ato-signature-vote-usa-gov

ato-signature-vote-usa-gov

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Memorandum for Andrew Stroup
Product and System Owner of vote.usa.gov
        
Thru: 
Andrew Stroup
Director of Product and Technology, Presidential Innovation Fellows

From: 
Noah Kunin
Acting Deputy Associate Administrator, 18F
Authorizing Official

Subject: Authority to operate decision for https://vote.usa.gov.
 
A scoped security assessment of this system has been performed by the Presidential Innovation Fellows in accordance with a modified General Services Administration (GSA) Security Authorization Process in support of a Limited Authority to Operate (ATO) for GSA information systems pursuing an agile development methodology and residing on infrastructures that have a GSA ATO concurred by the GSA Chief Information Security Office or the FedRAMP program.

Using NIST FIPS 199 methodology, this system has been given the following security categories if the following are lost:

Confidentiality: n/a
Integrity: Low
Availability: Low

The system contains only publicly available information for general consumption and overall meets the requirements in Guidelines for Granting Authority to Operate 18F Hosted Open Data Systems. 
 
Based on the results from automated scans of the infrastructure, operating system, code base, and attack surface area, I have determined that the risk to agency operations, data, or assets resulting from the operation of the system is acceptable.

Accordingly, I am issuing an authorization to operate the system in its existing environment through March 9th, 2017 under the following conditions:
 
The security boundary of the underlying infrastructure or the system will not be significantly altered; changes will require re-assessment. This includes any inclusion of personally identifiable information (PII) or any user submitted data.
The security authorization of the information system will remain in effect through the date above, as long as the system falls under the definition of an OpenData system and any critical security issues identified as a result of continuous monitoring are remediated immediately.
 
System Security Plan: https://github.com/presidential-innovation-fellows/vote-2016/blob/system-security-plan.yml

Approved:

PGP Signature

Noah Kunin
Infrastructure Director, 18F

Thru:

PGP Signature

Andrew Stroup
Director of Product and Technology, Presidential Innovation Fellows
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org

iQIcBAEBCgAGBQJXT0n8AAoJEDXOQ1/8X0cNpMAP/3tavUNUFp6IrfZxpR3rJtx/
4Dg3F363+Tn2YtNeTULpxTfdbNpGVrsubwM52+F2jnKXMubxa7WGgyEETodWZ3jg
uBPPH75+DkdF3FEKe5PXsLhE1Co3TsY2jJZkGUM8iBDCQlpFRB4p0XoNMLIgNGQj
KEEXUltO4gqhndT5kgko4yUKVLnievMeS5J1DnrDEZ90F0PL1ouUA2mwCYLgz58d
iYFvbba2V4lBctom3YT3/U1ZI058ljGBSoqixclUVInb7Hw8Dd32+ALyY1dQySiw
wG2nbe+Pj6autsMDf5p3KXdo4BqKhfwQCczcXz+aBJjTGQEbU5lkyrNv6l9trZu3
pC9MxLsqZLbPh0kw7bXcKxm7lWmo2BoCrR6B65lHkS8Oysk0DMngXIShYLyBCHWG
qwIFGLPOQqjKHOVLTazEY0fQc4p0k2+DcHOdSZi5z9FVMdam8GqhnH1hmAntLcKx
yDb2ajhufRBZL+UqyIopKXvNfpRqLZZ3iwqKFXuabgiXb/I9leyoUGbfQtrMiEOH
nAFjidmtx2uys/XuU2yHqBQ71V1ZChh46cK0vb7ke8VH7jrwEhbKtedLs0HoPk9a
aPizvLy5AXygl+7XNZ88mk9Uc5/iyopWmMkV2zCp4uCYMHa87OgN2oGBXsga+U3z
/LiYPFIUC88TFamaRJlU
=56kK
-----END PGP SIGNATURE-----