Which document or report outlines the necessary procedures for the protection of sensitive agency information?

Which document or report outlines the necessary procedures for the protection of sensitive agency information?

• A. OMB M-06-16
• B. NIST SP 800-53
• C. M-14-04
• D. FISM 14-01

Answer: (A)

The correct choice in this context is OMB M-06-16, which establishes critical guidelines and procedures aimed at protecting sensitive agency information. This memo, issued by the Office of Management and Budget (OMB), specifically addresses the importance of safeguarding sensitive but unclassified information, particularly in the context of federal agencies. OMB M-06-16 emphasizes the need for consistent and effective protection measures across federal agencies, outlining requirements for risk assessments, the implementation of security controls, and the establishment of detailed operational procedures. The document serves as a foundational policy tool that agencies can refer to in order to ensure compliance with federal laws and regulations concerning information security. Other documents mentioned, such as NIST SP 800-53, focus on guidelines for selecting security controls for information systems but do not specifically detail procedures for protecting sensitive agency information in the manner that OMB M-06-16 does. Similarly, M-14-04 and FISM 14-01, while related to federal IT security, do not provide the same level of procedural framework specifically aimed at safeguarding sensitive information. In this way, OMB M-06-16 stands out as the key document for outlining the necessary procedures for the protection of sensitive agency information, ensuring agencies have clear and actionable

The correct choice in this context is OMB M-06-16, which establishes critical guidelines and procedures aimed at protecting sensitive agency information. This memo, issued by the Office of Management and Budget (OMB), specifically addresses the importance of safeguarding sensitive but unclassified information, particularly in the context of federal agencies.

OMB M-06-16 emphasizes the need for consistent and effective protection measures across federal agencies, outlining requirements for risk assessments, the implementation of security controls, and the establishment of detailed operational procedures. The document serves as a foundational policy tool that agencies can refer to in order to ensure compliance with federal laws and regulations concerning information security.

Other documents mentioned, such as NIST SP 800-53, focus on guidelines for selecting security controls for information systems but do not specifically detail procedures for protecting sensitive agency information in the manner that OMB M-06-16 does. Similarly, M-14-04 and FISM 14-01, while related to federal IT security, do not provide the same level of procedural framework specifically aimed at safeguarding sensitive information.

In this way, OMB M-06-16 stands out as the key document for outlining the necessary procedures for the protection of sensitive agency information, ensuring agencies have clear and actionable