ATTACHMENT D SECURITY RISK LEVELS.pdf

ATTACHMENT D

CONTRACTOR EMPLOYEE PERSONNEL SECURITY SCREENINGS

CLOUD HOSTING SUPPORT AND SERVICES

FOR THE INSTITUTE OF EDUCATION SCIENCES

This document has been prepared in accordance with Departmental Directive OM:5-101 on Contractor

Employee Personnel Security Screening, in consultation with the Office of Management, Security

Services, Personnel and Information Security.

Contractor employee personnel will have access to U.S. Department of Education (ED) facilities and systems.

Below are personnel positions and risk levels for the contract that is to be awarded for the Cloud Hosting

Support and Services for IES contract. After award, the contractor will identify all individuals to be paid through this contract under each personnel position, including all contractor personnel and subcontractor personnel.

Risk Level

Personnel Position Description of Relevant Responsibilities Risk Level

Operations Systems Manager Contractor will oversee team of systems administrators;

be working with publicly available and restricted-use data including data migrations and backups; will have admin level access to all systems and data with the potential for exceptionally serious impact.

High

Systems Administrator

Contractor will be working with publicly available and restricted-use data including data migrations and backups; will have admin level access to all systems and data with the potential for exceptionally serious impact.

High