Appendix 1 - SECURITY PROGRAM QUESTIONNAIRE.pdf

PDF 152 KB Posted

Attached to
Air Force Basic Research Sciences Conference and Workshop Support
Opportunity number
FA955026S0002
Issued by

About this file

This is a Security Program Questionnaire template from the Air Force Research Laboratory (AFRL) dated June 3, 2022, designed to evaluate the security practices of institutions receiving research funding. The questionnaire is completed by collaborators and reviewed by the S&T Protection Lead. Required administrative information includes the date submitted, applicant name, CAGE code/SCL and level (if applicable), name and position/title of the person completing the form.

The questionnaire contains 13 substantive questions covering physical security, information security processes, data storage locations, transmission and transportation procedures, information disposal and destruction protocols, reproduction procedures, and personnel access safeguards. Additional topics address Government Furnishing Equipment/Information (GFE/GFI) safeguarding, cybersecurity and network protection procedures, operations security processes to prevent adversarial access, insider threat detection and mitigation processes, incident response procedures for compromised information, and willingness to provide annual AFRL S&T Protection training to all personnel with access. The form includes space for additional comments and is structured to comprehensively assess an institution's security posture across physical, personnel, information, cyber, and operational security domains.

Appendix 1 - SECURITY PROGRAM QUESTIONNAIRE

View the file

Other files

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

22 AFRLI61-113 3 JUNE 2022

Attachment 3

SECURITY PROGRAM QUESTIONNAIRE

Figure A3.1. Security Program Questionnaire.

Objective: This questionnaire is used to review the security program and practices of the institutions receiving research funding.

Intended Audience/User: Completed by collaborators; reviewed by S&T Protection Lead.

Date Submitted: ______________________________________________________________

Applicant Name: _____________________________________________________________

Cage Code/SCL and level (if applicable): __________________________________________

Completed by Name: __________________________________________________________

Position/Title: ________________________________________________________________

S&T

1. What are your physical security plans?

2. What information security processes are in place?

3. Where will information for this effort be stored? (examples: computers, cloud, file cabinets, etc.)

4. What procedures are in place for transmission/transportation of information for this effort

5. What procedures are in place for disposal and destruction of information for this effort?

6. What procedures are in place for reproduction of information for this effort?

7. What safeguards are in place for personnel who can access information for this effort?

22 AFRLI61-113 3 JUNE 2022

Attachment 3

SECURITY PROGRAM QUESTIONNAIRE

Figure A3.1. Security Program Questionnaire.

Additional comments:

8. What is the plan for safeguarding GFE/GFI?

9. What procedures are in place for cybersecurity or network protection?

10. What operations security processes are in place to prevent adversaries’ access to information for this effort or actions that would compromise your projects?

11. What processes are in place to deter, detect, and mitigate actions of insider threat?

12. What procedures are in place to handle if information for this effort is compromised?

13. Are you willing to provide AFRL S&T Protection training to all personnel with access annually?

Untitled

Date Submitted:
Applicant Name:
Cage CodeSCL and level if applicable:
Completed by Name:
PositionTitle:
PhysicalSecurity:
InfoSecProcesses:
infoStorage:
TransportInfo:
DisposalInfo:
ReprodInfo:
AccessInfo:
GFEGFI:
CyberSecurity:
AdverAccess:
DeterDetect:
Compromised:
ProtectionTraining:
AdditionalComments:

File details come from the government source that posted it. Updated .