DOGE IT Policies • MuckRock

2 Communications
0 Files

From: Amanda Hickman

03/10/2025

Subject: Freedom of Information Act Request: DOGE IT Policies

Mail

Department of Government Efficiency
Eisenhower Executive Office Building
1650 17th St NW
Washington, DC 20006

Re: Freedom of Information Act Request

Dear FOIA Officer:
We submit this request under the Freedom of Information Act (“FOIA”), 5 U.S.C. § 552, to the Department of Government Efficiency (“DOGE”) on behalf of the MuckRock Foundation (“MuckRock”).

Requested Records
MuckRock requests all records from January 20, 2025 to the present concerning information security policies and procedures adopted by the DOGE. Specifically, MuckRock requests the following records:

1) Copies of any Information Security Policies, Cybersecurity Policies, or IT Security Policies generated by or enacted by the DOGE, including but not limited to:
* Network security
* Employee cybersecurity training requirements
* Use of personal devices for government work
* Data retention and deletion policies for electronic communications
2) Copies of any lists of prohibited or allowed software, services and other devices in use by the DOGE Staff.
3) Copies of any Security Incident Response Plan and any documented standard operating procedures for responding to cybersecurity incidents adopted by the DOGE.
4) Copies of any security incident response reports and cybersecurity incident logs maintained by the DOGE.

Request for News Media Requester Status
MuckRock requests a limitation on search and review fees on the grounds that they are a “representative of the news media” and do not seek the requested records for commercial use.¹ Accordingly, fees associated with the processing of this request should be limited to reasonable duplication costs.

MuckRock “actively gathers information of potential interest to a segment of the public, uses its editorial skills to turn the raw materials into a distinct work, and distributes that work to an audience.”² Specifically, MuckRock is an internationally recognized non-profit news outlet, that regularly covers issues of public importance through the original analysis of primary source materials, particularly government records. This analysis is made available to the public via MuckRock’s website. MuckRock intends to use its editorial skills to turn any information obtained through this request into a report, article, or other relevant product, freely distributed to educate the public.

Request for Expedited Processing
MuckRock requests expedited processing pursuant to 5 U.S.C. § 552(a)(6)(E). There is a “compelling need” for these records because the information requested is “urgen[tly]” needed by an organization primarily engaged in disseminating information “to inform the public concerning actual or alleged Federal Government activity.”³

First, the requested records seek to inform the public about the USDS’s information security policies. There is a compelling and urgent need to inform the public about the policies the USDS has adopted to protect itself against cybersecurity incidents and safeguard its data. As of the filing of this request, lawmakers, reporters, and the general public have expressed interest and concern as to the steps the USDS has taken to ensure operational and cybersecurity.⁴

Second, MuckRock is “primarily engaged in disseminating information” within the meaning of the FOIA. 5 U.S.C. § 552(a)(6)(E)(v)(II). See also 6 C.F.R. § 5.5(e)(1)(ii). MuckRock is a Massachusetts-based 501(c)(3) non-profit organization that brings together journalists, researchers, activists, and regular citizens to request, analyze, and share government documents. It provides a repository of hundreds of thousands of pages of original government materials,⁵ as well as original reporting and analysis,⁶ particularly in the areas of government spending, surveillance, and public safety. MuckRock’s publications are broadly circulated to the public and widely available at no cost.

MuckRock intends to analyze, publish, and disseminate to the public information gathered through this request. The records requested are not sought for commercial use and MuckRock plans to disseminate the information disclosed as a result of this request to the public at no cost.

Given the foregoing, the request satisfies the requirements for expedited processing. Pursuant to applicable statutes and regulations, MuckRock expect a determination regarding expedited processing within 10 days. See 5 U.S.C. § 552(a)(6)(E)(ii); 6 C.F.R. § 5.5(e)(4).

Request for Records in Electronic Format
MuckRock requests that responsive electronic records be provided electronically in their native file format, if possible.⁷

Alternatively, MuckRock requests that the records be provided electronically in text-searchable PDF, in the best image quality in the USDS’s possession, and in separate, Bates-stamped files. MuckRock further requests that you provide an estimated date on which you will finish processing this request.⁸

***
If this FOIA request is denied in whole or in part, please provide the reasons for the denial, pursuant to 5 U.S.C. § 552(a)(6)(A)(i). In addition, please release all segregable portions of otherwise exempt material in accordance with 5 U.S.C. § 552(b).

Thank you for your consideration of this request. If you have any questions or concerns, please do not hesitate to contact me at the email address below.

Yours,
/s/
Michael Morisy, Chief Executive Officer
MuckRock Foundation

By their counsel
/s/ Mason A. Kortz
Mason Kortz, Clinical Instructor
Harvard Law School Cyberlaw Clinic

__________________________
¹ 5 U.S.C. § 552(a)(4)(A)(ii)(II).
² 6 C.F.R. § 5.11(b)(6).
³ 5 U.S.C § 552(a)(6)(E)(v)(II)
⁴ See, e.g., David Klepper, DOGE Access to US Intelligence Secrets Poses a National Security Threat, Democrats Say, Associated Press (Feb. 27, 2025), https://apnews.com/article/doge-musk-trump-democrats-intelligence-russia-threat-ffee435b1e65a0ac1d34889c89c30d10.
⁵ See MuckRock, Requests (lasted accessed Feb. 27, 2025), https://www.muckrock.com/foi/list/.
⁶ See MuckRock, News (last accessed Feb. 27, 2025), https://www.muckrock.com/news/.
⁷ 5 U.S.C. § 552(a)(3)(B).
⁸ Id. § 552(a)(7)(B)(ii).

From: Muckrock Staff

03/25/2025