 |
|
|
|
Office of Management and Budget Security Mandate
OMB Memo M-06-16
On June 23, 2006, the Office of Management and Budget issued a memorandum regarding Protection of Sensitive Agency Information.
It is part of the US government's efforts to properly safeguard information assets while using information technology. The safeguards set forth in this memorandum are to be put in place within the next 45 days.
The key actions to be taken by all departments and agencies are listed below.
- Encrypt all data on mobile computers/devices which carry agency data unless the data is determined to be non-sensitive, in writing, by your Deputy Secretary or an individual he/she may designate in writing;
- Allow remote access only with two-factor authentication where one of the factors is provided by a device separate from the computer gaining access;
- Use a "time-out" function for remote access and mobile devices requiring user re-authentication after 30 minutes inactivity; and
- Log all computer-readable data extracts from databases holding sensitive information and verify each extract including sensitive data has been erased within 90 days or its use is still required.
PSC Solution
Whether a government agency or a corporation, protection of sensitive data throughout the enterprise has become a "must do" in today's business and regulatory climate. PSC has worked with numerous customers in all phases of security implementation – from requirements gathering and analysis, architecture, competitive product evaluations and implementation plans to development of policies and procedures. PSC's team of industry experts can reduce the risk in your project and shorten your compliance timeframes. The difference in PSC and others is the team's deep experience in protection of financial data, whether used in transaction processing or for offline analysis throughout the company. PSC brings the discipline of financial security to all types of clients and provide a customized solution for each organizational structure and specific needs.
Read the full text of the memorandum.
|
|
|
|
Proven Solutions For:
Proven Services:
|
|
|
|
