The directives listed on this page include their associated policies, procedures, standards and guidance.  All directives on this page are in effect.

Information Management/Information Technology Program Management

Information Management

• Security & Privacy

  CIO Number	Title	Related Documents
  CIO 2150.3	Environmental Protection Agency Information Security Policy	Procedures Information Security – Access Control Procedures Information Security – Awareness and Training Procedures Information Security – Audit and Accountability Procedures Information Security – Security Assessment and Authorization Procedures Information Security – Interim Configuration Management Procedures Information Security – Contingency Planning Procedures Information Security – Identification and Authentication Procedure Information Security – Incident Response Procedures Information Security – Interim Maintenance Procedures Information Security – Media Protection Procedures Information Security – Interim Physical and Environmental Protection Procedures Information Security – Interim Planning Procedures Information Security – Interim Personnel Security Procedures Information Security – Risk Assessment Procedures Information Security – Interim System and Services Acquisition Procedures Information Security – Interim System and Communications Protection Procedures Information Security – Interim System and Information Integrity Procedures International Travel Procedure For Mobile Devices Information Security – Roles and Responsibilities Procedures Information Security – Spillage of Classified Information Onto Unclassified Systems Information Security – National Rules of Behavior Information Security – Privacy Procedure Information Security – Program Management Procedures Information Security - Data Loss Prevention Procedure Guidance Information Security – Guidance for Manually Completing the Information Security Awareness Training
  CIO 2150.4	Mobile Computing Policy	Procedures International Travel Procedures for Mobile Devices Mobile Computing Management Procedures
  CIO 2151.1	Privacy Policy	Procedures Procedure for Responding to Breaches of Personally Identifiable Information (PII) Procedures for Preparing and Publishing Privacy Act Systems of Records Notices Procedures for Preparing Privacy Impact Assessments Procedures for Preparing Privacy Act Statements Personally Identifiable Information (PII) Incident Handling & Response Procedure Conducting Privacy On-Site Reviews Processing Privacy Act Requests Computer Matching Procedure Protecting Sensitive Personally Identifiable Information (SPII)

• Records

  CIO Number	Title	Related Documents
  CIO 2155.4	Interim Records Management Policy	Procedures Procedures for Electronic Management of Rulemaking and Other Docketed Records in the Federal Docket Management System Collection and Retention Procedures for Electronically Stored Information (ESI) Collected Using E-Discovery Tools Preservation of Separating, Transferring, or Separated Personnel's Records in Accordance with the Federal Records Act Digitization (Scanning) Procedures Digitization (Scanning) Standards Managing Social Media Records Procedure Essential Records Preserving Agency Information of Separating Personnel Interim Procedure Guidance Records Management Manual
  CIO 2156.0	Preservation of Separated Personnel’s Electronically Stored Information Subject to Litigation Holds	Not Applicable
  CIO 2157.1	Freedom of Information Act (FOIA) Policy	Procedures Procedures for Responding to Freedom Of Information Act (FOIA) Requests

• Information Access

  CIO Number	Title	Related Documents
  CIO 2170.2	EPA National Library Network Policy	Procedures, Standards and Guidance EPA Library Disaster Response and Continuity of Operations (COOP) Procedures EPA Library Cataloging Procedures EPA Library Collection Development & Management Procedures EPA Library Network Communication Strategies Digitization Processes for EPA Libraries EPA Library Facility Management Procedures EPA Library Interlibrary Loan/Document Delivery Procedures EPA Library Materials Dispersal Procedures EPA Library Public Access Procedures EPA Library Reference and Research Services Procedures EPA Repository Library Management Procedures EPA National Library Network Standards for Core Library Services EPA Library Usage Statistics Procedures
  CIO 2171.0	Information Access Policy	Procedures Information Access Procedures Customer Service and Public Access Standards

• Web

  CIO Number	Title	Related Documents
  CIO 2180.1	Web Governance and Management	Procedures Procedures, Standards and Guidance Intranet Cookies and Other Tracking Methods Procedure Web Measurement and Customization Technologies (Cookies) Procedure (Website) External Site Links Procedure (Website) Web Content Types and Review Procedure
  CIO 2181.0	Posting Copyrighted Works on EPA Web Site	Guidance Posting Copyrighted Works on EPA Web Site "Copyright Policy" Guidance
  CIO 2182.1	Children's Privacy and Children's Copyright Policy	Guidance Children's Privacy Notice Guidance
  CIO 2184.0	Social Media Policy	Procedures Using Social Media to Communicate Internally at EPA Procedure Using Social Media to Communicate with the Public Procedure Representing EPA Online Using Social Media Procedure Should I respond or not on EPA's behalf? (Website)

• General CIO Directives

  CIO Number	Title	Related Documents
  CIO 2190.0-P-01.0	Reviewing and Updating Agencywide Directives Administered by the EPA CIO	Not Applicable