Cybersecurity in Government Organizations

Cybersecurity in Government Organizations

Copyright ©2015 by University of Maryland University College. All Rights Reserved
4. As part of your Digital Government Website review, determine the types and sensitivity of
information collected, displayed, processed, and stored by the Web applications which implement
the Digital Government service.
a. See http://www.digitalgov.gov/resources/checklist-of-requirements-for-federal-digital-
services/ for general security and privacy requirements.
b. See FIPS 199 for additional guidance on determining the sensitivity level of a Federal IT
system. (See the section on public websites.)

5. Using FIPS 200 and NIST SP 800-53, research the general types of security controls which are
required for the IT systems hosting the Digital Government service that you reviewed.
6. Find three or more additional sources which provide information about best practice
recommendations for ensuring the security of the Web Applications used to deliver Digital
Government information and services. These additional sources can include analyst reports and/or
news stories about recent attacks / threats, data breaches, cybercrime, cyber terrorism, etc. which
impacted the security of digital government services.
Write:
Write a two to three page summary of your research. At a minimum, your summary must
include the following:
1. An introduction or overview of digital government which provides definitions and addresses the
laws, regulations, and policies which require that federal agencies provide information and services
via the Web. This introduction should be suitable for an executive audience.
2. An overview of the information and services provided by your selected digital government Website.
Answer the following questions:

a. What types of information or services are available via your selected Website?
b. What population does this Website serve (who is the intended audience)?
c. What sensitivity level which should be assigned to the Website (use FIPS 199
criteria).
d. What security issues were observed during your review?

3. A separate section which addresses the architectures and security issues inherent in the use of Web
applications when used to deliver the services provided by your selected digital government
Website.
4. A separate section which includes recommendations for best practices for ensuring Web application
security during the design, implementation, and operation of digital government websites. Include
five or more best practice recommendations in your discussion.
Your white paper should use standard terms and definitions for cybersecurity. The following sources are
recommended:

 NICCS Glossary http://niccs.us-cert.gov/glossary