Technology and E-Government privacy safeguards for managing sensitive information. A-123, Management This directive specifies the policies and standards for Accountability and Control, as establishing, assessing, correcting, and reporting on revised December 21, 2004 management controls in Federal agencies. A-127, Financial Management This directive prescribes policies and standards for Systems, as revised by executive departments and agencies to follow in Transmittal Memorandum developing, operating, evaluating, and reporting on Number 3, December 1, 2004 financial management systems. A-130, Appendix I, Federal This directive prescribes policy to agencies for the Agency Responsibilities for implementation of the Privacy Act and reporting Maintaining Records About requirements related to the management of personally Individuals identifiable information (PII). A-130, Appendix III, Security This directive stipulates that each agency implement of Federal Automated a comprehensive automated information security Information Resources, as program. The appendix establishes basic managerial and revised by Transmittal procedural controls that shall be included in Federal Memorandum Number 4, automated information systems. November 28, 2000 Appendix B: NIST Defined Security Control Standards IDENTIFIER SECURITY CONTROL STANDARD CLASS AC Access Control Technical AT Awareness and Training Operational AU Audit and Accountability Technical CA Security Assessment and Authorization Management CM Configuration Management Operational CP Contingency Planning Operational IA Identification and Authentication Technical IR Incident Response Operational MA Maintenance Operational MP Media Protection Operational PE Physical and Environmental Protection Operational PL Planning Management PS Personnel Security Operational RA Risk Assessment Management
Technology and E-Government privacy safeguards for managing sensitive information. A-123, Management Accountability and Control, as revised December 21, 2004 This directive specifies the policies and standards for establishing, assessing, correcting, and reporting on management controls in Federal agencies. A-127, Financial Management Systems, as revised by Transmittal Memorandum Number 3, December 1, 2004 This directive prescribes policies and standards for executive departments and agencies to follow in developing, operating, evaluating, and reporting on financial management systems. A-130, Appendix I, Federal Agency Responsibilities for Maintaining Records About Individuals This directive prescribes policy to agencies for the implementation of the Privacy Act and reporting requirements related to the management of personally identifiable information (PII). A-130, Appendix III, Security of Federal Automated Information Resources, as revised by Transmittal Memorandum Number 4, November 28, 2000 This directive stipulates that each agency implement a comprehensive automated information security program. The appendix establishes basic managerial and procedural controls that shall be included in Federal automated information systems. Appendix B: NIST Defined Security Control Standards IDENTIFIER SECURITY CONTROL STANDARD CLASS AC Access Control Technical AT Awareness and Training Operational AU Audit and Accountability Technical CA Security Assessment and Authorization Management CM Configuration Management Operational CP Contingency Planning Operational IA Identification and Authentication Technical IR Incident Response Operational MA Maintenance Operational MP Media Protection Operational PE Physical and Environmental Protection Operational PL Planning Management PS Personnel Security Operational RA Risk Assessment Management
attachment_4_-_departmental_manual_-_part_375_irm_program_management.docx