Sustaining and Scaling Civic and Government Technology: A White Paper on Challenges, Best Practices and Recommendations

whitePaper | February 12, 2022

At Google, we know that transparency plays a critical role in earning and maintaining customer trust. That is why Google Cloud has taken steps to develop industry-leading product capabilities that enhance the control that our customers have over their data, and that give customers visibility into when and how their data is accessed. We think it is important to be clear at the outset about where we stand: our customers own their data and have the right to control access to it. Like other technology and communication companies, Google receives requests from governments and courts around the world for customer information, including requests for Google Cloud customer information. Google Cloud has developed a transparent, fair, and thorough process that meets international best practices when it comes to data access requests from law enforcement agencies and governments. Google provides a response on a case-by-case basis, taking into account different circumstances and informed by legal requirements, customer agreements, and privacy policies. We are committed to protecting privacy while also complying with applicable laws.

whitePaper | February 25, 2022

Microsoft Azure Government delivers a complete government cloud solution to the U.S. Public Sector. The Azure Government cloud provides physical isolation, screened personnel and commitments to the public sector compliance. Microsoft is committed to implementing world-class security solutions and state of the art technology to meet the applicable controls of NIST 800-53 publication, Federal Risk and Authorization Management Program (FedRAMP) and the CJIS Security Policy

whitePaper | August 15, 2022

Cyberattacks are conducted via cyberspace and target an enterprise’s use of cyberspace for the purpose of disrupting, disabling, destroying, or maliciously controlling a computing environment or infrastructure; or destroying the integrity of the data or stealing controlled information.1 Recent cyberattacks such as those executed against SolarWinds and its customers, and exploits that take advantage of vulnerabilities such as Log4j, highlight weaknesses within software supply chains, an issue which spans both commercial and open source software and impacts both private and Government enterprises. Accordingly, there is an increased need for software supply chain security awareness and cognizance regarding the potential for software supply chains to be weaponized by nation state adversaries using similar tactics, techniques, and procedures (TTPs).

whitePaper | February 2, 2022

The United Kingdom is an unparalleled success story – a multi-cultural, multi-national, multi-ethnic state with the world’s best broadcaster; a vibrantly creative arts sector; a National Health Service which guarantees care for every citizen; charities and voluntary groups which perform a million acts of kindness daily; globally renowned scientists extending the boundaries of knowledge every year; entrepreneurs developing the products and services which bring joy and jobs to so many; and millions of citizens whose kindness and compassion has been so powerfully displayed during the COVID-19 pandemic.

whitePaper | February 21, 2020

Protecting our Nation’s security and continuing to enhance the prosperity of our citizens are my top priorities. Ensuring that the United States is protected against espionage and other damaging intelligence activities conducted by our foreign adversaries is essential to meeting those goals. The Nation faces an expanding array of foreign intelligence threats by adversaries who are using increasingly sophisticated methods to harm the United States.

whitePaper | February 10, 2020

U.S. federal agencies operate some of the world’s largest and most complex digital networks, but many of them rely on older, legacy technology for critical operations. Add to this the fact that the federal government is highly targeted by nationstate adversaries and traditional criminals alike, and the need for comprehensive cybersecurity protection is readily apparent. Fortinet provides a platform that enables end-to-end integration of an agency’s security architecture, and a broad suite of security and networking tools that addresses multiple use cases. An integrated security infrastructure allows for true automation of security processes, from detection to remediation.