DOJ · DOJ-0357 · record R1782
Creating and Maintaining IT Security Packages for Authorizations
Department of Justice · Department of Justice / DEA
Overview
- Development stage
- In development or acquisitionSource: a) Pre-deployment – The use case is in a development or acquisition status.
- High-impact designation
- Presumed high-impact, determined notSource: b) Presumed high-impact, but determined not high impact
- Impact justification
- Does not produce an output that serves as a principal basis for decisions or actions with legal, material, binding, or significant effect on any of the individuals or entities identified in OMB-25-21.
- Start date
- Not reported
- Withheld from public reporting
- NoSource: a) No
Mission
- Topic area
- Administrative Functions
- Operational functions
- Cyber threat detection Derived by keyword rules; see methodology
Problem the AI is intended to solve
Cybersecurity personnel want to automate the identification of security controls that can have implementation statements, create and maintain security packages for authorizations, keep up with compliance requirements, and more quickly onboard new systems and applications.
Expected benefits
Reduces costs while enabling use to maintain compliance and consistency
System outputs
Generated implementation statements for security packages, reporting, trending, dashboarding
Technology
- AI classification
- Generative AISource: Generative AI: AI that generates new or synthetic content (e.g., images, videos, audio, text, code).
- System name(s)
- Not reported
- Custom-developed code
- Not reported
- Public source code
- Not reported
Sourcing
- How it was built
- Not reported
- Vendor (as reported)
- Not reported
- Vendors (standardized)
- None on the standard list
A vendor is the supplier named by the agency. It does not identify the underlying model or AI technology.
Data and privacy
- Involves PII
- Not reported
- Privacy Impact Assessment
- Not reported
- Authorization to Operate
- Not reported
- Demographic features
- Not reported
- Training and evaluation data
- Not reported
- Federal Data Catalog
- Not reported
Governance
0 of 8 minimum-practice questions answered. A blank answer means the agency reported nothing; it does not mean the practice is absent.
Pre-deployment testingNo answer reported
AI impact assessmentNo answer reported
Independent reviewNo answer reported
Ongoing monitoringNo answer reported
Operator trainingNo answer reported
Fail-safeNo answer reported
Appeal processNo answer reported
User and public consultationNo answer reported
Potential impacts and how they were identified
Not reported