Security on Digital.gov

IT warning banners: How GSA is working to stop unnecessarily frightening users

Wed, 07 Aug 2024 00:00:00 +0000

OMB Memo M-23-22 discourages the use of pop-ups and modals. GSA IT updated security policies so that IT warning banners are presented less intrusively to users.

FedRAMP governance

Tue, 04 Jun 2024 00:00:00 +0000

The Federal Risk and Authorization Management Program (FedRAMP) has recently updated its governance structure to better serve its customers. Learn about their recently-formed FedRAMP Board, composed of federal executives; the FedRAMP Technical Advisory Group (TAG), composed of technology experts; and updates made to the Federal Security Cloud Advisory Committee (FSCAC). These groups collectively aim to strengthen and expand FedRAMP’s cloud service capabilities.

18F practices in action (spoiler: this stuff works)

Wed, 03 Apr 2024 00:00:00 +0000

How well do 18F software development practices work? The 18F team reflected on a recent project for the Cybersecurity and Infrastructure Security Agency (CISA) .gov registry to gauge the effectiveness of six recommendations aligned with what they actually did.

Social media cyber-vandalism toolkit

Tue, 20 Feb 2024 17:50:00 -0500

Cyber-vandalism presents a serious challenge to online-based communication tools. This resource provides information for agency practitioners to prepare for, recover from, and respond to cyber-vandalism.

Overview of the Privacy Act of 1974 (2020 Edition)

Fri, 02 Feb 2024 16:54:00 -0500

This overview, prepared by the Department of Justice’s Office of Privacy and Civil Liberties (OPCL), covers various provisions of the Privacy Act, as addressed by court decisions in cases involving the Act’s disclosure prohibition, its access and amendment provisions, and its agency record-keeping requirements.

An introduction to web security

Tue, 12 Dec 2023 16:14:00 -0500

Guidance on meeting security requirements for federal websites.

Who is controlling your control system?

Tue, 31 Oct 2023 09:39:00 -0500

Best practices for security administration of control systems and their components. Specific guidance and lessons learned from a federal information system manager.

Navigating the NIST industrial control systems overlay

Wed, 25 Oct 2023 19:35:00 -0500

A quick-start user guide for information technology professionals to begin using overlays as a part of their regular security assessments.

An introduction to ATOs

Wed, 18 Oct 2023 09:39:00 -0500

What is an Authorization to Operate? Before you use software in government, you need to make sure it is allowed. You should know what an ATO is, and when you need one.

The Cybersecurity Battleground: Reflecting on the past, envisioning the future

Wed, 18 Oct 2023 08:43:00 -0500

This month marks the 20th anniversary of Cybersecurity Awareness Month, as well as the beginning of a new government fiscal year. In this Great Government through Technology blog post, Laura Stanton, Assistant Commissioner in the Office of Information Technology Category (ITC) of the Federal Acquisition Service (FAS), takes the opportunity to delve into some recent notable cybersecurity events, the broader implications for government agencies, and her vision as GSA continues to play a pivotal role in positioning agencies to create a safer and more secure digital future.

An introduction to security and privacy controls

Mon, 16 Oct 2023 17:52:00 -0500

What do the control families of NIST 800-53 mean? Here’s an overview of the control families that create the foundation of federal security compliance.

New IDManagement.gov is refreshing the conversation about Zero Trust

Mon, 02 Oct 2023 14:53:00 -0500

IDmanagement.gov has received an update that makes it easier for users to find exactly what they need.

Why the American People Deserve a Digital Government

Fri, 22 Sep 2023 13:26:00 -0500

OMB recently released new policy guidance for government that includes a variety of actions and standards to help federal agencies design, develop, and deliver modern websites and digital services. Memo M-23-22, Delivering a Digital-First Public Experience, will make it seamless for the public to obtain government information and services online, and help agencies fully implement the 21st Century Integrated Digital Experience Act (21st Century IDEA).

GSA Shared Service Provider Program Guide

Wed, 19 Jul 2023 15:15:00 -0500

The newly-released SSP Program Guide was created for commercial vendors interested in becoming a Shared Service Provider.

Digital Autopen Playbook pinpoints how agencies can leverage technology for digital signatures

Tue, 23 May 2023 15:48:00 -0500

The Digital Autopen Playbook is a practical guide to help federal agencies create and use a digital autopen for Federal Register documents.

Judiciary Launches New Federal Ticket Processing Website

Tue, 02 May 2023 10:36:00 -0500

Individuals can now pay tickets for minor federal violations more easily, using a redesigned website for the Judiciary’s Central Violations Bureau. The website, officially launched in early May, leverages new technologies and best design practices to improve usability and accessibility across devices, including smart phones.

The Privileged Identity Playbook Guides Management of Privileged User Accounts

Thu, 10 Nov 2022 10:28:00 -0500

The Privileged Identity Playbook is a practical guide to help federal agencies implement and manage a privileged user management function as part of an overall agency ICAM program.

Cybersecurity Awareness Month

Sat, 08 Oct 2022 11:33:00 -0500

This year, the Federal Cyber Workforce Management and Coordinating Working Group, in partnership with OPM, is hosting an interagency contest to promote and expand awareness of the Cyber Professionals Community on Open Opportunities. This community serves as a central hub to post and participate in cyber career development opportunities. Download their Toolkit (1.29 MB, 21 pages) to learn more about the interagency contest that runs October 3rd to December 2nd.

FedRAMP Launches OSCAL Developer Data Bites Series

Thu, 18 Aug 2022 09:51:00 -0500

Modernize Your Identity Management Process Through ILM

Fri, 12 Aug 2022 08:47:00 -0500

FedRAMP Penetration Test Guidance Updates

Tue, 05 Jul 2022 14:16:00 -0500

C-SCRM Acquisition Community of Practice (ACoP) Interact Site

Thu, 30 Jun 2022 12:10:00 -0500

Technology-boosting TMF Investments Deliver Benefits for the American Public

Mon, 23 May 2022 11:00:00 -0500

The Technology Modernization Fund (TMF) is working to transform the way the government uses technology to deliver for the American public in an equitable, secure and user-friendly way. It strategically invests in priority IT modernization projects that are aligned with the fast pace of changing technology and agency needs. Here are a few examples of how the TMF has invested in multiple projects that are helping many agencies deliver what people need when they need.

Two Years of Federal Student Aid's Virtual Assistant Lead to Lessons Learned and a Clear Vision of the Work Ahead

Mon, 02 May 2022 16:00:00 -0500

Education’s FSA team behind Aidan® shares what they’ve learned over the past two years to help drive improvements and expand the product to a wider range of users.

GSA Highlights Progress on Citizen-Facing Digital Services, Cybersecurity in First Year of American Rescue Plan

Thu, 10 Mar 2022 14:14:00 -0500

summ

GSA’s Fedramp Celebrates 10 Years of Impact on Cloud Security

Wed, 08 Dec 2021 12:59:00 -0500

Unique Vulnerability Counts with Container Scanning

Thu, 02 Dec 2021 17:14:00 -0500

summ

Security is Everyone's Responsibility: Delivering Secure, Usable Login for Government

Tue, 02 Mar 2021 10:28:00 -0500

How login.gov incorporated human centered design and continuous discovery into their product development process to improve the user experience.

The New FedRAMP.gov

Tue, 16 Feb 2021 17:48:00 -0500

The New FedRAMP.gov—FedRAMP is excited to announce the launch of our revamped website. Thanks to feedback from our partners and stakeholders, the website has an improved user experience that makes FedRAMP information and resources more accessible. The website provides more in-depth information about FedRAMP’s authorization process, enabling agencies, Cloud Service Providers (CSPs), and Third-Party Assessment Organizations (3PAOs) to easily access pertinent information related to their role in the FedRAMP Authorization process.

A Dashboard for Privacy Offices

Tue, 15 Dec 2020 00:00:00 -0500

Through work funded by 10x, a team from 18F investigated how technology can help busy privacy offices manage your PII, and make their work more accessible and understandable for the public.

TTS Bug Bounty Program: 3 Year Review

Mon, 14 Dec 2020 10:56:00 -0500

We’re reflecting on our Bug Bounty program for the last 3 years and highlighting some lessons learned.

True Crime Detectives: How We Used Free Web Metrics Tools To Uncover a Cybersecurity Incident

Mon, 26 Oct 2020 00:08:00 -0500

Join USA.gov as we slowly uncover a conspiracy to scam Americans using fake government websites… and then try to foil the caper!

Privacy-Preserving Collaboration Using Cryptography

Tue, 29 Sep 2020 13:53:00 -0500

In conjunction with her May 2020 presentation, Dr. Emily Shen outlines her work on Secure multi-party computation (MPC), a type of cryptography that allows parties to jointly analyze their data without disclosing it.

Mon, 01 Jan 0001 00:00:00 +0000

Digital Dashboard

Mon, 01 Jan 0001 00:00:00 +0000

Measures how U.S. government domains are following best practices for federal websites.

M-19-17 Enabling Mission Delivery through Improved Identity, Credential, and Access Management

Wed, 06 Sep 2023 11:30:00 -0500

This 2019 memorandum sets forth the federal government’s Identity, Credential, and Access Management (ICAM) policy.

Cloud Smart: Federal Cloud Computing Strategy

Mon, 24 Jun 2019 00:00:00 +0000

Founded on three key pillars of successful cloud adoption—security, procurement, and workforce—the Cloud Smart strategy includes 11 action items from the Chief Information Officers (CIO) Council.

Join the Web Managers

Thu, 21 Nov 2013 02:31:00 -0500

Create a better online experience for the public alongside government web content managers.

Cloud.gov

Mon, 01 Jan 0001 00:00:00 +0000

A FedRAMP approved cloud hosting platform that makes it easy for federal agencies to get on the cloud by simplifying procurement, security, and compliance.

FedRAMP

Mon, 01 Jan 0001 00:00:00 +0000

The Federal Risk and Authorization Management (FedRAMP) is a process that authorizes cloud products and services.

Login.gov

Mon, 01 Jan 0001 00:00:00 +0000

An identity management service that provides secure and private online access to participating government programs.

OMB Circular A-130

Mon, 01 Jan 0001 00:00:00 +0000

Managing Information as a Strategic Resource

An introduction to domain management

Tue, 28 Nov 2023 14:38:00 -0500

A .gov domain instantly conveys credibility and trustworthiness, and proper domain management practices ensure that your website is secure and accessible.

Federal Source Code Summit: Towards a Source Code Community

Thu, 08 Oct 2020 08:30:00 -0500

This summit brings together the federal community to share success stories and best practices for utilizing federal source code and open source software, and examine the implementation of the Federal Source Code policy.

10x Project Lightning Talks: 2020

Tue, 30 Jun 2020 14:00:00 -0500

10x project teams will demonstrate their work to date and provide brief overviews of each project. We hope that these talks will highlight some of the most interesting work happening in government today and inspire others to submit ideas to 10x.

Making .gov More Secure by Default

Mon, 22 Jun 2020 15:00:00 -0500

The DotGov Program announces its intent to preload the .gov top-level domain in order to protect .gov site visitors.

Building for the 21st-Century Web with Federalist

Tue, 16 Jun 2020 15:00:00 -0500

Building, deploying, and hosting fast, secure, and compliant federal web sites and applications with Federalist.

Making Critical Government Information More Resilient

Thu, 04 Jun 2020 11:00:00 -0500

Dr. Emily Shen on Secure Multi-Party Computation

Tue, 05 May 2020 15:00:00 -0500

Learn how organizations can securely collaborate using cryptographic technologies.

Login.gov has surpassed 20 million registered users

Wed, 22 Jan 2020 23:00:00 -0500

This week, Login.gov has surpassed 20 million registered users! Congratulations to the team for hitting this milestone while keeping the product simple and secure for the public.

Federal Crowdsourcing Webinar Series, Episode 6: The FedRAMP Ideation

Wed, 30 Oct 2019 15:00:00 -0500

Betsy Steele, of the Federal Risk and Authorization Management Program (FedRAMP) team, shares how a crowdsourcing initiative invited the larger cybersecurity community to help inform the next iteration of government’s cloud security authorization program.

How to Prevent Security Certificates From Expiring During a Lapse in Operations

Thu, 07 Feb 2019 11:30:00 -0400

These are the steps that people in government can take to avoid having security certificates expire during a lapse in operations.

GSA Steps Up Security for .gov

Mon, 29 Oct 2018 15:00:00 -0500

GSA’s DotGov Program is modernizing the security of .gov to make government websites and systems more secure.

Conversations on Public Impact: How data trusts can preserve and protect your digital initiatives

Wed, 21 Mar 2018 15:00:00 -0500

The Ethics Working Group in GSA’s Technology Transformation Service hosts a presentation about data trusts; a legal structure designed to manage data, code, and other digital assets.

A Conversation With ITIF About the State of Federal Government Websites

Wed, 20 Sep 2017 11:00:00 -0400

Since it’s been nearly six months since their report was released, we wanted to check in with ITIF and see what they’ve learned, what they’ve heard from agencies and what their future plans are to build on this research.

The Data Briefing: How Blockchain’s Future Growth Will Affect Federal Agencies

Wed, 13 Sep 2017 09:01:00 -0400

Blockchains are an innovative technology which promises to radically change how society conducts business. It will take significant changes in organizational processes before agencies can begin to support blockchains.

Government Launches Login.Gov to Simplify Access to Public Services

Mon, 28 Aug 2017 09:04:54 -0400

Joel Minton, a member of the U.S. Digital Service, is working with GSA’s Technology Transformation Service as the director of login.gov. Tom Mills is the Chief Technology Architect at U.S. Customs and Border Protection. In early April, the U.S. Digital Service and 18F launched login.gov, a single sign-on solution for government websites that will enable

NIST Publishes NICE Cybersecurity Workforce Framework

Tue, 22 Aug 2017 12:00:51 -0400

Categorizing and Describing Cybersecurity Work for the Nation The National Initiative for Cybersecurity Education (NICE) is pleased to announce the release of Special Publication 800-181, the NICE Cybersecurity Workforce Framework. This publication serves as a fundamental reference to support a workforce capable of meeting an organization’s cybersecurity needs. It provides organizations with a common, consistent

NIST Crafts Next-Generation Safeguards for Information Systems and the Internet of Things

Tue, 22 Aug 2017 02:00:13 -0400

Information systems—from communications platforms to internet-connected devices—require both security and privacy safeguards to work successfully and protect users in our increasingly complex and interconnected world. Toward these ends, the National Institute of Standards and Technology (NIST) has issued a new draft revision of its widely used Special Publication (SP) 800-53, Security and Privacy Controls for Information

The Cutting EDGE: New Virtual Training Prepares First Responders for Active Shooter Incidents

Thu, 03 Aug 2017 12:14:24 -0400

Amidst the chaos of an active shooter event, preparedness is key to a seamless, swift and effective response—and a new video game funded by the Department of Homeland Security (DHS) Science and Technology Directorate and the U.S. Army Research Laboratory just might do the trick.

‘Cybersecuring’ the Internet of Things

Thu, 29 Jun 2017 02:00:47 -0400

I recently had the chance to talk with the legendary Vint Cerf, one of the founding fathers of the internet. We had a wide-ranging discussion about the past, present and future of the internet, network security and what it would take to successfully, safely and reliably merge the digital and physical worlds, a concept known

FedRAMP 5th Anniversary

Tue, 13 Jun 2017 14:10:23 -0400

This week we are excited to celebrate FedRAMP’s fifth birthday! The program has come a long way over the past five years, as we have been able to grow and transform the program to continue to meet the evolving needs of our partners .

FICAM’s New Resources Help Solve Government’s Identity Management Challenge

Mon, 12 Jun 2017 10:11:06 -0400

In today’s digital world, it’s imperative that government agencies safeguard citizens’ physical and electronic security. In the world of Federal IT, adopting and advancing cybersecurity can’t be accomplished in one day, or by one agency. Federal agencies must work together to tackle complex problems and stay ahead of evolving network threats. The Federal Identity, Credential,

Hybrid Cloud: A Key to Phasing in New Technologies

Thu, 08 Jun 2017 11:00:38 -0400

Like any newer technology, cloud computing has faced adoption challenges. IT managers understand the huge potential efficiency improvements and savings that cloud computing can bring to their agencies, but also have questions about security, compatibility, and funding. With these concerns and without a clear path to cloud computing, many agencies continue to maintain on-premises solutions.

Federalist Is out of Beta and Open for Business

Mon, 05 Jun 2017 11:00:17 -0400

If you’re a program manager or a federal web developer you’ve probably been given a seemingly simple task: Create a basic website as part of a new initiative at your agency. The hardest part is often not crafting the content or designing the prototype, but getting the security and privacy compliance in order to launch

From Launch to Landing: How NASA Took Control of Its HTTPS Mission

Fri, 26 May 2017 12:00:50 -0400

18F Editor’s note: This is a guest post by Karim Said of NASA. Karim was instrumental in NASA’s successful HTTPS and HSTS migration, and we’re happy to help Karim share the lessons NASA learned from that process. In 2015, the White House Office of Management and Budget released M-15-13, a “Policy to Require Secure Connections

The Next Step Towards a Bug Bounty Program for the Technology Transformation Service

Thu, 18 May 2017 02:00:07 -0400

We took a big step toward creating a bug bounty program for our agency by issuing an award to HackerOne for a Software-as-a-Service bug-reporting platform.

Cybersecurity: Protecting Manufacturing Technology and Innovation

Thu, 04 May 2017 15:00:45 -0400

Recently a segment on my favorite morning news program stopped me in my tracks. The young and attractive hosts (why are they always so young and attractive?) were demonstrating new appliances including a smart refrigerator. The fridge was equipped with all kinds of high-tech features including touch screen displays, a camera inside that allows you

DHS Study on Mobile Device Security

Thu, 04 May 2017 12:00:43 -0400

The Department of Homeland Security (DHS) has submitted a report to Congress that details current and emerging threats to the Federal government’s use of mobile devices and recommends security improvements to the mobile device ecosystem. The DHS Science and Technology Directorate (S&T) led the study in coordination with the National Institute of Standards and Technology

DotGov Domain Registration Program to Provide HTTPS Preloading in May

Wed, 12 Apr 2017 14:19:47 -0400

Effective May 15, 2017, GSA’s DotGov Domain Registration Program will begin providing HSTS Preloading services for federal agencies. This new service helps ensure that visitor communication with .gov websites is not modified or compromised, and hostile networks cannot inject malware, tracking beacons, or otherwise monitor or change visitor interactions online.

To Get Things Done, You Need Great, Secure Tools

Tue, 11 Apr 2017 11:00:12 -0400

To folks new to government, one of the most surprising differences between our work and work in the private sector are the barriers in accessing commercially available software, and commercially available Software-as-a-Service (SaaS) in particular. There are good reasons for these barriers: the government places premiums on considerations such as security, privacy, accessibility, license management,

New ITIF Report Inspires a Closer Look at Website Performance and Security—Here Is Where to Begin

Fri, 24 Mar 2017 11:02:04 -0400

The Information Technology & Innovation Foundation (ITIF) recently published a report, Benchmarking U.S. Government Websites, that looks at the performance, security, and accessibility of the top 297 government websites.

Automatic HTTPS Enforcement for New Executive Branch .gov Domains

Thu, 19 Jan 2017 12:00:30 -0400

HTTPS is a necessary baseline for security on the modern web. Non-secure HTTP connections lack integrity protection, and can be used to attack citizens, foreign nationals, and government staff. HTTPS provides increased confidentiality, authenticity, and integrity that mitigate these attacks.

Laying the Foundation for a More Secure, Modern Government

Fri, 28 Oct 2016 03:00:16 -0400

Summary: Building on efforts to boost Federal cybersecurity & as part of National Cybersecurity Awareness Month, today we’re releasing a proposed guidance to modernize Federal IT. America’s spirit of ingenuity and entrepreneurship created the world’s most innovative economy and keeps us dominant in today’s digital age. Indeed, in 1985 about 2,000 people used the Internet;

The Data Briefing: Help Predict the Future of Federal Government Data

Wed, 26 Oct 2016 13:00:55 -0400

In December, I plan to write two postings detailing a scenario analysis for the next ten years of the Federal government’s data technologies. Governments are on the cusp of amazing technological advances propelled by artificial intelligence, blockchain technologies, and the Internet of Things. Also, governments will face new challenges such as the recent global cyber

Federal Cybersecurity Challenges

Tue, 25 Oct 2016 10:00:09 -0400

These days, when you turn on the news you almost always see another hack, leak, or breach putting sensitive information at risk. But we’ve been focusing on keeping federal agency information systems secure for a long time. For October’s Cybersecurity Awareness Month, the WatchBlog takes a look at federal cybersecurity challenges. What is the threat?

Further Enhancing the Federal Government’s Privacy Practices

Fri, 30 Sep 2016 11:30:06 -0400

Summary: The Office of Management and Budget is releasing updated guidance on the role and designation of Senior Agency Officials for Privacy. The digital economy has transformed how citizens interact with their Government. Government services related to immigration, student loans, health insurance, and veterans’ benefits are just a sample of the services now available online.

Vendors and Government Strengthen Partnership at Technology Industry Day

Fri, 30 Sep 2016 10:00:02 -0400

On September 8, 2016, the General Services Administration (GSA) held a Technology Industry Day. We’re thrilled that more than 300 members of the technology industry in person and via the live stream were able to join us for this first step towards a closer partnership and more open lines of communication about how we can work together to transform federal technology.

GSA Hosts First-Ever Technology Industry Day in Washington, D.C.

Mon, 26 Sep 2016 10:00:53 -0400

On September 8, 2016 Administrator Denise Turner Roth of the U.S. General Services Administration (GSA) hosted the first-ever Technology Industry Day to provide a better understanding of GSA’s path to improve the government’s outdated technology systems. Private industry and government came together to find best ways to deliver 21st century technology to federal agencies.

No Longer an Idea of the Future, Artificial Intelligence Is Here and You Are Probably Already Using It

Thu, 15 Sep 2016 11:00:12 -0400

It might surprise some of you to know that artificial intelligence (AI) is already in use and a routine part of our daily lives, but we leverage this technology when we use our smartphones or other devices to ask Apple’s Siri, Microsoft’s Cortana, Google Now, or Amazon’s Alexa a question to get the facts or data we

DNSSEC vs. Elastic Load Balancers: the Zone Apex Problem

Mon, 12 Sep 2016 13:00:09 -0400

This is the final post in the 5-part series, The Right Tools for the Job: Re-Hosting DigitalGov Search to a Dynamic Infrastructure Environment. Federal websites are required to implement DNSSEC, which relies on knowing exactly what server is responding to a request. In Amazon Web Services (AWS), the problem of unreliable servers is solved by

Sign up for the Technology Industry Day

Wed, 31 Aug 2016 13:00:45 -0400

On September 8, 2016, the General Services Administration (GSA) is hosting its very first Technology Industry Day. Sign up to hear about how GSA is transforming technology in the federal government, see demos of products and solutions developed by technologists and, last but not least, provide feedback on how we can work better with industry.

Trends on Tuesday: Signs of the App-ocalypse

Tue, 16 Aug 2016 13:00:03 -0400

A new report from the Mobile Ecosystem Forum shows that most users delete apps because of security concerns. The report also said that 47% of survey respondents would pay extra for an app that didn’t share personal information and that the inability to find a privacy policy is one of the leading reasons for consumers losing trust

Managing Federal Information as a Strategic Resource

Wed, 27 Jul 2016 15:00:01 -0400

Summary: Today, OMB is releasing an update to Circular A-130, the Federal Government’s governing document for the management of Federal information resources. Today the Office of Management and Budget (OMB) is releasing an update to the Federal Government’s governing document for the management of Federal information resources: Circular A-130, Managing Information as a Strategic Resource.

Enhancing our Nation’s Cybersecurity

Thu, 14 Jul 2016 14:00:04 -0400

The mission of U.S. General Services Administration (GSA)’s Integrated Technology Services (ITS) is to deliver best value technology solutions to the government and the American people, and one of the most critically important capabilities that our nation currently needs is strengthened cybersecurity. We have been working with numerous other federal agencies to ensure that the

Trends on Tuesday: Adoption for Pokémon Go Mobile App Surges

Tue, 12 Jul 2016 10:00:37 -0400

Augmented Reality games have existed for years, but have mostly failed to catch a mainstream audience; Pokémon Go just changed all that this weekend. The game that launched early this month has exploded in popularity and is close to surpassing Twitter in daily active

The Data Briefing: I, For One, Welcome Our New Chatbot Blockchain Digital Autonomous Organizations

Wed, 06 Jul 2016 11:00:56 -0400

It is at the intersections of fields where you find the most fascinating and innovative concepts. Recently, a conference on “Open Human Resources and the Cognitive Era” explored the use of chatbots and blockchain technologies in human resources. Human Resources (HR) is quietly undergoing a revolution as many HR practitioners are transforming HR by using

Trends on Tuesday: Key Trends for Government from Mary Meeker’s 2016 Internet Trends

Tue, 21 Jun 2016 12:00:54 -0400

Internet strategist Mary Meeker delivered her 2016 Internet Trends report this month, and there are several key takeaways for government agencies to consider and continue tracking as our connected world continues to evolve: Mobile phone adoption and Internet growth is meeting saturation. Incremental global growth will continue (especially in India, which she called out for

Why Switching to HTTPS Will Make Your Analytics Better

Mon, 06 Jun 2016 11:00:14 -0400

Federal agencies are required to make all federal websites accessible through a secure, HTTPS-only connection by the end of the 2016 calendar year. What you might not have known is that the switch to HTTPS will improve your ability to track which sites are directing web traffic to yours. Recently, a federal colleague reached out

Open Police Data Re-identification Risks

Tue, 17 May 2016 10:00:43 -0400

Last week I spoke at a White House event, “Opportunities & Challenges: Open Police Data and Ensuring the Safety and Security of Victims of Intimate Partner Violence and Sexual Assault.” This event brought together representatives from government agencies, police departments, and advocacy groups to discuss the potential safety and privacy impact of open police data

Making Your Agency Apps Secure

Thu, 21 Jan 2016 13:21:09 -0400

Security and privacy are part of the six Mobile User Experience Guidelines developed by the MobileGov Community of Practice.

Trends on Tuesday: 10 Mobile, Government and Tech Trends for 2016

Tue, 12 Jan 2016 11:00:37 -0400

As we move into 2016, here are 10 trends I foresee flourishing around mobile, technology and government: The mobile-majority tipping point in government. Many agencies are already past this point, but as a whole, government websites are still desktop-majority, with 66% of people accessing federal websites via desktop and 34% on mobile. In 2016, the double-digit mobile

DigitalGov's 2015 Year in Review

Thu, 31 Dec 2015 11:00:26 -0400

As we look ahead to 2016, we wanted to take a minute to look at our most popular content in 2015 and reflect on our second year. This was a big year for DigitalGov as we saw our session traffic nearly double and our weekly and daily email subscribers increase by 15%.

OCSIT’s 2015 Customer Survey—What We Learned

Mon, 28 Dec 2015 10:00:13 -0400

Three years ago, GSA’s Office of Citizen Services and Innovative Technologies (OCSIT) set out to design a system to consistently measure customer satisfaction across our office. We were inspired by the Digital Government Strategy, which tasks agencies to adopt a customer-centric approach to service delivery.

The Content Corner: The Balance Between SEO and the User

Mon, 30 Nov 2015 10:00:16 -0400

I always think of SEO like the dentist—no one really likes it, but you need to do it. Yet, despite my lack of excitement for the topic, this will be at a minimum my second post (here’s the first) about the relationship between creating good content and SEO practices. Today I want to dive a little

Federal Information Security Management Act of 2002 – Presentation to the 2003 FISSEA Conference

Mon, 23 Nov 2015 04:31:09 -0400

The head of the agency delegates to the CIO a number of information security responsibilities. The CIO in turn designates a senior agency information security officer.

HTTPS and Other Ranking Factors: What Impacts the SEO of Government Websites?

Wed, 02 Sep 2015 10:00:43 -0400

Following the recent OMB memo that all publicly available federal websites and Web services must implement HTTPS by December 31, 2016, Web content managers across government are considering the SEO (search engine optimization) implications of the transition, among other details.

DigitalGov Summit Recap: Building Privacy & Identity Management in the Open

Fri, 28 Aug 2015 10:00:32 -0400

How can government protect citizens while delivering the services they demand in the modern age? This was a theme of the panel discussion on privacy and identity management at the 2015 DigitalGov Citizen Services Summit.

Secure Central Hosting for the Digital Analytics Program

Fri, 14 Aug 2015 13:00:48 -0400

The U.S. government’s Digital Analytics Program (DAP) collects Web traffic and analytics data from across the federal government.

Help Us Add Resources to the Updated Mobile User Experience Guidelines!

Fri, 31 Jul 2015 13:10:20 -0400

Government agencies need to make sure their mobile websites and native apps don’t become one of the estimated billions of applications that end up in the app graveyard. The need for digital products to work better is not new in the federal government. Resources like the Digital Playbook and Public Participation Playbook have had impact

HTTPS For All

Mon, 15 Jun 2015 10:00:32 -0400

With the release of a new dashboard to measure best Web practices in the federal government and the establishment of a government-wide HTTPS Only Standard, the time to make the switch to HTTPS has arrived. Agencies have until December 31, 2016, to make the switch. The move to HTTPS is not only happening in government;

Taking the Pulse of the Federal Government's Web Presence

Wed, 03 Jun 2015 13:10:57 -0400

The U.S. federal government is launching a new project to monitor how it’s doing at best practices on the Web.

Sharing Social Media Strategies: The National Strategy for Trusted Identities in Cyberspace Program Office

Fri, 03 Apr 2015 10:00:10 -0400

Creating a tweet, posting a photo, or updating a status may take mere seconds. However, a well-thought-out social media strategy is needed for long-term success. In fact, the recently released U.S. Public Participation Playbook mentions strategy in its very first play: clearly define and communicate your objectives. Knowing what you hope to accomplish and how

HTTP vs HTTPS: Is it Time For a Change?

Wed, 25 Mar 2015 10:00:43 -0400

Data. Security. Privacy. These are the cornerstones of many discussions concerning technology. The security of citizen information when interacting with the federal government will be increasingly important as we progress into the future. A few agencies have begun to use Hyper Text Transfer Protocol Secure (HTTPS) in lieu of the standard HTTP. For these agencies,

DigitalGov Monthly Theme: How Data and Code Improve Government Services

Tue, 10 Mar 2015 11:43:05 -0400

Data and code are the foundation, building blocks, and cornerstone of government digital services. They are the keys that open the door to a better digital government future and are fundamental in making government more open.

Enabling Trusted Digital Interactions Between People & Government

Fri, 06 Mar 2015 10:00:01 -0400

Connect.Gov is a service that helps reduce agency investment and enables a secure, trusted, and inter-operable method for digital interactions between people and government.

The API Briefing: Practicing Safe App Development with Secure Federal APIs

Wed, 04 Mar 2015 12:10:13 -0400

When browsing the various APIs offered by the federal government, you may have noticed that developers need to sign up for an API key. You may have also noticed that the documentation tells app developers to access the API using specified methods. Along with these two requirements, federal API creators

The Internet of Everything & Small Business Opportunities

Thu, 26 Feb 2015 10:00:53 -0400

In 1995, the World Wide Web, which had been fairly niche up until then, attracted mainstream attention. What followed were 20 years of business and social innovations in how we humans chose to use the web at work, school, at home, and with our friends. The web and its “Web 2.0” successor allowed us to

Social Media Cyber-Vandalism Toolkit

Tue, 27 Jan 2015 01:09:20 -0400

Cyber-vandalism presents a serious challenge to online-based communication tools. This document provides guidance and security practices to federal, state, and local government employees. Suggestions and resources prepare users to respond to cyber-hijacking.

Trends on Tuesday: Half of Online Americans Don’t Know What a Privacy Policy Is

Tue, 23 Dec 2014 09:00:17 -0400

Federal agencies are required by law to use privacy policies on their digital properties that explain how they use the data they collect about users and visitors. This ensures that these users and visitors know what the government is doing with their data.

Beware the Cyber Security House of Horrors!

Thu, 30 Oct 2014 04:29:46 -0400

Ghosts. Ghouls. Zombies. Multi-stakeholder content audits. This Halloween there is no shortage of terrors lurking to keep federal Web managers up all night, and our work is largely done in one of the scariest domains of all: cyberspace. Every moment of every day, a vast system of computers and networks are actively working to support

State CIO Top Ten Policy and Technology Priorities for 2014

Fri, 22 Nov 2013 11:36:14 -0400

Security, consolidation, cloud services and enterprise portfolio management top the list of critical state CIO priorities in 2014, according to state information technology leaders surveyed by the National Association of State Chief Information Officers (NASCIO). The prioritized rankings of strategies and technologies reflect voting by state CIOs and are

Cloud Computing in the Federal Government

Thu, 17 Oct 2013 13:27:51 -0400

Cloud Computing enables convenient, on-demand access to, and rapid deployment of, shared computing resources such as networks, servers, storage, applications, and services. Plan What is the Cloud? Is Cloud Computing for you? What types of services does Cloud Computing support? Types of Cloud environments Implement Learn steps to acquire, manage, and secure your agency

Mobile Product Security and Privacy Testing Resources

Mon, 05 Aug 2013 15:01:32 -0400

Security testing is used to ensure that a mobile product does not pose a threat to agency IT systems and databases. In addition, privacy testing ensures that an app does not put the user’s personally identifiable information into a compromisable position. This article was developed as part of the Mobile Application Development Program. See our

API Security

Mon, 29 Jul 2013 01:12:58 -0400

Like website development, API security revolves around three stages—planning the API, testing the API, and monitoring the API after it has launched. The planning stage requires those involved to conceptually map several design decisions and the impact that they will have on security. The second stage applies your agency’s security program to the API release

Twitter’s Two Step Verification Process

Fri, 31 May 2013 11:16:45 -0400

To enhance security, Twitter now offers two-step verification. The release of the new feature follows several high-profile account breaches – including a false tweet sent from the Associated Press’s Twitter account in April. If you chose to enable the two-step verification feature, Twitter sends a text message with a unique code to a cell phone that must be

Government Must Respond Rapidly to Social Media Hacking

Thu, 25 Apr 2013 13:25:31 -0400

The hacking of an Associated Press news account on Twitter this week, and its fallout, underscored the need for agencies

Mon, 01 Jan 0001 00:00:00 +0000

CISA works with partners to defend against today’s threats and collaborate to build a more secure and resilient infrastructure for the future.

Mon, 01 Jan 0001 00:00:00 +0000

The mission of the Department of Homeland Security is to secure the nation from the many threats we face.

Mon, 01 Jan 0001 00:00:00 +0000

The Federal Risk and Authorization Management Program (FedRAMP) promotes the adoption of secure cloud services across the federal government by providing a standardized approach to security and risk assessment for cloud technologies and federal agencies.