<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="stratml.xsl"?>
<StrategicPlan><id></id><Name>NATIONAL STRATEGY FOR INFORMATION SHARING AND SAFEGUARDING</Name><Description>Our national security depends on our ability to share the right information, with the right people, at
the right time. This information sharing mandate requires sustained and responsible collaboration
between Federal, state, local, tribal, territorial, private sector, and foreign partners. Over the last few
years, we have successfully streamlined policies and processes, overcome cultural barriers, and better
integrated information systems to enable information sharing. Today&#8217;s dynamic operating environment,
however, challenges us to continue improving information sharing and safeguarding processes
and capabilities. While innovation has enhanced our ability to share, increased sharing has created the
potential for vulnerabilities requiring strengthened safeguarding practices. The 2012 National Strategy
for Information Sharing and Safeguarding provides guidance for effective development, integration, and
implementation of policies, processes, standards, and technologies to promote secure and responsible
information sharing.</Description><OtherInformation>As we execute the Strategy together, we will harness our collective resolve to treat information as a
national asset, make it discoverable and retrievable by all authorized users, and arm those charged
with preserving the security of our Nation. Only as we work together, hold ourselves accountable, and
take concerted ownership of advancing our goals, will we achieve the safety and success our country
rightfully demands and fully deserves.</OtherInformation><StrategicPlanCore><Organization><Name>President of the United States</Name><Acronym>POTUS</Acronym><Identifier>_90e51e86-bcc3-40fb-9a48-6480d35f44aa</Identifier><Description></Description><Stakeholder><Name>National Security Stakeholders </Name><Description>National security stakeholders across the government, guided by our shared Principles, can now act in concert to accomplish these priority objectives and build implementation plans to realize the goals of this Strategy. As we execute the Strategy together, we will harness our collective resolve to treat information as a national asset, make it discoverable and retrievable by all authorized users, and arm those charged with preserving the security of our nation with all information available to drive decisions that protect our country and its people. Only as we work together, hold ourselves accountable, andtake concerted ownership of advancing our goals, will we achieve the success our country rightfully demands and fully deserves.</Description></Stakeholder></Organization><Vision><Description>It is a national priority to efficiently, effectively, and appropriately share and safeguard information so
any authorized individual (Federal, state, local, tribal, territorial, private sector or foreign partner) can
prevent harm to the American people and protect national security. The Strategy points toward a future in which information supports national security decisionmaking by providing the right information, at
any time, to any authorized user, restricted only by law or policy, not technology; and where safeguarding
measures, to include a comprehensive regimen of accountability, prevent the misuse of the information.</Description><Identifier>_9483f23c-4b0c-11e2-960b-3f0d8065e47b</Identifier></Vision><Mission><Description>To provide guidance for effective development, integration, and implementation of policies, processes, standards, and technologies to promote secure and responsible information sharing.</Description><Identifier>_9483fbb0-4b0c-11e2-960b-3f0d8065e47b</Identifier></Mission><Value><Name>Information Assets</Name><Description>Our responses to these challenges must be strategic and grounded in three core principles. First, in treating Information as a National Asset, we recognize departments and agencies have achieved an unprecedented ability to gather, store, and use information consistent with their missions and applicable
legal authorities; correspondingly they have an obligation to make that information available to support national security missions. </Description></Value><Value><Name>Risk Management</Name><Description>Second, our approach recognizes Information Sharing and Safeguarding
Requires Shared Risk Management. In order to build and sustain the trust required to share with one another, we must work together to identify and collectively reduce risk, rather than avoiding information loss by not sharing at all. </Description></Value><Value><Name>Informed Decisionmaking</Name><Description>Third, the core premise Information Informs Decisionmaking underlies all our actions and reminds us better decisionmaking is the purpose of sharing information in the first place.</Description></Value><Goal><Name>Collaboration &amp; Accountability</Name><Description>Drive Collective Action through Collaboration and Accountability. </Description><Identifier>_9483fd9a-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>1</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>We can best reach our shared vision when working together, using governance models that enable mission achievement, adopting common processes where possible to build trust, simplifying the information sharing agreement development process, and supporting efforts through performance management,
training, and incentives.</OtherInformation><Objective><Name>Governance</Name><Description>Improve Governance to Promote Collaboration</Description><Identifier>_9483fe9e-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>1.1</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Governance plays a critical role in setting priorities and driving decisions. The bodies charged with these responsibilities, along with performance and compliance monitoring, exist at all echelons of government.  Enabling their work demands clear, harmonized, and complementary charters that support collaboration and policy enforcement at the lowest possible level, yet still allow elevation of issues through the White House policy process. An effective governance structure accounts for the complexities of a diverse range of missions, acknowledges resource realities, reduces gaps, minimizes redundancies, and aligns stakeholder policy development and implementation.</OtherInformation></Objective><Objective><Name>Common Processes</Name><Description>Increase the Use of Increase the Use of Common Processes</Description><Identifier>_9483ff70-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>1.2</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Many communities use common processes for acquiring, accessing, retaining, producing, using, managing, sharing, and safeguarding information. The SAR process used by the National Network of Fusion Centers and local law enforcement entities, for example, includes stakeholder outreach, privacy
protections, training, and enabling technology to identify and report suspicious activity in jurisdictions across the country, and serves as the unified focal point for sharing SAR information. Common processes, like SAR, provide organizations a template for repeatable, interoperable, and trusted protocols.  Standardization, with built-in flexibility for evolving mission requirements, also improves timely information discovery, access, and exchange and makes it easier to integrate new partners into existing information flows. Not only does increasing the use of common processes provide opportunities to strengthen privacy, civil rights, and civil liberties, it enables the implementation of vetted measures to safeguard information.</OtherInformation></Objective><Objective><Name>Information Sharing Agreements</Name><Description>Streamline the Development of Information Sharing Agreements</Description><Identifier>_94840024-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>1.3</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Information sharing to protect national security relies on availability of information from many government agencies, the private sector, and foreign partners, all of which have diverse missions and information collection and dissemination policies. As a result, developing interagency information sharing agreements is often a critical step in the success of cross-agency collaboration. Unfortunately, this step is often protracted as agencies attempt to determine mutually agreeable requirements and restrictions related to information access, handling, and use based on differing missions, requirements, restrictions, and authorities. Creating a template, based on common legal and policy compliance requirements would streamline the process, facilitate issue resolution, and enhance partnerships with private sector and foreign partners.</OtherInformation></Objective><Objective><Name>Performance Management, Training &amp; Incentives</Name><Description>Encourage Progress through Performance Management, Training, and Incentives</Description><Identifier>_948400d8-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>1.4</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Achieving the goals of this Strategy requires a management approach that includes incentives for performance at both the organizational and individual levels. Departments and agencies benefit from integrating their performance management approaches to support a holistic view of progress towards
achieving information sharing and safeguarding goals. Stakeholders should not only measure improvements in information sharing and safeguarding processes (e.g., discoverability, timeliness, accuracy, compliance, and oversight), but also measure their overall effectiveness (e.g., how shared information helps to achieve the mission). Performance management and metrics, when paired with effective leadership, reinforces progress and motivates personnel to meet high expectations and professional standards.  Investing in staff through training and incentives also helps foster a culture that values information sharing and safeguarding, extending to organizations beyond our immediate communities.</OtherInformation></Objective></Goal><Goal><Name>Discovery &amp; Access</Name><Description>Improve Information Discovery and Access through Common Standards. </Description><Identifier>_9484018c-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>2</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Improving discovery and access involves developing clear policies for making information available to approved individuals. Secure discovery and access relies on identity, authentication, and authorization controls, data tagging, enterprise-wide data correlation, common information sharing standards, and a rigorous process to certify and validate their use.</OtherInformation><Objective><Name>Discovery &amp; Access</Name><Description>Develop Clear Policies for Discovery and Access
</Description><Identifier>_9484027c-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>2.1</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>A central intent of information sharing is to make certain information is both discoverable and accessible by those with a legitimate need, in a timely manner. Discovery and access are distinct concepts: the first addresses a user&#8217;s ability to identify the existence of information, and the second relates to a user&#8217;s ability to retrieve it. Our national security demands relevant information is made discoverable, in accordance with existing laws and policies, to appropriate personnel. Discovery and access require clear and consistent policy and standards, as well as technical guidance for implementing interoperable processes and technology.</OtherInformation></Objective><Objective><Name>Identity, Authentication &amp; Authorization</Name><Description>Improve Identity, Authentication, and Authorization Controls</Description><Identifier>_9484034e-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>2.2</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Information discovery requires a standardized approach to authentication so participating entities can validate and trust the identities of users attempting to log into their systems. Information holders have often created their own authentication services resulting in users requiring unique credentials for accessing different systems or networks. Using trusted, interoperable authentication services will minimize the number of required credentials, drive out unnecessary anonymity, and achieve efficiencies by eliminating stand-alone authentication services.  Once user identities are authenticated, their unique attributes assist in determining if access to information is authorized. Both information originators and consumers share responsibility for using standard processes, attributes, and &#8220;rules of use&#8221; to support authentication and authorization decisions. Further, user attributes require dynamic management to inform these decisions, including provisions for agile updates and removal of user access. Greater policy and technical alignment across departments and agencies will enable implementation of interoperable capabilities that engender confidence and trust in the process of confirming appropriate users while also providing access to mission-relevant information.</OtherInformation></Objective><Objective><Name>Data-Level Tagging</Name><Description>Promote Data-Level Tagging
</Description><Identifier>_94840416-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>2.3 </SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Most information authorization models are limited to access controls defined and enforced at the network or application-level, rather than at the data-level using inherent characteristics of specific information resources. As networks are consolidated and shared services are adopted, access controls must be applied on the data itself, using &#8220;tags.&#8221; Information tagging is an approach where standard attributes &#8212; tags &#8212; are attached to a piece of information to describe it. While manual discovery and access capabilities benefit from information tagging by guiding users directly to specific information based on
their profile, it also can enable automated enforcement of access decisions based on mission-relevance.  By matching the user attributes with corresponding information attributes, the automated delivery of mission-specific information is improved along with the security and protection of that information from inappropriate recipients. Information tagging further assists in meeting records management requirements, responding to disclosure inquiries, integrating privacy protections, and remediating erroneous data disclosures and modifications.</OtherInformation></Objective><Objective><Name>Data Correlation</Name><Description>Enhance Enterprise-Wide Data Correlation</Description><Identifier>_948404f2-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>2.4 </SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Connecting related information from disparate department and agency databases can mean the difference between identifying a threat during the planning stage or analyzing what could have been done to thwart the attack after it occurs. Data correlation and advanced analytics, coupled with integrated sharing and safeguarding protections, will enable users to reference authoritative, up-to-date information across multiple agency holdings. This capability can support analysts&#8217; efforts to identify relationships among people, places, things, and characteristics that are otherwise not apparent. To advance this capability while taking into account increasing volumes of information, stakeholders need to make their information accessible so an analyst can create a single query to search across many information sources. Analysts also need automated capabilities to establish linkages across holdings and generate alerts when mission-relevant information becomes available. While current technologies require centralized information repositories, which may yet remain appropriate in some limited cases, a decentralized approach allows the originator to maintain and update information as needed. This promises increased speed in sharing and higher levels of information fidelity. Successful data correlation also requires a validation component to determine the veracity and applicability of information before action.</OtherInformation></Objective><Objective><Name>Information Sharing Standards</Name><Description>Drive the Use of Information Sharing Standards</Description><Identifier>_948405ba-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>2.5</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Meeting the mission need for enterprise-wide discovery and access warrants the use of standards. By reusing existing standards, stakeholders can benefit from the time, resources, and experience invested by others to fully vet and implement a new standard. As a result, capabilities to meet mission needs can be more rapidly, efficiently, and effectively applied without developing ad-hoc custom solutions or unique standards for single use. Prudent information sharing leverages the use of voluntary consensus standards, as described in existing Federal policy, wherein government uses standards created by established SDOs, which often incorporate government, industry, and international membership.  With this approach, we first aim to adopt existing standards to meet mission needs, and when none are available, use SDOs to address the gap.</OtherInformation></Objective><Objective><Name>Certification &amp; Conformance</Name><Description>Support Enterprise-Wide Certification and Conformance
</Description><Identifier>_94840682-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>2.6</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Given the abundance of standards available throughout the government, the private sector, and the international community, decisionmakers and users are faced with the challenge of determining which standard is most appropriate to satisfy their requirements while also supporting interoperability with other partners. Consequently, there is a need for a process to validate, certify, and require the interoperability of technology solutions used to share and safeguard information. This, in turn, will help inform decisionmakers of the most appropriate standards to employ while also sending a clear signal to industry which standards to use in developing tools and products that advance interoperability and support a broader set of mission needs.</OtherInformation></Objective></Goal><Goal><Name>Shared Services &amp; Interoperability</Name><Description>Optimize Mission Effectiveness through Shared Services and Interoperability. </Description><Identifier>_9484077c-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>3</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Efforts to optimize mission effectiveness include shared services, data and network interoperability, and increased efficiency in acquisition.</OtherInformation><Objective><Name>Service Sharing</Name><Description>Share Services that Benefit All Partners</Description><Identifier>_94840862-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>3.1 </SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Across the government, departments and agencies have begun to embrace a shared computing model, sometimes referred to as &#8220;cloud computing.&#8221; In this model, data centers are consolidated and computer infrastructures are employed as a shared service. Hosting systems and applications on common infrastructures distributes workload, reduces requirements for computing capacity, and lowers total cost. The future promises to bring additional enhancements by offering capabilities beyond shared computing, such as shared application and shared information services. As a result, departments and agencies can adopt existing capabilities and focus on developing the services and technologies that best align with their mission and expertise. In particular, shared capabilities will allow departments and agencies to better deliver targeted services to specific end-users, as opposed to trying to serve all classes of users with all required capabilities. The projected advantages of this approach include streamlined cost and efficiency, as well as the opportunity to reduce the number of unique interfaces and required standards.</OtherInformation></Objective><Objective><Name>Data, Services &amp; Network Assurance</Name><Description>Improve Assured Data, Services, and Network Interoperability
</Description><Identifier>_9484093e-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>3.2</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>While the shared service model offers significant enhancements, it does not guarantee interoperability or improved information sharing. Departments and agencies continue to wrestle with the challenge of using legacy data, services and systems that have varying degrees of connectivity across and among various classified and unclassified networks. IT development often fails to accord sufficient priority to interoperability. By planning and prioritizing during the design phase of IT solutions, departments and agencies can enjoy community-wide benefits of interoperability while meeting individual mission mandates. Increasing interoperability and access to shared services and information improves mission success, minimizes complexity, and reduces duplication as well as ongoing sustainment requirements.</OtherInformation></Objective><Objective><Name>Collective Demand</Name><Description>Leverage Collective Demand through Acquisition
</Description><Identifier>_94840aa6-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>3.3</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>An acquisition approach that integrates standards is essential for deploying interoperable technology solutions and shared services. Our ability to integrate systems and share information is stronger and more adaptable when government departments and agencies partner with one another and industry to identify and reuse the best solutions already at the government&#8217;s disposal and to develop standards-based technologies that support multiple missions and communities. Stakeholders are encouraged to work with industry to develop and acquire tools and technologies leveraging information sharing and safeguarding standards. Federal acquisition policies, including grant policies, should facilitate and reward collaboration between departments and agencies resulting in reuse of existing services and encouraging development of enterprise-wide acquisition priorities. Aligning acquisition requirements should not only support interoperable technology acquisition, but also should lower incremental costs to departments and agencies with fewer acquisitions and reduced processing costs.</OtherInformation></Objective></Goal><Goal><Name>Information Safeguarding</Name><Description>Strengthen Information Safeguarding through Structural Reform, Policy, and Technical Solutions. </Description><Identifier>_94840b8c-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>4</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>To foster trust and safeguard our information, policies and coordinating bodies must focus on identifying, preventing, and mitigating insider threats and external intrusions, while departments and agencies work to enhance capabilities for data-level controls, automated monitoring, and cross-classification solutions.</OtherInformation><Objective><Name>Structures &amp; Policy</Name><Description>Reform Structures and Policy</Description><Identifier>_94840c7c-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>4.1</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Recent information breaches and disclosures highlight vulnerabilities in the protection of sensitive and classified information. Continued implementation of structural reform and standardized policies, however, will strengthen oversight as well as align security best practices.  The risk of unauthorized disclosure and misuse of information originates from insider threats and external intrusions; structural reforms must address both. The ability to safeguard information depends on implementing and strengthening policies and procedures that enable network monitoring and detection of anomalous behavior to identify insider threats and intrusions. Existing coordination bodies sustain the focus on information safeguarding and jointly own responsibility for developing effective technical policies and standards for coordinating government-wide implementation, conducting independent compliance assessments, and holding senior-level officials accountable. Aggregating appropriate information from counterintelligence, security, information assurance, and human resource elements, across multiple networks and domains, in near-real time, enables the appropriate authorities to proactively reduce and address security breaches. Likewise, developing a coordinated enterprise capability to monitor the health of our networks and detect malicious access attempts requires a comprehensive understanding of how applications and services are used across networks and security domains. Policies and procedures should also address unintended release of information. Prevention, detection, and mitigation policies, paired with appropriate supporting technologies, help create the assurance and trust among partners to confidently share information.</OtherInformation></Objective><Objective><Name>Controls, Monitoring &amp; Cross-Classification</Name><Description>Enhance Data-Level Controls, Automated Monitoring, and Cross-Classification
Solutions</Description><Identifier>_94840d94-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>4.2</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Technology also plays an important role in developing our safeguarding capabilities. Progress requires we move from network to data-level controls with application interoperability. Increasingly granular security controls will improve access to information regardless of where information flows and strengthen protection against unauthorized disclosure, dissemination, access, and modification of information. Automated continuous monitoring, paired with appropriate privacy protections, supports shared risk management and enables a near real-time picture of existing or emerging risks.  The focus of information safeguarding efforts in the past was primarily bound to systems and networks at specific classification levels. Departments and agencies, however, often identify the need to securely share information across systems regardless of classification. Technologies, capabilities, and services such as shared computing further accelerate the need for cross-classification sharing. Consequently, we need technologies, standards, and common processes to support this critical emerging requirement.</OtherInformation></Objective></Goal><Goal><Name>Privacy, Civil Rights &amp; Civil Liberties</Name><Description>Protect Privacy, Civil Rights, and Civil Liberties through Consistency and Compliance.</Description><Identifier>_94840e84-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>5</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Integral to maintaining the public trust is increasing the consistency by which we apply privacy, civil rights, and civil liberties protections across the government, building corresponding safeguards into the development of information sharing operations, and promoting accountability and compliance mechanisms.</OtherInformation><Objective><Name>Protections</Name><Description>Increase Consistent Government-Wide Application of Protections</Description><Identifier>_94840f7e-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>5.1</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Privacy, civil rights, and civil liberties protections are integral to maintaining the public trust; this is a cornerstone of our information sharing and safeguarding efforts. Departments and agencies will need to adopt a consistent approach to the foundational privacy, civil rights, and civil liberties protections for information they hold, with appropriate provisions for mission-based flexibility in accordance with existing law and policy. This leverages governance bodies and existing procedures, to continually refine and establish necessary guidelines for appropriate protections of shared information, such as the Information Sharing Environment Privacy Guidelines. Cultivating a comprehensive and efficient approach to defining and implementing privacy, civil rights, and civil liberties protections in information sharing between both Federal and non-Federal partners sustains applicable legal, regulatory, and policy requirements, an imperative for protecting both national security and individual rights.</OtherInformation></Objective><Objective><Name>Information Sharing Operations</Name><Description>Build Protections into the Development of Information Sharing Operations</Description><Identifier>_948410aa-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>5.2</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Protecting privacy, civil rights, and civil liberties is not the exclusive domain of legal counsel and subject matter experts. Legal and policy controls on the use and protection of information may be implemented through the policy process and integrated in technology. This warrants participation by and coordination with program managers, system architects and developers, information assurance personnel, and others in program and system design. Addressing privacy, civil rights, and civil liberties early in the planning of any new initiative (or in the redesign of existing systems and processes) allows these information protections to be considered, built-in, managed, and monitored enterprise-wide.</OtherInformation></Objective><Objective><Name>Accountability &amp; Compliance Mechanisms</Name><Description>Promote Accountability and Compliance Mechanisms</Description><Identifier>_948411a4-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>5.3</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Ensuring compliance through oversight, performance management, and accountability with proper enforcement mechanisms is as critical as identifying the protections themselves. Each department and agency currently monitors and reports on the rigor of its privacy, civil rights, and civil liberties protections using appropriate compliance documentation and performance management techniques. Monitoring and measuring compliance verification mechanisms for accountability assists mission partners in identifying and addressing vulnerabilities, and in validating they are actively and systematically refining protections for individual rights. As we transition to an enterprise-wide approach, protections must be continuously reinforced and assessed, including monitoring of access and use controls, analysis of audit and usage information, and regular and systematic compliance reviews.  Privacy, civil rights, and civil liberties performance and compliance must evolve along with information sharing needs and methods. Going forward, this enterprise-wide model should include implementing technological means of reviewing and enforcing privacy, civil rights, and civil liberties protections, requirements, and policies.</OtherInformation></Objective></Goal><Goal><Name>Implementation Plan</Name><Description>Develop an integrated implementation plan to provide a coordinated and sustainable approach to accomplish the goals and realize the vision of this Strategy.</Description><Identifier>_9484129e-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>6</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation>Way Forward -- As stated in the National Security Strategy, &#8220;collaboration across the government&#8212;and with our partners at the state, local, and tribal levels of government, in industry, and abroad&#8212;must guide our actions.&#8221;
This Strategy serves as a guide for balancing collective efforts to promote responsible sharing and safeguarding in support of national security and to enhance the safety of the American people. Together, we can reach beyond legacy information sharing protocols and embed in our missions and cultures the assurance decisions are better informed when supported by all relevant information. This also requires, however, a balanced commitment to appropriately safeguard information, its sources, and collection methods, while also respecting legal and policy restrictions on use. Success depends upon the collective ability to achieve equilibrium between sharing and safeguarding, build on past successes, and continue the maturation of the Information Sharing Environment.
An integrated implementation plan will be developed to provide a coordinated and sustainable approach to accomplish the goals and realize the vision of this Strategy. This plan will focus on achieving priority objectives, sequence stakeholder actions across a five-year horizon, include performance
measures and milestones, and designate lead departments and agencies. The implementation plan will integrate annual programmatic and implementation guidance and synchronize with the Federal budget cycle to allow adjustments to actions and deliverables based on annual performance assessments,
changing priorities, and resource allocations. Implementation planning will involve all departments and agencies that support national security and safety, led by the White House, leveraging the strategic resourcing processes of the Office of Management and Budget, and managed by departments, agencies,
and executive agents, as appropriate, based on mission relevance and existing authorities. The following objectives capture the highest five priorities of the Administration in achieving the information sharing and safeguarding goals of this Strategy.  The remaining objectives represent additional priority activities for departments, agencies, and other stakeholders to advance the goals of this Strategy.</OtherInformation><Objective><Name>Governance </Name><Description>Align information sharing and safeguarding governance to foster better decisionmaking, performance, accountability, and implementation of the Strategy&#8217;s goals.</Description><Identifier>_948413d4-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>Priority 1</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation></OtherInformation></Objective><Objective><Name>Guidelines</Name><Description>Develop guidelines for information sharing and safeguarding agreements to address common requirements, including privacy, civil rights, and civil liberties, while still allowing flexibility to meet mission needs.</Description><Identifier>_948414e2-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>Priority 2</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation></OtherInformation></Objective><Objective><Name>Metadata Standards </Name><Description>Adopt metadata standards to facilitate federated discovery, access, correlation, and monitoring across Federal networks and security domains.</Description><Identifier>_948415f0-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>Priority 3</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation></OtherInformation></Objective><Objective><Name>FICAM Roadmap</Name><Description>Extend and implement the FICAM Roadmap across all security domains.</Description><Identifier>_9484173a-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>Priority 4</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation></OtherInformation></Objective><Objective><Name>Removable Media</Name><Description>Implement removable media policies, processes and controls; provide timely audit capabilities of assets, vulnerabilities, and threats; establish programs, processes and techniques to deter, detect and disrupt insider threats; and share the management of risks, to enhance unclassified and classified information safeguarding efforts.</Description><Identifier>_94841848-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>Priority 6</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation></OtherInformation></Objective><Objective><Name>Capabilities &amp; Requirements</Name><Description>Define and adopt baseline capabilities and common requirements to enable data, service, and network interoperability.</Description><Identifier>_94841960-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>Additional Priority 6</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation></OtherInformation></Objective><Objective><Name>Training</Name><Description>Provide information sharing, safeguarding, and handling training to appropriate stakeholders using a common curriculum tailored to promote consistent, yet flexible, and trusted processes.</Description><Identifier>_94841ac8-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>Additional Priority 7</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation></OtherInformation></Objective><Objective><Name>Policy-Based Discovery</Name><Description>Define and implement common processes and standards to support automated policy-based discovery and access decisions.</Description><Identifier>_94841bea-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>Additional Priority 8</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation></OtherInformation></Objective><Objective><Name>Information Quality &amp; Timeliness &amp; Infrastructure Security</Name><Description>Establish information sharing processes and sector specific protocols, with private sector partners, to improve information quality and timeliness and secure the nation&#8217;s infrastructure.</Description><Identifier>_94841d02-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>Additional Priority 9</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation></OtherInformation></Objective><Objective><Name>Reference Architecture</Name><Description>Develop a reference architecture to support a consistent approach to data discovery and correlation across disparate datasets.</Description><Identifier>_94841e60-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>Additional Priority 10</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation></OtherInformation></Objective><Objective><Name>IT Shared Services Strategy</Name><Description>Implement the recommendations and activities of the Federal IT Shared Services Strategy among appropriate stakeholders to facilitate adoption of shared services.</Description><Identifier>_94841f78-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>Additional Priority 11</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation></OtherInformation></Objective><Objective><Name>Certification &amp; Conformance Processes</Name><Description>Refine standards certification and conformance processes enabling standards-based acquisition among departments and agencies, standards bodies, and vendors to promote interoperable products and services.</Description><Identifier>_9484209a-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>Additional Priority 12</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation></OtherInformation></Objective><Objective><Name>Foreign Partners</Name><Description>Promote adherence to existing interagency processes to coordinate information sharing initiatives with foreign partners, as well as adopt and apply necessary guidelines, consistent with statutory authorities and Presidential policy to ensure consistency when sharing and safeguarding information.</Description><Identifier>_94842202-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>Additional Priority 13</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation></OtherInformation></Objective><Objective><Name>Requests for Information, Alerts, Warnings &amp; Notifications</Name><Description>Create a common process across all levels of government for Requests for Information, Alerts, Warnings, and Notifications to enable timely receipt and dissemination of information and appropriate response.</Description><Identifier>_9484232e-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>Additional Priority 14</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation></OtherInformation></Objective><Objective><Name>NSI Programs</Name><Description>Complete the implementation of the NSI programs in the National Network of Fusion Centers and Federal entities while expanding training and outreach beyond law enforcement to the rest of the public safety community.</Description><Identifier>_9484245a-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>Additional Priority 15</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation></OtherInformation></Objective><Objective><Name>Operational &amp; Enabling Capabilities</Name><Description>Achieve the four Critical Operational Capabilities, four Enabling Capabilities, and other prioritized objectives, across the National Network of Fusion Centers to enable effective and lawful execution of their role as a focal point within the state and local environment for the receipt, analysis, gathering and sharing of threat-related information.</Description><Identifier>_948425c2-4b0c-11e2-960b-3f0d8065e47b</Identifier><SequenceIndicator>Additional Priority 16</SequenceIndicator><Stakeholder><Name></Name><Description></Description></Stakeholder><OtherInformation></OtherInformation></Objective></Goal></StrategicPlanCore><AdministrativeInformation><StartDate></StartDate><EndDate></EndDate><PublicationDate>2012-12-20</PublicationDate><Source>http://www.whitehouse.gov/sites/default/files/docs/2012sharingstrategy_1.pdf?goback=%2Egde_1903175_member_197797431</Source><Submitter><FirstName>Owen</FirstName><LastName>Ambur</LastName><PhoneNumber></PhoneNumber><EmailAddress>Owen.Ambur@verizon.net</EmailAddress></Submitter></AdministrativeInformation></StrategicPlan>