Classified Network Security (E.O. 13587)

Summary

Sets up new government groups and rules to make sure secret information on computer networks is shared safely and protected from inside threats.

What problem does this solve?

The government needs to share secret information quickly but also keep it safe from leaks. This order creates new teams and rules to manage this balance and prevent people from sharing secret information when they are not supposed to.

What does this order do?

Establishes an Insider Threat Task Force

Creates a new group, led by the Attorney General and Director of National Intelligence, to make a government-wide plan for stopping and finding inside threats.

Creates a Senior Steering Committee

Forms a high-level committee to oversee all government efforts to share and protect secret information on computer networks.

Requires agencies to create insider threat programs

Orders all government agencies with secret networks to start a program to find and stop threats from their own employees or contractors.

Names an Executive Agent for network security

Assigns the Secretary of Defense and the Director of the NSA to act as the main authority for creating technical rules to protect secret information on computer networks.

Mandates annual self-checks by agencies

Requires agencies to check how well they are following the security rules each year and report their findings to the new Steering Committee.

Who does this affect?

Federal agencies handling classified information
Government employees with security clearances
Government contractors with access to classified networks

What is the real world impact?

•

Improves coordination between agencies

Creates a central steering committee and task force to make sure all government agencies follow the same rules for protecting secret information, preventing gaps in security.

•

Prevents unauthorized leaks

Establishes an 'Insider Threat Task Force' to create programs that watch for, stop, and deal with government employees or contractors who might leak secret information.

•

Balances security with privacy

States that all new security rules must be put in place with proper protections for privacy and civil liberties, though some may worry this could lead to more employee monitoring.

When does this start?

This order took effect on October 7, 2011, and includes several deadlines for new groups to complete their work.

First report to the President

The Steering Committee must prepare its first report for the President assessing security successes and failures within 90 days of October 7, 2011.

Insider threat standards

The Insider Threat Task Force must issue minimum standards and guidance for agencies to follow within one year of October 7, 2011.