Attachment 2a - Security Program Questionnaire.docx

DOCX document 24 KB Posted

Attached to
Holistic Models for Decision Making
Solicitation number
FA238426SB001
Issued by

About this file

This is a Security Program Questionnaire template used by the Air Force Research Laboratory (AFRL) to assess the security practices and capabilities of research institutions and collaborators receiving federal research funding. The questionnaire is completed by applicant organizations and reviewed by the AFRL S&T Protection Lead.

The questionnaire covers thirteen core security evaluation areas: physical security plans, information security processes, data storage locations and methods, information transmission and transportation procedures, information disposal and destruction protocols, information reproduction procedures, personnel access safeguards, Government Furnished Equipment/Information (GFE/GFI) protection plans, cybersecurity and network protection measures, operations security processes to prevent adversarial access, insider threat detection and mitigation processes, breach response procedures, and willingness to participate in annual AFRL S&T Protection training. Applicants must provide detailed responses for each area and include their CAGE Code/SCL level (if applicable), submitter information, and submission date. The questionnaire allows space for additional comments and serves as a foundational security assessment tool for institutions collaborating on AFRL-funded research efforts, including those under the CHEERS (Continuing Human Enabling, Enhancing, Restoring and Sustaining) Broad Agency Announcement program.

View the file

Other files

Show all 21

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

SECURITY PROGRAM QUESTIONNAIRE

Objective: This questionnaire is used to review the security program and practices of the institutions receiving research funding.

Intended Audience/User: Completed by collaborators; reviewed by S&T Protection Lead.

Date Submitted: ________________________________________________________________ Applicant Name: _______________________________________________________________ CAGE Code/SCL and level (if applicable): ____________________________________________ Completed by Name: ____________________________________________________________ Position/Title: __________________________________________________________________

1. What are your physical security plans?

2. What information security processes are in place?

3. Where will information for this effort be stored? (examples: computers, cloud, file cabinets, etc.)

4. What procedures are in place for transmission/transportation of information for this effort?

5. What procedures are in place for disposal and destruction of information for this effort?

6. What procedures are in place for reproduction of information for this effort?

7. What safeguards are in place for personnel who can access information for this effort?

8. What is the plan for safeguarding GFE/GFI?

9. What procedures are in place for cybersecurity or network protection?

10. What operations security processes are in place to prevent adversaries’ access to information for this effort or actions that would compromise your projects?

11. What processes are in place to deter, detect, and mitigate actions of insider threat?

12. What procedures are in place to handle if information for this effort is compromised?

13. Are you willing to provide AFRL S&T Protection training to all personnel with access annually?

Additional comments:

File details come from the government source that posted it. Updated .