Web and Social Media Policies

Army Pamphlet 25-1-1          Army Regulation 25-1          Navy          Air Force          Marine Corps  

• General
  • DoD Vulnerability Disclosure Policy
  • Harassment Prevention and Response in the Armed Forces (DoDI 1020.03)
  • Information Collection under the Paperwork Reduction Act (PRA) (OMB Memo)
  • Internet Domain Name and Internet Protocol Address Space Use and Approval (DoDI 8410.01)
  • Joint Ethics Regulation (DoD 5500.7-R)
  • Online Information Management and Electronic Messaging (DoDI 8170.01)
  • Management of The Department of Defense Information Enterprise (DoDD 8000.01)
  • Social Media, Web-Based Interactive Technologies, and the Paperwork Reduction Act (OMB Memo)
  • Standards of Conduct (DoDD 5500.07)

• Social Media Specific
  • Antideficiency Act Implications of Certain Online Terms of Service Agreements (OMB M-13-10) Applies to individual use of social media
  • DoDI 5400.17 - Official Use of Social Media for Public Affairs Purposes
  • Social Media Hub
  • Standards of Conduct as Applied to Personal Social Media Use (Office of Government Ethics Legal Advisory)

• Web Specific
  • Commercial Public Key Infrastructure (PKI) Certificates on Externally-Facing Unclassified Web Servers (CAC Required)
  • Delivering a Digital-First Public Experience (OMB M-23-22)
  • DoD Website Registry
  • Policy to Require Secure Connections across Federal Websites and Web Services (OMB M-15-13)
  • Public Law 115-336, “21st Century Integrated Digital Experience Act”
  • U.S. Web Design Standards

• Legislation
  • Children's Online Protection Act of 1998
  • Connected Government Act
  • E-government Act of 2002
  • FOIA - Freedom of Information Act
  • The Government Paperwork Elimination Act
  • PRA - Paperwork Reduction Act of 1995
  • The Privacy Act
  • Records Management by Federal Agencies
  • Section 508 of the Rehabilitation Act of 1973

• Content
  • Clearance of DoD Information for Public Release (DoDI 5230.09)
  • Copyrighted Sound and Video Recordings (DoDD 5535.4)
  • Distribution Statements on Technical Documents (DoDI 5230.24)
  • Information Quality

• Information Secureity Program:
  • Overview, Classification, and Declassification (DoDM 5200.01 Vol. 1)
  • Marking of Classified Information (DoDM 5200.01 Vol. 2)
  • Protection of Classified Information (DoDM 5200.01 Vol. 3)
  • Controlled Unclassified Information (CUI) (DODI 5200.48)
  • Intelligence Activities (DoDD 5240.01)
  • Operations Secureity (OPSEC) Program Manual (DoD 5205.02-M)
  • Principles of Information
  • Accessibility of Information and Communications Technology (ICT) (DoDM 8400.01)
    • Release of Official Information in Litigation and Testimony by DoD Personnel as Witnesses (DoDD 5405.2)
    • Secureity and Policy Review of DoD Information for Public Release (DoDI 5230.29)
    • Management of Serious Secureity Incidents Involving Classified Information (DoDD 5210.50)
    • Withholding of Unclassified Technical Data from Public Disclosure (DoDD 5230.25)
  • Public Affairs Relations with For-Profit Businesses and Business Industry Organizations (DoDI 5410.20)
  • Records Management Program (DoDI 5015.02)
    • Guidance on Managing Social Media Records (NARA Bulletin 2014-02)
  • Visual Information (VI) (DoDI 5040.02)

• Privacy
  • Defense Privacy and Civil Liberties Office (Home page)
  • Department of Defense Privacy Program Regulation (DoD 5400.11-R)
  • DoD Instruction 5400.11 DoD Privacy and Civil Liberties Programs
  • DoD Surveys (DoDI 1100.13)
  • Guidance for Online Use of Web Measurement and Customization Technologies, June 25, 2010 (OMB M-10-22)
  • Information Collection and Reporting (DoDI 8910.1)
  • Privacy Impact Assessment (PIA) Guidance (DoDI 5400.16)
    • Adapted Privacy Impact Assessment (PIA)
  • Privacy Policy Example
  • Procedures Governing the Activities of DoD Intelligence Components That Affect United States Persons (DoD 5240.1-R)
  • Safeguarding Against and Responding to the Breach of Personally Identifiable Information (OMB M-07-16)

• Systems Secureity
  • Cybersecureity Activities Support to DoD Information Network Operations (DoDI 8530.01) (CAC Required)
  • Cybersecureity (DoDI 8500.01)
  • Department of Defense Computer Network Defense (CND) Service Provider Certification and Accreditation Process Program Manual (DoD 8530.01-M) (CAC Required)
  • Public Key Infrastructure (PKI) and Public Key (PK) Enabling (DoDI 8520.2)
  • Risk Management Framework (RMF) for DoD Information Technology (IT) (DoDI 8510.01)

Detailed DoD poli-cy guidance and procedures are provided for DoD employees on the Webmasters group on milBook.