This attachment expands on the interconnection material in PD 4300A and that in the 4300A HB, and provides: A summary of the four interconnection phases defined in NIST SP 800-47: planning, establishing, maintaining an interconnection, and disconnecting More detail on ISA content A summary of two related documents defined in NIST SP 800-47: a Memorandum of Understanding or Agreement (MOU or MOA) and a System Interconnection Implementation Plan (SIIP). Attachment N to the applies to all DHS Components. DHS 4300A Sensitive Systems Handbook Federal Laws Federal Information Security Management Act of 2002, 44 USC 3541 et seq., enacted as Title III of the Government Act of 2002, Pub L 107-347, 116 Stat 2899 Office of Management and Budget (OMB) Memorandums OMB Memorandum M-11-33, 2011 Reporting Instructions for the Federal Information Security “FY Management Act and Agency Privacy Management, Office of Management and Budget, M-11-33, September 14, 2011. Department of Homeland Security Publications June 2012 DHS Sensitive Systems Policy Directive 4300A, June 2012 DHS 4300A Sensitive Systems Handbook, Attachment D to the June 2012 DHS 4300A Sensitive Systems Handbook, “Type Accreditation,” and Attachment F to the June 2012 DHS 4300A Sensitive Systems Handbook, “Incident Response Reporting,” Attachment O to the June 2012 DHS 4300A Sensitive Systems Handbook, “Vulnerability Assessment Program,” National Institute of Standards and Technology (NIST) Special Publications (SP) NIST SP 800-47, for Interconnecting Information Technology August 2002 “Security Guide Systems,” NIST SP 800-53, Security Controls for Federal Information Systems and Rev 3, “Recommended August 2009, with updated errata May Organizations,” 01, 2010” The applicable network connectivity policy statements are located in Section 5.4.3, Security of the DHS Sensitive Systems Policy Directive 4300A. “Interconnection Agreements,” NIST SP 800-47 defines ISA development as just one in a sequence of coordination, planning, costing, and technical steps that are prerequisites for establishing and maintaining an operational
This attachment expands on the interconnection material in PD 4300A and that in the 4300A HB, and provides: A summary of the four interconnection phases defined in NIST SP 800-47: planning, establishing, maintaining an interconnection, and disconnecting More detail on ISA content A summary of two related documents defined in NIST SP 800-47: a Memorandum of Understanding or Agreement (MOU or MOA) and a System Interconnection Implementation Plan (SIIP). Attachment N to the DHS 4300A Sensitive Systems Handbook applies to all DHS Components. Federal Laws Federal Information Security Management Act of 2002, 44 USC 3541 et seq., enacted as Title III of the Act of 2002, Pub L 107-347, 116 Stat 2899 Office of Management and Budget (OMB) Memorandums OMB Memorandum M-11-33, “FY 2011 Reporting Instructions for the Federal Information Security Management Act and Agency Privacy Management, Office of Management and Budget, M-11-33, September 14, 2011. Department of Homeland Security Publications DHS Sensitive Systems Policy Directive 4300A, June 2012 DHS 4300A Sensitive Systems Handbook, June 2012 “Type Accreditation,” Attachment D to the DHS 4300A Sensitive Systems Handbook, June 2012 “Incident Response and Reporting,” Attachment F to the DHS 4300A Sensitive Systems Handbook, June 2012 “Vulnerability Assessment Program,” Attachment O to the DHS 4300A Sensitive Systems Handbook, June 2012 National Institute of Standards and Technology (NIST) Special Publications (SP) NIST SP 800-47, “Security Guide for Interconnecting Information Technology Systems,” August 2002 NIST SP 800-53, Rev 3, “Recommended Security Controls for Federal Information Systems and Organizations,” August 2009, with updated errata May 01, 2010” The applicable network connectivity policy statements are located in Section 5.4.3, “Interconnection Security Agreements,” of the DHS Sensitive Systems Policy Directive 4300A. NIST SP 800-47 defines ISA development as just one in a sequence of coordination, planning, costing, and technical steps that are prerequisites for establishing and maintaining an operational Government
4300A-Handbook-Attachment-N-Interconnection-Security-Agreements_0.docx