4: Information Security

Protect the financial and project information needed to carry out the OPIC mission.

Other Information:

Information Security covers a broad spectrum of programs designed to ensure the integrity of all data and information stored within OPIC’s information systems. These areas are broken down into Information Assurance (IA), Continuity of Operations, Disaster Recovery, and Certification and Accreditation. Information Assurance protects information to ensure that it is reliably available to users as needed. Continuity of Operations deals with the ability to reconstitute OPIC information systems in the event of any form of a systems failure or disaster. Certification and Accreditation is a program that assesses information systems to operate within security standards and accredits them to safeguard the business information of the Corporation. Performance Measures: The following represents the performance measures for the IT Security Goals: • All OPIC information systems are under the guidance of a comprehensive Information Assurance plan that is regularly updated to reflect the latest trends and threats; • A complete, tested information technology COOP plan that identifies three levels of failure and the OCIO response to each to reconstitute OPIC information systems; and, • A complete, approved C&A document for all OPIC information systems.

Objective(s):

4.1: Policies, Standards, and Procedures

4.2: Information Assurance

4.3: Security Operations

4.4: COOP

4.5: Disaster Recovery

4.6: Certification and Accreditation

4.7: Security Training and Awareness

Content