19 FAM – Cybersecurity Guidance
This volume details the Department of State’s cybersecurity policy framework.
-
Purpose & Scope: Established to align departmental systems and practices with federal cybersecurity mandates, 19 FAM sets forth required controls for information protection and risk mitigation Foreign Affairs Manual+13Foreign Affairs Manual+13Foreign Affairs Manual+13.
-
Governance & Structure: It includes hierarchical governance elements, general operating guidelines, and component-specific procedures to ensure compliance across all systems Foreign Affairs Manual.
-
Security Objectives: Emphasis is placed on regulatory compliance, including operational technology (OT) systems, outlining responsibilities for system owners and defining objectives such as confidentiality, integrity, and availability Foreign Affairs Manual.
In short, 19 FAM is core to safeguarding sensitive State Department networks and data by embedding robust cybersecurity controls through governance, policy, and accountability.
20 FAM – Data and Artificial Intelligence
This volume marks a key advancement in the Department’s commitment to managing data and responsibly applying AI.
-
Overview & Intent: 20 FAM supports the responsible adoption and scaling of AI across the Department by providing structured policy guidance on data and AI use Foreign Affairs Manual+15Foreign Affairs Manual+15Foreign Affairs Manual+15Foreign Affairs Manual.
-
Data Governance Foundations: It codifies enterprise-wide governance, including data architecture, stewardship, lifecycle management, and transparency principles that span all Department activities Foreign Affairs ManualForeign Affairs Manual.
-
Ethics & Risk Management: Addresses critical considerations such as ethical data handling, privacy, data-sharing agreements, and AI risk-management frameworks to ensure accountability in automated systems Foreign Affairs ManualForeign Affairs Manual.
Key terms defined in 20 FAM include Enterprise Data Catalog, Master Reference Data, Data Steward, and foundational AI definitions as per federal legislation — anchoring the policy in legal and technical clarity Foreign Affairs Manual+15Foreign Affairs Manual+15Foreign Affairs Manual+15.
Why This Matters (and Why It’s Relevant)
-
For Government & Tech Enthusiasts: These volumes reflect a shift in diplomacy toward data-driven decision-making and modern risk management.
-
Cybersecurity Professionals: 19 FAM details the Department’s regulatory expectations and system-owner responsibilities.
-
AI and Data Policy Scholars: 20 FAM provides a real-world example of federal AI governance, ethics, and data architecture planning.
Suggested Blog Structure
| Section | Purpose |
|---|---|
| Introduction | Explain what FAM (Foreign Affairs Manual) is and why volumes 19 & 20 are important. |
| Volume 19 Summary | Breakdown of cybersecurity policy goals, governance, and compliance role. |
| Volume 20 Summary | Overview of data governance, AI policy, ethics, and key terminology. |
| Implications | Discuss broader impacts on digital diplomacy, public policy, and tech accountability. |
| Closing Thoughts | Reflect on how these policies shape the future of Department of State’s operational data practices. |
Introduction
Briefly introduce the FAM system and note the importance of volumes 19 and 20 in today’s tech‑driven foreign service.
19 FAM – Cybersecurity Guidance
Describe its role in governing cybersecurity posture across State Department infrastructure.
20 FAM – Data and Artificial Intelligence
Explain how this policy supports ethical, governed, and enterprise‑scaled data use and AI deployment.
Broader Implications
Tie the policy to themes like digital diplomacy, AI ethics, and national security.