Baseline Security Requirements.doc

1.0 Introduction

The Computer and Telecommunications Security (C&TS) Risk Management Program has developed Baseline Security Requirements (BLSR) for the Bureau of Immigration, Customs, and Enforcement (ICE) Automated Information Systems (AIS) in response to new Certification and Accreditation (C&A) requirements for the Department of Homeland Security (DHS).

2.0 Background

The attached BLSRs have been developed to include requirements from Department of Justice Order 2460.2D and the National Institute of Standards and Technology (NIST) Special Publication 800-30, Risk Management Guide for Information Systems. The BLSRs also incorporate policy from MD4300A, Policy Guide for Sensitive Systems, and best practices as determined by security subject matter experts on the C&TS team.

3.0 Scope

The attached BLSRs should be used for completing C&A on legacy Immigration and Naturalization Service (INS) systems as well as new systems undergoing C&A until DHS guidance becomes finalized. BLSRs for new DHS systems are currently in draft form and will be included as an attachment to the IT Security Program Handbook for MD4300A, Sensitive Systems.

Baseline Security Requirements (BLSR) for Major Applications

Prepared for: DHS Prepared by: SAIC/Contract No.: COW-8-C-0039

DHS/ICE BASELINE SECURITY REQUIREMENTS (BLSR)�FOR AUTOMATED INFORMATION SYSTEMS (AIS)

COMPUTER AND TELECOMMUNICATIONS �SECURITY SUPPORT

Task Order No.: 99-SM/I-SID-214 (OPT 3): Computer and Telecommunications �Security Support

DRAFT

July 18, 2003

SMI-0039-SID-214-FD-50425

DHS Service Technology Alliance Resources (STARS)�Systems Management and Integration (SM/I)�(DHS STARS SM/I) Contract

� EMBED MSPhotoEd.3 ���

A Deliverable to the

U.S. Department of Homeland Security

PAGE

_1117612290.bin