Skip Ribbon Commands Skip to main content

IASE content is currently preparing to migrate to the DoD Cyber Exchange.
Please see https://intelshare.intelink.gov/sites/disa-pki-pke for updates to PKI/E content until the DoD Cyber Exchange goes live.

Policy and Guidance
​

Listed by Organization
 

 Executive Orders

 
Document
  
Description
Last Modified
  
E.O. Library
Executive Orders Home Page
Various
Federal Register Website
Federal Register Website
Various
 

 White House

 
Document
  
Description
Last Modified
  
White House website
White House Information and Resources
May 27, 2010
 

 Congress

 
Document
  
Description
Last Modified
  
  
Congressional Information and Resources
Various
 

 Homeland Security

 
Document
  
Description
Last Modified
  
HSPD-7
Homeland Security Presidential Directive. Subject: Critical Infrastructure Identification, Prioritization, and Protection.
December 17, 2003
HSPD-12
Policy for a Common Identification Standard for Federal Employees and Contractors.
August 27, 2004
Department of Homeland Security
Department of Homeland Security
Dec 29, 2017
 

 Office of Management and Budget (OMB)

 
Document
  
Description
Last Modified
  
OMB A-130
Managing Federal Information as a Strategic Resource
July 28, 2016
Information for Agencies
Information for Agencies
Various
 

 Public Law

 
Document
  
Description
Last Modified
  
FISMA Act of 2014
Federal Information Security Management Act of 2014 (Public Law 113-283)
Various
Public Law 93-579
Privacy Act of 1974
August 17, 2015
 

 Department of Defense (DoD) Level Policy References

 
Document
  
Description
Last Modified
  
DISR Online (DoD PKI cert req'd)
DoD IT Standards Registry (DISR)
Various
DoD Issuances
Official DoD Web Site for DoD Issuances: (Search DoD Directives, Instructions, Publications, Administrative Instructions and Directive Type Memoranda)
Various
DoD Web Site Administration
DoD Web Masters Policies and Guidelines
Various
DoDD 8140.01
Cyberspace Workforce Management. (DoDD) 8140.01 reissues and renumbers DoDD 8570.1
July 31, 2017
DoDI 8500.01
Cybersecurity
Mar 14, 2014
DODI 8510.01
Risk Management Framework (RMF) for DoD Information Technology
Jul 28, 2017
DoDI 8550.01
DoD Internet Services and Internet-Based Capabilities
Sept 11, 2012
DoDM 5200.01 Volume 1
DoD 5200.1-R - Information Security Program - has been replaced with DoDM 5200.1 Volumes 1, 2, 3, 4. Search "5200" on the DTIC site. Additionally, see DoD 5200.01 link above.
Feb 24, 2012
DoDM 5200.01 Volume 2
DoD 5200.1-R - Information Security Program - has been replaced with DoDM 5200.1 Volumes 1, 2, 3, 4. Search "5200" on the DTIC site. Additionally, see DoD 5200.01 link above.
Mar 19, 2013
DoDM 5200.01 Volume 3
DoD 5200.1-R - Information Security Program - has been replaced with DoDM 5200.1 Volumes 1, 2, 3, 4. Search "5200" on the DTIC site. Additionally, see DoD 5200.01 link above.
Mar 19, 2013
DoDM 5200.01 Volume 4
DoD 5200.1-R - Information Security Program - has been replaced with DoDM 5200.1 Volumes 1, 2, 3, 4. Search "5200" on the DTIC site. Additionally, see DoD 5200.01 link above.
May 9, 2018
DoDM 5200.02
Procedures for the DoD Personnel Security Program (PSP)
Apr 3, 2017
Geolocation Memo
Use of Geo location-Capable Devices, Applications, and Services
Aug 3, 2018
 

 Chairman of the Joint Chiefs of Staff

 
Document
  
Description
Last Modified
  
CJCSI_6211.02D
Defense Information System Network (DISN): Policy and Responsibilities
January 24, 2012
CJCSI_6510.01F
Assurance (IA) and Computer Network Defense (CND).
February 9, 2011
CJCSM_6510.01B
Cyber Incident Handling Program
July 10, 2012
Joint Electronic Library
Joint Doctrine, Education and Training Resources.
Various
 

 National Security Agency

 
Document
  
Description
Last Modified
  
NSA IA Security Guides
National Security Agency Security Guides
Various
 

 Department of the Army

 
Document
  
Description
Last Modified
  
Army Publications
Army Publications
Dec 29, 2017
AR 25-2
Information Assurance
March 23, 2009
 

 Department of the Navy

 
Document
  
Description
Last Modified
  
Department of the Navy Memorandum
Navy DON CIO Policy and Guidance
Various
Department of Navy Issuances
Department of Navy Issuances
Various
 

 Department of the Air Force

 
Document
  
Description
Last Modified
  
Air Force Electronic Publications
Air Force Electronic Publications
Various
 

 Marine Corps

 
Document
  
Description
Last Modified
  
USMC References
Library of Reference Documents
Various
 

 Defense Information Systems Agency (DISA)

 
Document
  
Description
Last Modified
  
DISA Publications
DISA Publications Page
Defense Switched Network (DSN)
The Defense Switched Network (DSN) Page
Various
DoD IT Standards Registry Online (DoD PKI cert req'd)
DoD IT Standards Registry (DISR)
Various
 

 National Institute of Standards and Technology (NIST)

 
Document
  
Description
Last Modified
  
NIST Library
NIST Computer Security Resource Center (CSRC)
Various
 

 Committee on National Security Systems (CNSS)

 
Document
  
Description
Last Modified
  
CNSS Library Files
The Committee National Security Systems (CNSS) Libary - CNSS Home page and select Library from top navigation bar.
Various
​

Listed by Category
 

 Common Criteria

 
Document
  
Description
Last Modified
  
NIAP Validated Products List
NIAP Oversees Evaluations of Commercial IT Products for Use in National Security Systems
Various
 

 Privacy

 
Document
  
Description
Last Modified
  
Defense Privacy Office
Defense Privacy Office - multiple policy links
Various

Notice: The IASE posts any DoD Information Assurance (IA) policy or guidance links that we become aware of as soon as we are able. Since the IASE mission is to support DoD, we are not always aware of changes to IA policy. IASE users need to verify the relevance and life span of any Policy or Guidance link used from this page. We invite the IASE community to inform us of changes to Information Assurance policy so that we can maintain this page for all to use. Please provide url references whenever possible to disa.meade.RE.mbx.iase-website@mail.mil

The appearance of hyperlinks does not constitute endorsement by the Department of Defense/Defense Information Systems Agency of this Web site or the information, products, or services contained therein. For other than authorized activities, such as military exchanges and MWR sites,the Department of Defense/Defense Information Systems Agency does not exercise any editorial control over the information you may find at these locations. Such links are provided consistent with the stated purpose of this DoD Web site.











Policy and Guidance Links