Appendix 2 - Security Program Questionnaire.docx

DOCX document 29 KB Posted

Attached to
Optical Radiation Bioeffects and Safety
Solicitation number
FA2384-26-S-B002
Issued by

About this file

This is a Security Program Questionnaire template designed to assess the security posture and practices of institutions receiving research funding from the Air Force Research Laboratory (AFRL). The questionnaire is completed by collaborators and reviewed by the S&T Protection Lead as part of the evaluation process for the FA2384-26-S-B002 Optical Radiation Bioeffects and Safety solicitation under the CHEERS Broad Agency Announcement.

The questionnaire covers thirteen core security areas requiring detailed responses: physical security plans, information security processes, data storage locations and methods, information transmission and transportation procedures, information disposal and destruction protocols, information reproduction procedures, personnel access safeguards, Government Furnished Equipment/Information (GFE/GFI) protection plans, cybersecurity and network protection measures, operations security processes to prevent adversarial compromise, insider threat detection and mitigation procedures, and incident response protocols for compromised information. Additionally, applicants must indicate willingness to provide annual AFRL S&T Protection training to all personnel with access. The questionnaire requires submission of applicant name, CAGE Code/SCL level, completion date, and the name and position of the individual completing the form, with space provided for additional comments.

View the file

Other files

Show all 13

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

FA

Attachment X

SECURITY PROGRAM QUESTIONNAIRE

Objective: This questionnaire is used to review the security program and practices of the institutions receiving research funding.

Intended Audience/User: Completed by collaborators; reviewed by S&T Protection Lead.

Date Submitted: ________________________________________________________________ Applicant Name: _______________________________________________________________ CAGE Code/SCL and level (if applicable): ____________________________________________ Completed by Name: ____________________________________________________________ Position/Title: __________________________________________________________________

1. What are your physical security plans?

2. What information security processes are in place?

3. Where will information for this effort be stored? (examples: computers, cloud, file cabinets, etc.)

4. What procedures are in place for transmission/transportation of information for this effort?

5. What procedures are in place for disposal and destruction of information for this effort?

6. What procedures are in place for reproduction of information for this effort?

7. What safeguards are in place for personnel who can access information for this effort?

8. What is the plan for safeguarding GFE/GFI?

9. What procedures are in place for cybersecurity or network protection?

10. What operations security processes are in place to prevent adversaries’ access to information for this effort or actions that would compromise your projects?

11. What processes are in place to deter, detect, and mitigate actions of insider threat?

12. What procedures are in place to handle if information for this effort is compromised?

13. Are you willing to provide AFRL S&T Protection training to all personnel with access annually?

Additional comments:

File details come from the government source that posted it. Updated .