Seeking Security: The New Paradigm for Government Agencies

It is often difficult for IT professionals to differentiate de facto responsibility from de jour responsibility for agency programs, policies, and security issues. Provided are the legal authorities and responsibilities applicable to government IT professionals, given the frequent inability to identify jurisdictional or authoritative basis. This document serves as a roadmap by using the U. S. Federal Government Agency IT community as an example of how to overcome bureaucratic inertia. This guide is divided into five comprehensive activities to be used by 'Any-Agency' IT operations personnel to begin to eliminate the security vulnerabilities associated with IT assets.