4. Security Program Questionnaire.docx
DOCX document 21 KB Posted
- Solicitation number
- FA9451-21-S-0001
About this file
This document is a Security Program Questionnaire used to review the security program and practices of institutions receiving research funding. The questionnaire covers topics such as physical security plans, information security processes, handling and protection of information, cybersecurity, operations security, insider threat mitigation, and procedures for compromised information. It is intended to be completed by the contractor/recipient and reviewed by the S&T Protection Lead.
The document is related to a federal contract opportunity titled "Directed Energy Technology Experimentation Research (DETER) Advanced Research Announcement (ARA) Open Announcement" solicited by the Air Force Research Laboratory, Directed Energy Directorate. This is an open ARA announcement pursuant to 10 U.S.C. 2373 for research and development, modeling and simulation, design, prototyping, fabrication, assembly, integration, and testing of directed energy source components, systems, and accessories. The government anticipates awarding multiple contract/instrument types including Cost-Plus-Fixed-Fee, Cost Contract, Firm Fixed Price, and Other Transaction Authority. There is no stated deadline or closing date for this open announcement.
View the file
Other files
Show all 19
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
SECURITY PROGRAM QUESTIONNAIRE
Objective: This questionnaire is used to review the security program and practices of the institutions receiving research funding.
Intended Audience/User: Completed by Contractor/Recipient; reviewed by S&T Protection Lead.
Date Submitted:
Applicant Name:
Cage Code/SCL and level (if applicable):
Completed by Name:
Position/Title:
1. What are your physical security plans?
2. What information security processes are in place?
3. Where will information for this effort be stored? (examples: computers, cloud, file cabinets, etc.)
4. What procedures are in place for transmission/transportation of information for this effort?
5. What procedures are in place for disposal and destruction of information for this effort?
6. What procedures are in place for reproduction of information for this effort?
7. What safeguards are in place for personnel who can access information for this effort?
8. What is the plan for safeguarding GFE/GFI?
9. What procedures are in place for cybersecurity or network protection?
10. What operations security processes are in place to prevent adversaries’ access to information for this effort or actions that would compromise your projects?
11. What processes are in place to deter, detect, and mitigate actions of insider threat?
12. What procedures are in place to handle if information for this effort is compromised?
13. Are you willing to provide AFRL S&T Protection training to all personnel with access annually?
Additional comments:
File details come from the government source that posted it. Updated .