Historically, civilian and national security-related info. technology (IT) systems have been governed by different information security policies and guidance. Specifically, the Office of Management and Budget (OMB) and the National Institute of Standards and Technology (NIST) established policies and guidance for civilian non-national security systems, while other organizations, including the Committee on National Security Systems (CNSS), the DoD, and the U.S. intelligence community, have developed policies and guidance for national security systems. This report assessed the progress of federal efforts to harmonize policies and guidance for these two types of systems. Includes recommendations. Illus. This is a print on demand publication.