15JA0525Q00000096 Attachment 4 - Security Checklist.pdf

Attachment 4 EOUSA AI-10-1E Federal Grand Jury Court Reporter Security Review Checklist

Security Clause

Paragraph Essential Security Requirements Compliant Noncompliant

1d

APPROVED PERSONNEL. A list of the Contractor’s employees, including any sub-contractors, has been provided to the Government and maintained by the Contractor listing who will have physical access to GJ approved devices, data, and information.

1f SUB-CONTRACTORS. The Contractor has ensured that any sub-contractors, including proofreading services, comply with the security requirements of the contract and have been approved by the Government.

2d BACKGROUND INVESTIGATION. All persons performing work under the contract have complied with and been the subject of a favorably adjudicated background investigation by the Government.

3a APPROVED ROOM. The room where GJ material is processed and stored has been approved by the Government.

3c PROTECTING INFORMATION. GJ material is protected against unauthorized disclosure and viewing by other tenants, co-business, unauthorized employees, customers, family, friends, etc.

3d APPROVED DOOR AND LOCK. The door (or doors) to the room were GJ material will be processed and stored is equipped with a lock approved by the Government.

3d RESTRICTING ACCESS. The Contractor ensures that no one is allowed unsupervised and/or unrestricted access to the space where the GJ material is stored unless approved by the Government.

3d 3f

KEYS AND ACCESS CODES. Any and all key(s) or access code(s) and alarm code(s) to the location where GJ material is processed or stored is limited to individuals specifically identified and approved by the Government.

3f ALARM MONITORING. The room approved by the Government for storage of GJ material is alarmed and externally monitored by a professional security service approved by the Government.

3f ALARM ACTIVITY REPORTS. Alarm activity reports are provided to the Government quarterly (3 consecutive months since time of award) reflecting monitoring service and activity.

3f ALARM ACTIVATION/DEACTIVATION. The alarm is activated and deactivated consistently and as required by the Government.

15JA0525Q00000096

3f ALARM TEST. The alarm system is tested at least once per year to ensure it is functioning properly and the desired response occurs.

3g STORAGE CONTAINER. GJ material including notes, drafts, final documents, storage media, etc., are stored inside a USAO-approved storage container.

3g

STORAGE CONTAINER COMBINATIONS. Safe combinations to approved storage containers securing GJ material are changed at least annually, when a person who has knowledge of the combination leaves, or when a combination is or may have been compromised.

APPROVED COMPUTERS. Administrative controls over all devices and settings is restricted and approved by the Government.

4a MARKING DEVICES AND MEDIA. All devices and removable media used for GJ are approved for use by the Government and clearly marked (or labeled) as containing GJ material.

4c SHARING COMPUTERS/STORAGE MEDIA. All shared information technology and storage media is deleted before the device or media is shared unless approved by the Government.

DESTROYING MATERIAL. The Contractor ensures that all GJ materials (include notes, draft, finals in either paper or electronic format) are destroyed or disposed of in a manner approved by the Government.

7b-d

PACKAGING/TRANSPORTING/SHIPPING

MATERIALS. The Contractor ensures that all GJ materials are properly packaged, marked, transported, coordinated with, and couriered or shipped to the Government as prescribed in the Contract.

10a REPORTING INCIDENTS. The Contractor is prepared to report any incident or situation which places the GJ information at risk.

Additional Comments/Observations/Concerns:

15JA0525Q00000096