Data Safeguarding Self-Assessments Due in Less Than Two Days (and snow delays probably won’t cut it as an excuse)

Review teams consisting of counterintelligence, security and information-assurance experts at each of the relevant agencies have until January 28th to submit their self-assessments. A January 3rd Office of Management and Budget (OMB) memo poses a number of questions the review teams should answer, including:

• Assess what your agency has done or plans to do to address any perceived vulnerabilities, weaknesses, or gaps on automated systems in the post-WikiLeaks environment…
• Assess your agency’s plans for changes and upgrades to current [and new] classified networks, systems, applications, databases, websites, and online collaboration environments… in terms of the completeness and projected effectiveness of all types of security controls called for by applicable law and guidance…
• Assess all security, counterintelligence, and information assurance policy and regulatory documents that have been established by and for your department or agency.

The self-assessments were ordered by the White House on November 28th in reaction to WikiLeaks’ unauthorized publication of a massive trove of sensitive U.S. government documents and cables.