Appendix A - DoW ICAM Governing Authorities List

Appendix A

Appendix A – DoW ICAM Governing Authorities List

Appendix A
Below is the comprehensive, categorized running list of laws, executive mandates, policies, instructions, and standards that DoW Identity, Credential, and Access Management (ICAM) must adhere to, compiled directly from the governing ICAM issuances without commentary. 1. Federal Laws, Executive Orders, & OMB Mandates
Reference

Official Title

5 U.S.C. § 552a

Records maintained on individuals (The Privacy Act of 1974, as amended)

15 U.S.C. § 7001

General rule of validity (The Electronic Signatures in Global and National Commerce Act (E-SIGN))

44 U.S.C. § 3504, as

amended by Title XVII of
Pub. L. 105-277

The Government Paperwork Elimination Act (GPEA)

Public Law 113-283

Federal Information Security Modernization Act (FISMA) of 2014

EO 12333

United States Intelligence Activities (as amended by EO 13526 and EO 14086)

EO 14028

Improving the Nation's Cybersecurity

HSPD-12

Policy for a Common Identification Standard for Federal Employees and Contractors

OMB M-19-17

Enabling Mission Delivery through Improved Identity,
Credential, and Access Management

OMB M-21-31

Improving the Federal Government's Investigative and
Remediation Capabilities Related to Cybersecurity Incidents

OMB M-22-09

Moving the U.S. Government Toward Zero Trust
Cybersecurity Principles

Public Law 118-31

National Defense Authorization Act (NDAA) for Fiscal Year 2024 (Section 1005)

Appendix A
2. Core DoW / DoD ICAM Issuances
Reference

Official Title

DoWI / DoDI 8520.02

Public Key Infrastructure (PKI) and Public Key (PK)
Enabling

DoWI / DoDI 8520.03

Identity Authentication for Information Systems

DoWI / DoDI 8520.04

Access Management for DoW (DoD) Information Systems

DoDI 1000.13

Identification (ID) Cards for Members of the Uniformed
Services, Their Dependents, and Other Eligible Individuals

DoDM 1000.13 (Vol 1–3)

DoD Identification (ID) Cards: ID Card Life-Cycle

DoDI 1000.25

DoD Personnel Identity Protection (PIP) Program

DoDD 8521.01E

Department of Defense Biometrics

DoDI 5010.40

DoD Enterprise Risk Management and Risk Management and
Internal Control Program

DoDI 8520.04

Access Management for DoD Information Systems

3. Broader DoW / DoD Cybersecurity & InfoSec Issuances
Reference

Official Title

DoDD 5144.02

DoD Chief Information Officer (DoD CIO)

DoWD / DoDD 8000.01

Management of the Department of War Information
Enterprise

DoWD / DoDD 8140.01

Cyberspace Workforce Management

DoWI / DoDI 5000.82

Requirements for the Acquisition of Digital Capabilities