Appendix 2 - Security Program Questionnaire.docx
DOCX document 24 KB Posted
- Solicitation number
- FA865226SC003
About this file
This is a Security Program Questionnaire template designed for collaborators and research institutions receiving funding under the AFRL Enterprise Commercial Solutions Opening (CSO) contract FA8652-26-S-C003. The questionnaire is completed by applicants and reviewed by the AFRL S&T Protection Lead, requiring submission of the applicant name, CAGE code/SCL level if applicable, and the name and position of the individual completing the form.
The questionnaire consists of 13 core security questions and an additional comments section covering comprehensive security requirements across physical, information, personnel, and operational security domains. Applicants must address: physical security plans; information security processes; data storage locations and methods; procedures for information transmission, transportation, disposal, and reproduction; personnel access safeguards; Government-Furnished Equipment/Information (GFE/GFI) protection; cybersecurity and network protection measures; operations security processes to prevent adversarial access; insider threat detection and mitigation procedures; breach response protocols; and willingness to participate in annual AFRL S&T Protection training for all personnel with access. This questionnaire serves as a compliance and security assessment tool to ensure that institutions managing Air Force research funding maintain appropriate security postures aligned with federal requirements.
View the file
Other files
Show all 25
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
FA8652-26-S-C003
AFRL Enterprise CSO Appendix 2
SECURITY PROGRAM QUESTIONNAIRE
Objective: This questionnaire is used to review the security program and practices of the institutions receiving research funding.
Intended Audience/User: Completed by collaborators; reviewed by S&T Protection Lead.
Date Submitted: ________________________________________________________________ Applicant Name: _______________________________________________________________ CAGE Code/SCL and level (if applicable): ____________________________________________ Completed by Name: ____________________________________________________________ Position/Title: __________________________________________________________________
1. What are your physical security plans?
2. What information security processes are in place?
3. Where will information for this effort be stored? (examples: computers, cloud, file cabinets, etc.)
4. What procedures are in place for transmission/transportation of information for this effort?
5. What procedures are in place for disposal and destruction of information for this effort?
6. What procedures are in place for reproduction of information for this effort?
7. What safeguards are in place for personnel who can access information for this effort?
8. What is the plan for safeguarding GFE/GFI?
9. What procedures are in place for cybersecurity or network protection?
10. What operations security processes are in place to prevent adversaries’ access to information for this effort or actions that would compromise your projects?
11. What processes are in place to deter, detect, and mitigate actions of insider threat?
12. What procedures are in place to handle if information for this effort is compromised?
13. Are you willing to provide AFRL S&T Protection training to all personnel with access annually?
Additional comments:
File details come from the government source that posted it. Updated .