Government-wide Responsibilities

Department of Commerce

The Secretary of Commerce shall:

Develop and issue Federal Information Processing Standards (FIPS) and guidelines necessary to ensure the efficient and effective acquisition, management, security, and use of information technology, while taking into consideration the recommendations of the agencies and the CIO Council;
Provide OMB and the agencies with scientific and technical advisory services relating to the development and use of information technology;
Conduct studies and evaluations concerning telecommunications technology, and the improvement, expansion, testing, operation, and use of Federal telecommunications systems, and advise the Director of OMB and appropriate agencies of the recommendations that result from such studies;
Develop, in consultation with the Secretary of State and the Director of OMB, plans, policies, and programs relating to international telecommunications issues affecting Federal information activities;
Identify needs for standardization of telecommunications and information processing technology, and develop standards, in consultation with the Secretary of Defense and the Administrator of General Services, to ensure efficient application of such technology; and
Ensure the Federal Government is represented in the development of national and international (in consultation with the Secretary of State) information technology standards, and advise the Director of OMB on such activities.
Department of Defense

The Secretary of Defense shall develop, in consultation with the Administrator of General Services, uniform Federal telecommunications standards and guidelines to ensure national security, emergency preparedness, and continuity of government.

Department of Homeland Security

The Secretary of Homeland Security shall:

Monitor and assist agencies with the implementation of information security policies and practices for information systems;
Assist OMB in carrying out its information security oversight and policy responsibilities;
Develop and oversee the implementation of binding operational directives that reinforce the policies, principles, standards, and guidelines developed by OMB, that focus on:
1. Requirements for the mitigation of exigent risks to information systems;
2. Requirements for reporting incidents to the Federal information security incident center; and
3. Other operational requirements, as deemed necessary by OMB;
Coordinate the development of binding operational directives and the oversight of the implementation of such directives with OMB and NIST to ensure consistency with OMB policies and NIST standards and guidelines;
Consult with the Director of NIST regarding any binding operational directives that implement or affect the standards and guidelines developed by NIST;
Convene meetings with senior agency officials to help ensure effective implementation of information security policies and procedures;
Coordinate government-wide efforts on information security policies and practices, including consultation with the CIO Council and NIST;
Manage government-wide information security programs and provide and operate Federal information security shared services, as directed by OMB;
Provide operational and technical assistance to agencies in implementing policies, principles, standards, and guidelines on information security. This includes:
1. Operating the Federal information security incident center;
2. Deploying technology to assist agencies to continuously diagnose and mitigate cyber threats and vulnerabilities, with or without reimbursement and at the request of the agency;
3. Compiling and analyzing data on agency information security; and
4. Developing and conducting targeted operational evaluations, including threat and vulnerability assessments, on information systems.
Provide agencies with intelligence about cyber threats, vulnerabilities, and incidents for risk assessments;
Consult with OMB to determine what other actions may be necessary to support implementation of effective government-wide information security programs;
Provide the public with timely notice and opportunities for comment on proposed information security directives and procedures to the extent that such directives and procedures affect the public or communication with the public; and
Solicit and consider the recommendations of the Information Security Privacy Advisory Board, established by the National Institute of Standards and Technology Act.
Department of State

The Secretary of State shall:

Consult with and advise the Director of OMB on the development of United States positions and policies on international information policy and technology issues affecting Federal Government activities and the development of international information technology standards; and
Be responsible for liaison, consultation, and negotiation with foreign governments and intergovernmental organizations on all matters related to information resources management, including Federal information technology. The Secretary must also ensure, in consultation with the Secretary of Commerce, that the United States is represented in the development of international standards and recommendations affecting information technology. These responsibilities may also require the Secretary to consult, as appropriate, with affected domestic agencies, organizations, and other members of the public.
Federal CIO Council

The Federal CIO Council, in consultation with OPM, shall:

Analyze on an ongoing basis, the workforce needs of the Federal Government related to information technology and information resources management, in conjunction with relevant agencies;
Identify where current information technology and information resources management training does not satisfy the needs of the Federal Government related to information technology;
Oversee the development of curricula, training methods, and training priorities that correspond to the projected personnel needs related to information technology and information resources management; and
Assess the training of employees in information technology disciplines in order to ensure that information resources management needs are addressed; and
Recommend new policy, as appropriate.
General Services Administration

The Administrator of General Services shall:

Manage a single government-wide network contract per offeror that leverages shared solutions for many agencies;
Serve as an intermediary of managed network services for the agencies;
Manage the Acquisition Services Fund in accordance with the General Services Administration Modernization Act;
Provide policy leadership for improvements to the bid protest process;
Assist OMB in setting strategic direction for electronic government and overseeing government-wide implementation, and recommend changes relating to government-wide strategies and priorities;
Promote innovative uses of information technology by agencies, particularly initiatives involving multiagency collaboration, through support of pilot projects, research, experimentation, and the use of innovative technologies;
Provide support and assistance to the CIO Council; and
Provide leadership and continued policy development to implement section 508 of the Americans with Disabilities Act.
National Archives and Records Administration

The Archivist of the United States shall:

Administer the Federal Records Act and National Archives and Records Administration regulations (36 CFR Subchapter B—Records Management);
Develop standards and guidelines relating to electronic records management in consultation with OMB;
Work with agencies to ensure the transfer of permanent Federal electronic records to the National Archives of the United States in digital or electronic form to the greatest extent possible; and
Ensure agency compliance with records management requirements, provide records management training, and facilitate public access to high-value government records.