Security Protocols to Protect Information
Requirement: All federal public websites* must comply with Section 207(f)(1)(b)(iv) of the E-Gov Act of 2002, which requires organizations to have security protocols to protect information.
- E-Gov Act of 2002, Section 207(f)(1)(b)(iv)
- Guidelines on Securing Public Web Servers (NIST)
(PDF, 2.13 MB, Sept 2002, requires Adobe Acrobat Reader)
Examples
- Science.gov, a cross-agency portal managed by multiple scientific agencies, offers an explanation about their computer security systems and the penalties for attempting to interfere with the security features of the site.
- The Library of Congress provides a clearly written statement about security protections used to prevent unauthorized use of their website.
- The Department of Education has a page on their website describing site security and intrusion detection.
* These requirements apply to executive departments and agencies and their public websites. Check the specific law to see if it also applies to judicial or legislative agencies or to intranets.
Page Updated or Reviewed: December 14, 2005
