<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Hmm... do we need to take any action with regard to ENS account initiations and/or other automatic sign-ups?<div><br><div> <span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Verdana; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Verdana; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; "><div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; "><div>- Lisa</div><div>------</div><div><br class="webkit-block-placeholder"></div></div></span><br class="Apple-interchange-newline"></div></span><br class="Apple-interchange-newline"> </div><div><br><div>Begin forwarded message:</div><br class="Apple-interchange-newline"><div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" color="#000000" style="font: 12.0px Helvetica; color: #000000"><b>From: </b></font><font face="Helvetica" size="3" style="font: 12.0px Helvetica">Karen Siderelis <<a href="mailto:Karen_Siderelis%Please_Do_Not_Reply_To_This_Email@usgs.gov">Karen_Siderelis%Please_Do_Not_Reply_To_This_Email@usgs.gov</a>></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" color="#000000" style="font: 12.0px Helvetica; color: #000000"><b>Date: </b></font><font face="Helvetica" size="3" style="font: 12.0px Helvetica">July 10, 2008 12:19:52 PM MDT</font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" color="#000000" style="font: 12.0px Helvetica; color: #000000"><b>To: </b></font><font face="Helvetica" size="3" style="font: 12.0px Helvetica">Lotus Mail Postmaster <<a href="mailto:lpostmaster@usgs.gov">lpostmaster@usgs.gov</a>></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; "><font face="Helvetica" size="3" color="#000000" style="font: 12.0px Helvetica; color: #000000"><b>Subject: </b></font><font face="Helvetica" size="3" style="font: 12.0px Helvetica"><b>All Employee Email ( All -- Transmitting Sensitive Information over the Internet )</b></font></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px; min-height: 14px; "><br></div> </div><div><br><br><br><br>In Reply Refer To:<br>Mail Stop 108<br> July 10, 2008<br> MEMORANDUM<br><br><br>To: All USGS Employees, Contractors, Emeritus and Volunteers<br><br>From: Karen Siderelis /signed/<br> Associate Director for Geospatial Information and Chief<br> Information Officer<br><br> Karen D. Baker /signed/<br> Associate Director for Administrative Policy and Services<br><br> Pam Malam /signed/<br> Associate Director for Human Capital<br><br>Subject: Transmitting Sensitive Information over the Internet<br><br><br>Purpose: This memorandum provides information and guidance for the<br>protection of Personally Identifiable Information (PII) and agency<br>Sensitive Information as it relates to the boundary of the Department of<br>the Interior (DOI) Enterprise Services Network (ESN).<br><br>Background: The DOI ESN is the network boundary between the Internet and<br>the internal network of all Bureaus of the Interior. The DOI, Office of<br>the Chief information Officer (OCIO) has communicated to bureaus and<br>offices that, through network discovery and traffic monitoring, Personally<br>Identifiable and Sensitive Information (PII/SI) is being sent from the USGS<br>to external (Internet) addresses via email and other forms of popular<br>internet social communication (Instant Messaging (IM)).<br><br>As many of these forms of communication are sent in clear text format, any<br>party with available software tools has the ability to scan Internet<br>traffic (exiting the ESN) and therefore may have the ability to view this<br>information. Through network monitoring of USGS traffic, DOI has reported<br>the following examples of information obtained by the DOI scanners:<br>- Social Security Numbers<br>- Credit Card Numbers<br>- Usernames / Passwords<br>- Personnel Security Information<br>- Law Enforcement Information<br><br>This week, DOI has also informed USGS management that every discovery of<br>sensitive information, exiting our network boundary, is required by the<br>Office of Management and Budget (OMB) to be classified as a Security<br>Incident requiring investigation and bureau action.<br><br>Required Action: The Geospatial Information Office (GIO) in partnership<br>with the Office of Administration Policy and Services (APS) has released<br>several security and privacy memorandums related to safeguarding this<br>information. Those memorandums can be accessed at the following website:<br><a href="http://internal.usgs.gov/gio/security/policy.html">http://internal.usgs.gov/gio/security/policy.html</a>.<br><br>Please review this site and make the appropriate changes as it relates to<br>protecting PII and Sensitive Information. Of particular importance are<br>protection of social security numbers, credit card numbers, medical<br>information, financial information, and sensitive business information.<br>Information of this type must be protected regardless of whether it is<br>stored digitally (e.g. on a computer or USB drive) or on paper (e.g. an<br>OPF, contract, or credit card invoice).<br><br>All Employees, Contractors, Emeritus and Volunteers are reminded to avoid<br>the use of Social Security Numbers (SSN), Credit Card Numbers, Usernames<br>and Passwords in e-mails or any other electronic transmissions. Sending<br>this information via email or IM outside of the DOI ESN is a violation of<br>Departmental and OMB policy.<br><br>Your attention and awareness to safeguarding Personally Identifiable<br>Information and Sensitive Information is paramount to ensuring that we<br>comply with these requirements and protecting your identity. Your support<br>is greatly appreciated. Questions regarding this memorandum can be<br>directed to Paul E. Exter (<a href="mailto:peexter@usgs.gov">peexter@usgs.gov</a>), 443-498-5534.<br><br></div></div><br></div></body></html>