OMB Circular A-71

Citation
Office of Management and Budget, OMB Circular A-71, Security of Federal Automated Information Systems (July 1978).

Overview
This circular required (1) that security requirements be assessed and provided at several points in the development of sensitive application systems; (2) that adequate security features be included in all related documents for procurement of material or services and tested for completeness and quality before acceptance; (3) that risk analyses and physical security reviews be conducted at specified minimal intervals; (4) that adequate contingency plans be developed and tested; (5) that sensitive systems be evaluated and certified/recertified at specified minimal intervals and subjected to rigorous ADP audit as deemed necessary; and (6) that personnel, including contractors, working in the ADP environment have proper personnel security clearances.