OMB tells agencies to update TIC plans

The Office of Management and Budget has provided more guidance for agencies in a recent memo as they implement the Trusted Internet Connection (TIC) initiative to improve information security.

According to the memo released Sept. 30, agencies must update their plans for reducing their external Internet connections to include the pending modification to the Networx contract for services to comply with the TIC program.

Under the TIC, OMB has directed agencies to reduce the number of their gateways to the Internet to as few as two or three connections so they can secure and monitor their data traffic more effectively.

Agencies must submit their revised TIC Plan of Action and Milestones to OMB by Oct. 15, said Karen Evans, OMB’s administrator for e-government and information technology.

Also, the Homeland Security Department will coordinate with agencies when to install the Einstein technology, which is designed to monitor traffic at agencies’ Internet connection points, and other TIC activities, Evans said.

“We will not consider your agency fully compliant until DHS has provided notification to OMB of completion of the necessary activities for TIC,” she said in the memo to chief information officers.

Some agencies plan to use services that will become part of the Networx governmentwide program to meet OMB requirements for the TIC program. The General Services Administration is expected to award a contract for TIC services under Networx on or around Nov. 15, Evans said.

Other agencies are acting as TIC Access Providers and would provide services to agencies to help them comply with the program. According to OMB’s memo, those agencies must provide in their updated plans that they are taking actions to:

• Comply with critical TIC capabilities, and continue to reduce and consolidate external connections to identified TIC access points.

• Collaborate with DHS to determine agencies' technical readiness to install the Einstein technology.