gov/publications/nistpubs/800-34/sp800-34.pdf |
| NIST Special Publication 800-40 – “Procedures for Handling Security Patches” |
| http://csrc.nist.gov/publications/nistpubs/800-40/sp800-40.pdf |
Additional Federal Regulations and Guidelines
| OMB Bulletin 90-08 – “Guidelines for Preparation of Security Plans for Federal Systems that Contain Sensitive Data” |
| http://wwwoirm.nih.gov/itmra/omb90-08.html |
| OMB Memorandum 99-18, Privacy Policies on Federal Websites |
| http://www.whitehouse.gov/omb/memoranda/m99-18.html |
| OMB Memorandum -03-22, OMB Guidance for Implementing the Privacy Provisions of the E-Government Act of 2002 |
| http://www.whitehouse.gov/omb/memoranda/m03-22.html |
| OMB Memorandum-06-20, FY 2006 Reporting Instructions for the Federal Information Security Management Act and Agency Privacy Management (July 17, 2006) |
| http://www.whitehouse.gov/omb/memoranda/fy2006/m06-20.pdf |
