Web and Social Media Policies

General

• Online Information Management and Electronic Messaging (DoDI 8170.01)
• Harassment Prevention and Response in the Armed Forces (DoDI 1020.03)
• Information Collection under the Paperwork Reduction Act (PRA) (OMB Memo)
• Internet Domain Name and Internet Protocol Address Space Use and Approval (DoDI 8410.01)
• Joint Ethics Regulation (DoD 5500.7-R)
• Management of The Department of Defense Information Enterprise (DoDD 8000.01)
• Social Media, Web-Based Interactive Technologies, and the Paperwork Reduction Act (OMB Memo)
• Standards of Conduct (DoDD 5500.07)
• DoD Vulnerability Disclosure Policy
   

Social Media Specific

• Social Media Hub
• Terms of Service Agreement Template
• Antideficiency Act Implications of Certain Online Terms of Service Agreements (OMB M-13-10) Applies to individual use of social media
• Standards of Conduct as Applied to Personal Social Media Use (Office of Government Ethics Legal Advisory)

Web Specific

• DoD Website Registry
• Policies for Federal Agency Public Websites and Digital Services (OMB M-17-06)
• Policy to Require Secure Connections across Federal Websites and Web Services (OMB M-15-13)
• Commercial Public Key Infrastructure (PKI) Certificates on Externally-Facing Unclassified Web Servers(CAC Required)
• U.S. Web Design Standards

Legislation

• Children's Online Protection Act of 1998
• Connected Government Act
• E-government Act of 2002
• FOIA - Freedom of Information Act
• The Government Paperwork Elimination Act
• PRA - Paperwork Reduction Act of 1995
• The Privacy Act
• Records Management by Federal Agencies

Content

• Clearance of DoD Information for Public Release (DoDD 5230.09)
• Copyrighted Sound and Video Recordings (DoDD 5535.4)
• Distribution Statements on Technical Documents (DoDI 5230.24)
• Information Quality

Information Security Program:

• Overview, Classification, and Declassification (DoDM 5200.01 Vol. 1)
• Marking of Classified Information (DoDM 5200.01 Vol. 2)
• Protection of Classified Information (DoDM 5200.01 Vol. 3)
• Controlled Unclassified Information (CUI) (DoDM 5200.01 Vol. 4)
• Intelligence Activities (DoDD 5240.01)
• Operations Security (OPSEC) Program Manual (DoD 5205.02-M)
• Principles of Information
• Accessibility of Information and Communications Technology (ICT) (DoDM 8400.01)
• Protection of Sensitive Agency Information (OMB M-06-16)
• Release of Official Information in Litigation and Testimony by DoD Personnel as Witnesses (DoDD 5405.2)
• Security and Policy Review of DoD Information for Public Release (DoDI 5230.29)
• Management of Serious Security Incidents Involving Classified Information (DoDD 5210.50)
• Withholding of Unclassified Technical Data from Public Disclosure (DoDD 5230.25)
• Public Affairs Relations with For-Profit Businesses and Business Industry Organizations (DoDI5410.20)
• Records Management Program (DoDI 5015.02)
• Guidance on Managing Social Media Records (NARA Bulletin 2014-02)
• Visual Information (VI) (DoDI 5040.02)

Privacy

• Defense Privacy and Civil Liberties Office (Home page)
• Guidance for Online Use of Web Measurement and Customization Technologies, June 25, 2010 (OMB M-10-22)
• Information Collection and Reporting (DoDI 8910.1)
• Privacy Impact Assessment (PIA) Guidance (DoDI 5400.16)
• Adapted Privacy Impact Assessment (PIA)
• Privacy Policy Example
• DoD Privacy Program (DoDD 5400.11)
• Department of Defense Privacy Program Regulation (DoD 5400.11-R)
• Procedures Governing the Activities of DoD Intelligence Components That Affect United States Persons (DoD 5240.1-R)
• Safeguarding Against and Responding to the Breach of Personally Identifiable Information (OMB M-07-16)
• DoD Surveys (DoDI 1100.13)

Systems Security

• Cybersecurity Activities Support to DoD Information Network Operations (DoDI 8530.01) (CAC Required)
• Cybersecurity (DoDI 8500.01)
• Department of Defense Computer Network Defense (CND) Service Provider Certification and Accreditation Process Program Manual (DoD 8530.01-M) (CAC Required)
• Information Assurance Support Environment (IASE)
• Public Key Infrastructure (PKI) and Public Key (PK) Enabling (DoDI 8520.2)
• Risk Management Framework (RMF) for DoD Information Technology (IT) (DoDI 8510.01)
• Web Server Security Technical Implementation Guide (STIG V7R1)

 
Detailed DoD policy guidance and procedures are provided for DoD employees on the Webmasters
group on milBook.