OMB readies more security guidance

Defense Authorization Act

The Office of Management and Budget is planning to release more specific guidance on what agencies should include in their reports under the Government Information Security Reform Act.

Enacted in October as part of the 2001 Defense Authorization Act, GISRA outlines the information security management requirements for agencies, including an annual self-assessment and an independent assessment by each agency's inspector general.

Under GISRA, agencies must use these assessments to improve their security programs and practices. Reports on the assessments must also be turned over to OMB, which will then provide a summary report for Congress.

OMB issued its first guidance in January, outlining the roles of officials within agencies and suggesting that program officers and IGs coordinate their assessments to avoid duplication of effort and to ensure consistency.

The new guidance will provide more details about what agencies and IGs need to include in their reports to OMB, said Glenn Schlarman, a security policy analyst at OMB's Office of Information and Regulatory Affairs.

The guidance probably will direct program officials and IGs to providea two- to three-page executive summary because OMB will be going through more than 40 reports to summarize for Congress, and "we're going to be very busy," Schlarman said.

Featured

  • Defense
    Essye Miller, Director at Defense Information Management, speaks during the Breaking the Gender Barrier panel at the Air Space, Cyber Conference in National Harbor, Md., Sept. 19, 2017. (U.S. Air Force photo/Staff Sgt. Chad Trujillo)

    Essye Miller: The exit interview

    Essye Miller, DOD's outgoing principal deputy CIO, talks about COVID, the state of the tech workforce and the hard conversations DOD has to have to prepare personnel for the future.

  • innovation (Sergey Nivens/Shutterstock.com)

    VA embraces procurement challenges at scale

    Steve Kelman applauds the Department of Veterans Affairs' ambitious attempt to move beyond one-off prize-based contests to combat veteran suicides more effectively.

Stay Connected

FCW INSIDER

Sign up for our newsletter.

I agree to this site's Privacy Policy.