DAOD 6002-0, Information Technology

Table of Contents

  1. Introduction
  2. Definitions
  3. Policy Direction
  4. Authorities
  5. References

1. Introduction

Date of Issue: 2012-04-18

Application: This DAOD is a directive that applies to employees of the Department of National Defence (DND employees) and an order that applies to officers and non-commissioned members of the Canadian Forces (CF members).

Approval Authority: Assistant Deputy Minister (Information Management) (ADM(IM))

Enquiries: Director Information Management Policy and Standards (DIMPS)

2. Definitions

communication and information system (système de communication et d’information)
An assembly of equipment, methods and procedures and, if necessary, personnel, organized to accomplish specific information conveyance and processing functions.
information management (gestion de l’information)
Has the same meaning as in the Treasury Board Policy on Information Management
information technology (technologies de l’information)
Has the same meaning as in the Treasury Board Directive on Management of Information Technology.
operational authority (autorité opérationnel)
The individual who has the authority and responsibility to define requirements, operating principles and concepts of operations, to set the operational standards and to accept risk within his or her area of responsibility
security authority (autorité de sécurité)
The individual responsible for identifying risk, providing advice and standards on the security aspects of a system or capability for endorsement by the operational authority and technical authority, and for monitoring compliance to those standards in his or her area of responsibility.
technical authority (autorité technique)
The individual responsible for providing technical advice, setting specifications and standards, managing configurations and ensuring compliance within his or her area of responsibility.

3. Policy Direction

Context

3.1 The ADM(IM) is the functional authority for information technology (IT) and the Chief Information Officer (CIO) for the DND and the CF.

3.2 IT is a strategic asset that must be managed in accordance with the mandate of the DND and the CF.

3.3 Effective management of IT requires that the operational, technical and security authorities clearly understand their roles and scope of authority when participating in the decision-making process. This DAOD establishes the authority of the operational, technical and security authorities within the context of a communication and information system (CIS).

3.4 The DAOD 6002 series, along with the DND and CF IM and IT Policy Framework, should be read in conjunction with other relevant ADM(IM) policies, instructions, directives, standards and guidance.

Policy Statement

3.5 The DND and the CF are committed to establishing clear authorities for the management, delivery and support of IT.

Requirements

3.6 The DND and the CF must:

  1. employ a consistent definition of IT roles, functions and services;
  2. exercise authority by issuing direction and communicating expectations for IT;
  3. establish direction that builds on and is in alignment with Government of Canada policy; and
  4. ensure the provision of clear, concise and timely direction for the management, delivery and support of IT.

4. Authorities

Authority Table

4.1 The following table identifies the authorities associated with this DAOD:

The … has the authority to …
ADM(IM)
  • ensure the effective and efficient management of IT;
  • issue policies, directives, standards and guidance for IT; and
  • establish the roles and responsibilities for each area of IT defined in the DND and CF IM and IT Policy Framework.
operational authority
  • define the business requirements, operating principles and concept of operation of a CIS;
  • set the operational requirements for a CIS capability; and
  • accept any risk specific to a CIS that is within their area of responsibility.
technical authority
  • advise the operational authority and security authority on all technical matters;
  • ensure the effective and efficient management and configuration of a CIS; and
  • set standard operating procedures for a CIS.
security authority
  • advise the operational authority and technical authority on all security matters;
  • determine risk specific to a CIS that is within their area of responsibility; and
  • develop and recommend system specific security policy for endorsement by the technical authority and the operational authority.

5. References

Acts, Regulations, Central Agency Policies and Policy DAOD

Other References