{"id":1043,"date":"2015-06-01T23:19:15","date_gmt":"2015-06-02T06:19:15","guid":{"rendered":"https:\/\/www.microsoft.com\/industry\/blog\/uncategorized\/government-mandates\/"},"modified":"2023-07-18T09:03:37","modified_gmt":"2023-07-18T16:03:37","slug":"government-mandates","status":"publish","type":"post","link":"https:\/\/www.microsoft.com\/en-us\/industry\/blog\/government\/2015\/06\/01\/government-mandates\/","title":{"rendered":"Government mandates"},"content":{"rendered":"
Technology is key to many of the Mandates and Executive Orders that apply to your organization. Microsoft is here to help with information and links to details and solutions that help you address requirements and achieve the level of compliance you need.<\/p>\n<\/div>\n
The E-Government Act passed in 2002 recognized the importance of information security to the economic and national security interests of the United States. As Title III of this act, FISMA requires each federal agency to develop, document and implement an agency-wide program to provide information security that supports the operations and assets of the agency and related agencies and sources.<\/p>\n
Office 365 implements security processes that adhere to the standards required by U.S. federal agencies, and it has acquired FISMA Authority to Operate (ATO) from a federal agency.<\/p>\n
Visit the CRSC site for more detail on FISMA<\/a><\/p>\n Under the National Information Assurance Partnership (NIAP), the National Institute of Standards and Technology (NIST) and the National Security Agency (NSA) established the Common Criteria Evaluation and Validation Scheme for IT Security (CCEVS). The goals, per the Federal Mandate, are to ensure that security evaluations of IT products are performed to consistent standards, encourage the formation of commercial security testing laboratories, meet the needs of government and industry for cost-effective evaluation of IT products, and improve the availability of those products.<\/p>\n Visit the NIAP Common Criteria Evaluation and Validation Scheme for IT Security website.<\/a><\/p>\n The U.S. Government Configuration Baseline (USGCB), which evolved from the Federal Desktop Core Configuration mandate (FDCC), provides guidance to federal agencies to help improve security configurations for government IT. The requirements support compliance testing and reporting, focus on green IT, and itemize ways in which to work with the Windows operating system and with Windows Internet Explorer. As a result of the Initiative, agencies can achieve more environmentally aware and more secure IT environments.<\/p>\n Visit the U.S. Government Configuration Baseline Initiative website.<\/a><\/p>\n<\/div>\n This Executive Order, which aims to reduce federal government spending, was signed on June 13, 2011. Its goals include: save taxpayer money by cutting waste, curb spending, increase efficiency, and improve accountability. Other goals are to eliminate duplicative and inefficient programs, accelerate innovation, and terminate poorly performing information technology projects.<\/p>\n This Executive Order, issued April 27, 2011, acknowledges the responsibility of government agencies to streamline services and to deliver them faster and at a lower cost. It encourages agencies to look at best practices from the private sector and to explore lower-cost, self-service options for citizen access and services availability. Advances in technology make these options more accessible than ever.<\/p>\n Read the full Executive Order.<\/a><\/p>\n The Federal Funding Accountability and Transparency Act of 2006 (Public Law 109-282), also known as FFATA, was signed on September 26, 2006. The Act mandates that information on federal expenditures be made searchable and available on a single website (www.USASpending.gov). Transparency is critical as citizens seek more information and accountability, even in times of reduced budgets. The website is maintained by the U.S. Office of Management and Budget (OMB).<\/p>\n Read the full Act.<\/a><\/p>\n The Federal Rules of Civil Procedure (FRCP), updated December 1, 2006, govern the processes that courts follow when hearing civil cases\u2014how a lawsuit may be commenced, what kind of service process is required, how the courts and clerks must function, and more. They do not apply to state court actions, but many states have modeled their guidelines on the FRCP.<\/p>\n Visit the Federal Rules of Civil Procedure website.<\/a>\u00a0Federal Mandate: Agency-wide Section 508 Policy<\/p>\n This Policy mandates equal access to information for people with disabilities. The program encourages establishment of an agency-wide information technology policy and includes accessibility guidelines around policy development, IT governance, training and technical assistance, and more. It also gives agencies suggestions for establishing roles and responsibilities to create effective accessibility programs.<\/p>\n Read the full Policy.<\/a><\/p>\n<\/div>\n This Initiative, issued February 26, 2010, aims to help government agencies formulate consolidation plans for their data centers. Goals include reduced overall energy footprints of government data centers, along with lower costs, increased security, and more efficient computing platforms. Agencies are encouraged to create consolidation plans that include a technical roadmap, existing data center inventory, and attention to best practices from both the public and private sectors.<\/p>\n Read the CIO.gov summary.<\/a><\/p>\n This action plan, released December 9, 2010, aims to help agencies leverage information technology to create more efficient and effective government services and to deliver better value to taxpayers. The plan addresses the most persistent challenges to productivity and efficiency. Some highlights include recommendations to shift to \u201ccloud first\u201d policies within 12 to 18 months, to reduce the number of federal data centers, and to use specialized IT acquisition professionals when funding major IT programs.<\/p>\n Read the full action plan.<\/a><\/p>\n The E-Government Act, enacted December 17, 2002, recognizes that the Internet is changing the way people, businesses, and government agencies interact. It was written to promote the use of Internet-based information technology to enhance citizen access to government information and services and to increase citizen participation. It encourages better organization, improved collaboration, and more focused agency oversight of resource management.<\/p>\n Read the full Act.<\/a><\/p>\n This strategy, announced on February 8, 2011, can help government agencies to provide highly reliable and innovative services quickly, despite resource constraints. One of its major goals is to improve the federal government\u2019s ability to serve the public efficiently. The Federal Cloud Computing Strategy provides specific examples to guide agencies in migrating toward cloud computing, highlights implementation resources, and identifies government roles and responsibilities for cloud adoption.<\/p>\n Read the CIO.gov summary.<\/a><\/p>\n<\/div>\n Department of Defense Directive 5015.2 (DoD 5015.2), issued March 6, 2000, establishes responsibility for the Department of Defense Records Management Program and updates policies for life-cycle management for information records. This program reinforces the Department of Defense policies to create, maintain, and preserve Department of Defense information and to manage records efficiently. It also offers specific guidelines about automated records management for the Department of Defense.<\/p>\n Read the full Directive.<\/a><\/p>\n The Federal Information Processing Standards, also known as FIPS, are developed and issued by the National Institute of Standards and Technology (NIST) for federal computer systems. The authority was granted under the Information Technology Management Reform Act. NIST must develop FIPS (for use government-wide) when there are compelling requirements but no acceptable industry standards or solutions for federal technology issues, such as security, interoperability, or data portability.<\/p>\n See all Federal Information Processing Standards documents.<\/a><\/p>\n This Presidential Memorandum, issued November 28, 2011, aims to reform records management policies and practices. Its goal is to better document executive agency actions, to improve agency performance, and to promote openness and accountability. Proper records management can also help agencies operate more efficiently and cut costs.<\/p>\nFederal Mandate: Common Criteria Evaluation and Validation Scheme for IT Security<\/h4>\n
\n
Federal Mandate: U.S. Government Configuration Baseline Initiative<\/h4>\n
\n
Cost Savings and Services Accountability<\/h3>\n<\/div>\n
Executive Order: Delivering an Efficient, Effective, and Accountable Government<\/h4>\n
\n
Executive Order: Streamlining Service Delivery and Improving Customer Service<\/h4>\n
\n
Federal Mandate: Federal Funding Accountability and Transparency Act of 2006<\/h4>\n
\n
Federal Mandate: Federal Rules of Civil Procedure<\/h4>\n
\n
\n
Technology Reform<\/h3>\n<\/div>\n
Federal Mandate: 2010 Federal Data Center Consolidation Initiative<\/h4>\n
\n
Federal Mandate: 25-Point Implementation Plan to Reform Federal Information Technology Management<\/h4>\n
\n
Federal Mandate: E-Government Act of 2002<\/h4>\n
\n
Federal Mandate: Federal Cloud Computing Strategy<\/h4>\n
\n
Records Management<\/h3>\n<\/div>\n
Federal Mandate: Department of Defense Directive 5015.2 \u2013 Department of Defense Records Management Program<\/h4>\n
\n
Federal Mandate: Federal Information Processing Standards<\/h4>\n
\n
Presidential Memorandum: Managing Government Records<\/h4>\n
\n