Chief Information Officer
IC Technical Specifications
Mission Need Taxonomy
Overview
The XML Taxonomy Encoding Specification (TES) for Mission Need Taxonomy (MNT.XML) defines vocabulary mappings for countries to their geographic regions and subjects to their issue categories where regions and issues are pulled from the MN.CES specification. This TES provides XML taxonomy files that can be used as machine-readable mappings as well as informational documentation about the mappings.
This specification is maintained by the IC Chief Information Officer via the Data Standards Coordination Activity (DSCA) and Common Metadata Standards Tiger Team (CMSTT).
Technical Specification Downloads
Latest Approved Public Release:
- Taxonomy Encoding Specification for Mission Need Taxonomy (V2022-NOV - Standalone Package)
- Taxonomy Encoding Specification for Mission Need Taxonomy (V2022-NOV - Convenience Package)
- Taxonomy Encoding Specification for Mission Need Taxonomy (V2022-NOV - Light Package)
Mission Requirements
This specification is designed to fulfill a number of requirements in support of the transformational efforts of the Intelligence Community. Many of these requirements are articulated in IC Directives 203, 206, 208, 501, and 710, among others.
This specification defines the mission need taxonomies that map countries from ISMCAT.CES to the Regions in MN.CES and subjects from PM.CES to the Issues in MN.CES.
Chief Information Officer
IC Technical Specifications
CVE Encoding Specification for Production Metrics
Overview
The CVE Encoding Specification for Production Metrics (PM.CES) defines detailed implementation guidance for using Extensible Markup Language (XML) to encode Production Metrics (PM) controlled vocabulary. This Controlled Vocabulary Enumeration (CVE) Encoding Specification (CES) defines the XML elements and attributes, associated structures and relationships, mandatory and cardinality requirements, and permissible values for representing data concepts using XML.
This specification is maintained by the IC Chief Information Officer via the Data Standards Coordination Activity (DSCA) and Common Metadata Standards Tiger Team (CMSTT).
Technical Specification Downloads
Latest Approved Public Release:
- CVE Encoding Specification for Production Metrics (V2022-NOV - Standalone Package)
- CVE Encoding Specification for Production Metrics (V2022-NOV - Convenience Package)
- CVE Encoding Specification for Production Metrics (V2022-NOV - Light Package)
Mission Requirements
This specification is designed to fulfill a number of requirements in support of the transformational efforts of the Intelligence Community. Many of these requirements are articulated in IC Directives 203, 206, 208, 501, and 710, among others.
This CES defines the Production Metrics related CVEs including Subjects, Actors, and Locations. While PM values are not directly used for Access Control, the PM values are aggregated into the Mission Need (MN.CES) Issue CVE, and a mapping of PM values to MN.CES Issue values is provided in the Taxonomy Encoding Specification for Mission-Need Taxonomy (MNT.XML).
Chief Information Officer
IC Technical Specifications
Web Security Standards Guidance: Token Services
Overview
The information guidance document for Web Security Standards Guidance for Token Services (WSS-TS) defines guidance on the use of token services. Token services represent a technical approach to implement secure messaging for credentials both within and across trust domains. This document outlines and describes a set of representative use cases.
This specification is maintained by the IC Chief Information Officer via the Data Standards Coordination Activity (DSCA) and Common Metadata Standards Tiger Team (CMSTT).
Technical Specification Downloads
Latest Approved Public Release:
Mission Requirements
The IC CIO funds and oversees a number of critical enabling projects, including the IC Information Technology Enterprise (IC ITE). The IC ITE makes extensive use of web services and distributed processing, yet each individual program providing services therein requires explicit guidance on building secure, interoperable web services.
This document provides general and prescriptive guidance for the development of secure and interoperable web services security solutions in support of the following Office of the Director of National Intelligence (ODNI) policies and implementation guidance.
Chief Information Officer
IC Technical Specifications
Source Citations
Overview
The XML Data Encoding Specification for Source Citations (SRC.XML) defines detailed implementation guidance for xml-encoding of source citations in analytic products. The purpose of sourcing information is to enhance the credibility and transparency of intelligence analysis, and to assist readers in making an informed assessment of the quality and the scope of sources underlying the analysis.
This specification is maintained by the IC Chief Information Officer via the Data Standards Coordination Activity (DSCA) and Common Metadata Standards Tiger Team (CMSTT).
Technical Specification Downloads
Latest Approved Public Release:
- XML Data Encoding Specifications for Source Citations (V2015-AUGr2022-MAY - Standalone Package)
- XML Data Encoding Specifications for Source Citations (V2015-AUGr2022-MAY - Convenience Package)
- XML Data Encoding Specifications for Source Citations (V2015-AUGr2022-MAY - Light Package)
Mission Requirements
This specification is designed to fulfill a number of requirements in support of the transformational efforts of the Intelligence Community. Many of these requirements are articulated in IC Directives 203, 206, 208, 501, and 710, among others.
This specification is designed to fulfill a number of requirements in support of the transformational efforts of the IC. These requirements include:
- Capturing source citations to provide intelligence collectors the ability to systematically analyze how and how often the data they gather or produce is being used in order to facilitate better management of collection and production resources.
- Capturing source citations to enhance the analytic integrity of formally disseminated intelligence information and improving the traceability of collected information to analytic judgments and conclusions.
![]()
Matthew Halvorsen, Strategic Program Director for NCSC’s Supply Chain and Cyber Directorate, recently sat down with Andrew Coffey, a Deputy Director with the High Intensity Drug Trafficking Areas (HIDTA) Program at the Office of National Drug Control Policy (ONDCP), for an audio interview on how the HIDTA program worked quickly to implement supply chain security measures to stem risks from certain Chinese companies, as mandated by Section 889 of the National Defense Authorization Act (NDAA) of 2019. The discussion is instructive for other federal agencies working to comply with supply chain security provisions of the NDAA.
This episode is the second in a series of interviews with experts and practitioners from government, industry, research and academia to spotlight threats to key U.S. supply chains and highlight mitigation.
- Check out the podcast interview, click here
- For a transcript of the interview, click here
Guest Speaker
Andrew Coffey, Ph.D. is a Deputy Director with the High Intensity Drug Trafficking Areas (HIDTA) Program at the Office of National Drug Control Policy (ONDCP). He oversees a number of portfolios to include policy development, intelligence and information sharing, and performance management. Prior to joining ONDCP he held various positions in the private sector advising clients around the globe on security and risk management. He holds a doctorate in public administration and policy from Virginia Tech, and a bachelor’s degree from Radford University. From 2016-2017, he was a Senior Fellow with the George Washington University Center for Cyber and Homeland Security.



