DHS seeks information on role-based access control

The Homeland Security Department's CIO office and central IT purchasing organization have asked the public for advice on how to adopt role-based control of access to computer systems.

In a request for information issued August 3rd, DHS' CIO office and the Information Technology Acquisition Center described the topics they are exploring.

As is normal in the case of RFI releases, the department emphasized that its information request did not comprise a request for proposals or bind DHS to issue a proposal request. But procurement organizations tend to issue RFIs as a method of gathering technology, policy and market research on topics that later generate contracts.

DHS specified several areas of role-based access control about which it seeks detailed information, including:

• 
  
• Methodology
  
• Approach
  
• Published standards or best practices
  
• Implementations and similar efforts
  
• Support tools
  
• Organizations
  
• Time and cost estimates.