Atch 11 BAA Attachment Security Program Questionnaire.pdf
PDF 219 KB Posted
- Solicitation number
- FA2391-23-S-2403
About this file
This document is a Security Program Questionnaire template used for evaluating the security practices of institutions receiving research funding under BAA No. FA2391-23-S-2403. The questionnaire is completed by collaborators and reviewed by the S&T Protection Lead, with submission requiring the applicant name, CAGE Code/SCL level, date submitted, and completing official's name and title.
The questionnaire comprises 13 substantive questions and an additional comments section addressing comprehensive security requirements across multiple domains. These include physical security plans, information security processes, data storage locations, transmission and transportation procedures, information disposal and destruction protocols, reproduction safeguards, personnel access controls, Government-Furnished Equipment/Information (GFE/GFI) protection plans, cybersecurity and network protection procedures, operations security processes to prevent adversarial access, insider threat detection and mitigation measures, incident response procedures for compromised information, and organizational willingness to provide annual AFRL S&T Protection training to all personnel with access. This template does not specify required products or services, response dates, pricing terms, or other transactional contracting elements, but rather serves as an assessment instrument for evaluating an organization's security posture and compliance capabilities.
View the file
Other files
Show 40 more
Latest 50 of 70 listed here. See the rest on GovTribe.
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
BAA No. FA2391-23-S-2403 Attachment 11
SECURITY PROGRAM QUESTIONNAIRE
Objective: This questionnaire is used to review the security program and practices of the institutions receiving research funding.
Intended Audience/User: Completed by collaborators; reviewed by S&T Protection Lead.
Date Submitted: ________________________________________________________________
Applicant Name: _______________________________________________________________
CAGE Code/SCL and level (if applicable): ____________________________________________
Completed by Name: ____________________________________________________________
Position/Title: __________________________________________________________________
1. What are your physical security plans?
2. What information security processes are in place?
3. Where will information for this effort be stored? (examples: computers, cloud, file cabinets, etc.)
4. What procedures are in place for transmission/transportation of information for this effort?
5. What procedures are in place for disposal and destruction of information for this effort?
6. What procedures are in place for reproduction of information for this effort?
7. What safeguards are in place for personnel who can access information for this effort?
8. What is the plan for safeguarding GFE/GFI?
9. What procedures are in place for cybersecurity or network protection?
10. What operations security processes are in place to prevent adversaries’ access to information for this effort or actions that would compromise your projects?
11. What processes are in place to deter, detect, and mitigate actions of insider threat?
12. What procedures are in place to handle if information for this effort is compromised?
13. Are you willing to provide AFRL S&T Protection training to all personnel with access annually?
Additional comments:
File details come from the government source that posted it. Updated .