Intelligence Community Directive (ICD) governs Intelligence Community (IC) systems, differing from FISMA, and aligns with NIST RMF controls.
Applicability:
- This Directive applies to the IC as defined by the National Security Act of 1947, as amended, and to such elements of any other department or agency as may be designated an element of the IC by the President, or jointly by the Director of National Intelligence (DNI) and the head of the department or agency concerned.
- This Directive only applies to intelligence activities (including covert action), intelligence sources or methods, or cryptology;
- This Directive also applies to the handling of SCI by any individual who receives, handles, stores, or processes SCI, including: executive departments and agencies of the U.S. Government, the Executive Office of the President, the legislative and judicial branches of the U.S. Government and all other U.S. entities:
- State, local, or tribal governments;
- State, local, and tribal law enforcement and firefighting entities;
- public health and medical entities;
- regional, state, local, and tribal emergency management entities, including State Adjutants General and other appropriate public safety entities; or
- private sector entities serving as part of the nation’s Critical Infrastructure/Key Resources.
URL: ICD Explanation