Federal email regulations on .gov accounts

Started by Starbird, April 12, 2018, 02:02:36 PM

0 Members and 1 Guest are viewing this topic.

Starbird

Hello all!

I am currently looking for federal regulations governing the use of .gov emails.  I am familiar with CAPR 120-1, which covers the @[InsertYourWingHere].cap.gov emails that we use, but I am unable to find a blanket regulation (I'm assuming it would be FCC?) that govern the overall use of .gov emails, government/nationwide.  If anyone knows where I can find them, I'd be most interested!

I am looking for these regs as I am currently researching OPSEC and PII, and will be writing an assignment on the topic soon.

kwe1009


THRAWN

There is not a single across the board federal email "regulation". Each department, agency, and OA must comply to a basic use/retention policy, but each is responsible for developing their own internal regulations.

https://www.faa.gov/about/initiatives/records/faq/email/

http://www.dtic.mil/dtic/tr/fulltext/u2/a403646.pdf

https://www.doi.gov/ocio/policy-mgmt-support/information-and-records-management/email-guide-v2

Quote from: Starbird on April 12, 2018, 02:02:36 PM
Hello all!

I am currently looking for federal regulations governing the use of .gov emails.  I am familiar with CAPR 120-1, which covers the @[InsertYourWingHere].cap.gov emails that we use, but I am unable to find a blanket regulation (I'm assuming it would be FCC?) that govern the overall use of .gov emails, government/nationwide.  If anyone knows where I can find them, I'd be most interested!

I am looking for these regs as I am currently researching OPSEC and PII, and will be writing an assignment on the topic soon.
Strup-"Belligerent....at times...."
AFRCC SMC 10-97
NSS ISC 05-00
USAF SOS 2000
USAF ACSC 2011
US NWC 2016
USMC CSCDEP 2023

PhoenixRisen

If you're looking for lower-level policy statements, such as Acceptable Use Policies, those are typically governed at the agency level.

Here are some resources that may help in your search:

GSA Office of Information Integrity and Access (I2A) - Information Technology Policy

Dot Gov (.gov) Domain Registrar

TheSkyHornet

What is the intent of this?

To point you in the right direction, it would help to know what you're specifically looking for/to do.

Eclipse


"That Others May Zoom"

Starbird

Quote from: Eclipse on April 12, 2018, 05:01:31 PM
Quote from: Starbird on April 12, 2018, 02:02:36 PM
I am currently looking for federal regulations governing the use of .gov emails.

https://www.gpo.gov/fdsys/granule/CFR-2010-title41-vol3/CFR-2010-title41-vol3-part102-id2024

Thank you, Eclipse!

Quote from: TheSkyHornet on April 12, 2018, 03:18:14 PM
What is the intent of this?

To point you in the right direction, it would help to know what you're specifically looking for/to do.

I was considering doing CAP Email Policy for the "background" SDA.  The reason behind this is as all the newer cadets are just getting their ".gov" emails, so I had hoped that I could use my SDA not only as an SDA, but could also make a presentation out of it, using the "background" regulations and history governing .gov domains and emails, to make sure that the cadets (especially the younger ones... personally, IMO, 12 y/os with .gov emails isn't a good idea, but whatever...)  are aware that having a cap.gov email means that everything that they use if for reflects back on CAP as an organization, whilst dually making them aware that it is only to be used for official/professional CAP related business, and not for anything else. (I just have this vision of a 12 year old cadet getting his .gov email and thinking it would be funny to send things to his friends impersonating the gov't or whatever, or just generally abusing it to troll people... because younger kids don't always think before doing stuff.)

Quote from: PhoenixRisen on April 12, 2018, 03:18:05 PM
If you're looking for lower-level policy statements, such as Acceptable Use Policies, those are typically governed at the agency level.

Here are some resources that may help in your search:

GSA Office of Information Integrity and Access (I2A) - Information Technology Policy

Dot Gov (.gov) Domain Registrar

Thanks!  :)
Quote from: THRAWN on April 12, 2018, 03:12:21 PM
There is not a single across the board federal email "regulation". Each department, agency, and OA must comply to a basic use/retention policy, but each is responsible for developing their own internal regulations.

https://www.faa.gov/about/initiatives/records/faq/email/

http://www.dtic.mil/dtic/tr/fulltext/u2/a403646.pdf

https://www.doi.gov/ocio/policy-mgmt-support/information-and-records-management/email-guide-v2

Quote from: Starbird on April 12, 2018, 02:02:36 PM
Hello all!

I am currently looking for federal regulations governing the use of .gov emails.  I am familiar with CAPR 120-1, which covers the @[InsertYourWingHere].cap.gov emails that we use, but I am unable to find a blanket regulation (I'm assuming it would be FCC?) that govern the overall use of .gov emails, government/nationwide.  If anyone knows where I can find them, I'd be most interested!

I am looking for these regs as I am currently researching OPSEC and PII, and will be writing an assignment on the topic soon.

Good to know!  Now that you mention it, it makes a lot of sense that different agencies have different guidelines.

Quote from: kwe1009 on April 12, 2018, 02:41:36 PM
Not the FCC.  GSA oversees .gov

Thanks!




Brad

There are a couple of very good briefings on the national communications site, actually slide copies of presentations given at National Conference last year, one on OPSEC for Ops Officers and one on OPSEC for Comm Managers. Unfortunately I cannot upload them here as they are marked U//FOUO, however contact your squadron communications officer, they will be able to obtain a copy from you from the communications library.
Brad Lee
Maj, CAP
Assistant Deputy Chief of Staff, Communications
Mid-Atlantic Region
K4RMN

etodd

Quote from: Starbird on April 12, 2018, 09:00:53 PM

The reason behind this is as all the newer cadets are just getting their ".gov" emails, ...


Why?  Looking at the roster of our squadron I'm seeing everything from hotmail to yahoo, and others. I don't see any .gov ones.  What emails would Cadets be getting that make this necessary?

If you give them a different email address than what they normally check 50 times day .... they may only check it once a week right before the meeting.  :)

Seems it would be best to use the email address they constantly check.  JMHO

Oh ... maybe some think its the "cool" factor. OK, but the same deal applies as to how often most would check it.

(I'm a member of the "keep it simple" club.)
"Don't try to explain it, just bow your head
Breathe in, breathe out, move on ..."

spree610

Quote from: etodd on May 02, 2018, 02:24:37 PM
Quote from: Starbird on April 12, 2018, 09:00:53 PM

The reason behind this is as all the newer cadets are just getting their ".gov" emails, ...


Why?  Looking at the roster of our squadron I'm seeing everything from hotmail to yahoo, and others. I don't see any .gov ones.  What emails would Cadets be getting that make this necessary?

If you give them a different email address than what they normally check 50 times day .... they may only check it once a week right before the meeting.  :)

Seems it would be best to use the email address they constantly check.  JMHO

Oh ... maybe some think its the "cool" factor. OK, but the same deal applies as to how often most would check it.

(I'm a member of the "keep it simple" club.)

Many wings are going to Office365 or google for services. having these .gov accounts streamlines the access for cadets for DLs, Forms, etc. In our wing each account is actually dual aliased with .gov and .org because there are certain things we (CAP) can do with one but not the other officially.

Eclipse

Quote from: spree610 on May 02, 2018, 04:34:54 PM
Many wings are going to Office365 or google for services. having these .gov accounts streamlines the access for cadets for DLs, Forms, etc. In our wing each account is actually dual aliased with .gov and .org because there are certain things we (CAP) can do with one but not the other officially.

Such as?

"That Others May Zoom"

Eclipse

Quote from: etodd on May 02, 2018, 02:24:37 PM
Why?  Looking at the roster of our squadron I'm seeing everything from hotmail to yahoo, and others. I don't see any .gov ones. 

This is the universe's shocked face.

Quote from: etodd on May 02, 2018, 02:24:37 PM
What emails would Cadets be getting that make this necessary?

Meeting information, encampment and other activity information, access to their electronic
personnel file.

Also, basic professionalism at an early age - teach cadets that the web is more then Fortnite and TwistSpace.

"That Others May Zoom"

spree610

Quote from: Eclipse on May 02, 2018, 05:20:35 PM
Quote from: spree610 on May 02, 2018, 04:34:54 PM
Many wings are going to Office365 or google for services. having these .gov accounts streamlines the access for cadets for DLs, Forms, etc. In our wing each account is actually dual aliased with .gov and .org because there are certain things we (CAP) can do with one but not the other officially.

Such as?

Such as advertising, campaigning and fundraising, etc.

to the original poster. the "CAP.GOV Administrator" is your point of contact for questions regarding the regulation and use of the cap.gov domain.

Eclipse

Quote from: spree610 on May 02, 2018, 05:40:25 PM
Quote from: Eclipse on May 02, 2018, 05:20:35 PM
Quote from: spree610 on May 02, 2018, 04:34:54 PM
Many wings are going to Office365 or google for services. having these .gov accounts streamlines the access for cadets for DLs, Forms, etc. In our wing each account is actually dual aliased with .gov and .org because there are certain things we (CAP) can do with one but not the other officially.

Such as?

Such as advertising, campaigning and fundraising, etc.

Advertising and campaigning? You mean recruiting?

Feel free to cite the regulations that refer to an email domain in this regard.

And that goes for fundraising as well.

"That Others May Zoom"

Eclipse

Quote from: spree610 on May 02, 2018, 05:40:25 PM
to the original poster. the "CAP.GOV Administrator" is your point of contact for questions regarding the regulation and use of the cap.gov domain.

Not for a rank and file member.  There is a chain of SMEs for that.

"That Others May Zoom"

etodd

Quote from: Eclipse on May 02, 2018, 05:23:08 PM

Meeting information, encampment and other activity information, access to their electronic
personnel file.

Nothing OPSEC there, its always worked fine for using using their comcast or yahoo, etc address.  They can log into eServices now with any email address they signed up with.


Quote
Also, basic professionalism at an early age - teach cadets that the web is more then Fortnite and TwistSpace.

Gotcha.  OK , but still think it makes it less likely they receive said email, if not sent to their primary email address they normally check.

JMHO ... whatever.  ;)
"Don't try to explain it, just bow your head
Breathe in, breathe out, move on ..."

Eclipse

Quote from: etodd on May 02, 2018, 07:13:26 PM
Quote from: Eclipse on May 02, 2018, 05:23:08 PM

Meeting information, encampment and other activity information, access to their electronic
personnel file.

Nothing OPSEC there, its always worked fine for using using their comcast or yahoo, etc address.  They can log into eServices now with any email address they signed up with.

Who said anything about OPSEC, and this has nothing to do with eServices.

Properly managed units and activities have hundreds of documents, forms, calendars, surveys, etc.
You have to have an account with those collaboration systems in order to properly access and
edit the files (a .cap.gov account in GSuite if you're smart), and experience has shown that allowing
people to use their personal email addresses crucks up the emails with cat videos, and documents
are not "owned" by the .gov space, meaning important information can disappear on a whim or a mistake.

Professional organizations, and those that want to appear professional, issue their members emails
they can control that show the affiliation, and since CAP can do this for their members as zero cost,
why wouldn't they?

Considering the emphasis on "cyber", especially in the cadet program, this is a lesson and a tool CAP
can provide its members which is sorely needed, and sadly, especially among many of its adult
members as well.

"That Others May Zoom"