How do I find the point of contact for making IT recommendations that I believe could benefit the Army as a whole?

1LT Private RallyPoint Member — Thu, 29 May 2014 10:37:56 -0400

Let me give an example to clarify the question.

On the civilian side, I'm a software tester. Our R&D shop uses Trello to track projects and what not (it's a nifty tool if you haven't seen it before). In reality, you can use it to track essentially anything. Web based and all that.

However, on Army networks, you get shut down. I can understand this from the perspective of not wanting to have FOUO information going on there inadvertently or otherwise.

In this case, I'd like to submit the idea to DISA, or the appropriate powers that be, to possibly investigate having a tool for the NIPR and SIPR side of the house (whether it's rolling our own or contract with Fog Creek - the developers of Trello, to roll a solution for us).

So basically, what would be the best way of finding an appropriate point of contact to submit ideas like this? Is this something that I should just try running up my chain? Is there a PoC listing for the various project offices that one could submit ideas to?

Thanks in advance for any information provided!

Response by MAJ Dallas D. made May 29 at 2014 10:44 AM

MAJ Dallas D. — Thu, 29 May 2014 10:44:08 -0400

1LT Gillman,

I know at one time there was a page on AKO for Army Wide IT Suggestions. Not sure if it still there since us Retirees no longer have access.

Response by SGT Private RallyPoint Member made Jun 9 at 2014 9:58 AM

SGT Private RallyPoint Member — Mon, 09 Jun 2014 09:58:56 -0400

Sir, have you looked into STIG?

http://iase.disa.mil/stigs/

STIGs Home

The Security Technical Implementation Guides (STIGs) and the NSA Guides are the configuration standards for DOD IA and IA-enabled devices/systems. Since 1998, DISA has played a critical role enhancing the security posture of DoD's security systems by providing the Security Technical Implementation Guides (STIGs). The STIGs contain technical guidance to "lock down" information systems/software that might otherwise be vulnerable to a malicious...