Attach8__ Enhanced IA Standards Checklist IAW H4.pdf

TMA Form _____ August 2011 Page 1

Checklist and Certification for Minimum Level of Enhanced Safeguarding for Unclassified DoD Information

Process in accordance with provisions H.4. Requirements for Minimum Level of Enhanced Safeguarding for Unclassified DoD Information .

Checklist and Certification for Minimum Level of Enhanced Safeguarding for Unclassified DoD Information for ______________

Access Control

Ref # Nomenclature Compliance Statement

Validation Method

Compliance Date Activity Description

AC-2 Account Management Select Answer Select Method AC-3 Access Enforcement Select Answer Select Method AC-3(4) Access Enforcement Select Answer Select Method AC-4 Information Flow Enforcement Select Answer Select Method AC-6 Least Privilege Select Answer Select Method AC-7 Unsuccessful Login Attempts Select Answer Select Method AC-11 Session Lock Select Answer Select Method AC-11(1) Session Lock Select Answer Select Method AC-17 Remote Access Select Answer Select Method AC-17(2) Remote Access Select Answer Select Method AC-18 Wireless Access Select Answer Select Method AC-18(1) Wireless Access Select Answer Select Method AC-19 Access Control for Mobile Devices Select Answer Select Method

Awareness & Training

Compliance Statement

Validation Approach

Compliance Date Activity Description

AT-2 Security Awareness Select Answer Select Method

August 2011 Page 2

Audit & Accounting

Compliance Statement

Validation Approach

Compliance Date Activity Description

AU-2 Auditable Events Select Answer Select Method AU-3 Content of Audit Records Select Answer Select Method AU-6 Audit Review, Analysis & Reporting Select Answer Select Method AU-6(1) Audit Review, Analysis & Reporting Select Answer Select Method AU-7 Audit Reduction & Report Generation Select Answer Select Method AU-8 Time Stamps Select Answer Select Method AU-9 Protection of Audit Information Select Answer Select Method AU-10 Non-Repudiation Select Answer Select Method AU-10(5) Non-Repudiation Select Answer

Configuration Management

Compliance Statement

Validation Approach

Compliance Date Activity Description

CM-2 Baseline Configuration Select Answer Select Method CM-6 Configuration Settings Select Answer Select Method CM-7 Least Functionality Select Answer Select Method CM-8 Information Sys Component Inventory Select Answer Select Method

Contingency Planning

Compliance Statement

Validation Approach

Compliance Date Activity Description

CP-9 Information System Backup Select Answer Select Method

Identification & Authentication

Ref # Nomenclature Compliance Statement

Validation Approach

Compliance Date Activity Description

IA-2 User Identification & Authentication Select Answer Select Method IA-4 Identifier Management Select Answer Select Method IA-5 Authenticator Management Select Answer Select Method IA-5(1) Authenticator Management Select Answer

August 2011 Page 3

Incident Response

Compliance Statement

Validation Approach

Compliance Date Activity Description

IR-2 Incident Response Training Select Answer Select Method IR-4 Incident Handling Select Answer Select Method IR-5 Incident Monitoring Select Answer Select Method IR-6 Incident Reporting Select Answer Select Method

Maintenance

Compliance Statement

Validation Approach

Compliance Date Activity Description

MA-4 Remote Maintenance Select Answer Select Method MA-4(6) Remote Maintenance Select Answer MA-5 Maintenance Personnel Select Answer Select Method MA-6 Timely Maintenance Select Answer Select Method

Media Protection

Compliance Statement

Validation Approach

Compliance Date Activity Description

MP-4 Media Storage Select Answer Select Method MP-6 Media Sanitization & Disposal Select Answer Select Method

Physical & Environmental Protection

Compliance Statement

Validation Approach

Compliance Date Activity Description

PE-5 Access Control for Display Medium Select Answer Select Method PE-7 Visitor Control Select Answer Select Method

Program Management

Compliance Statement

Validation Approach

Compliance Date Activity Description

PM-10 Security Authorization Process Select Answer

August 2011 Page 4

System & Comm Protection

Compliance Statement

Validation Approach

Compliance Date Activity Description

SC-2 Application Partitioning Select Answer Select Method SC-4 Information Remnance Select Answer Select Method SC-7 Boundary Protection Select Answer Select Method SC-7(2) Boundary Protection Select Answer Select Method SC-9 Transmission Confidentiality Select Answer Select Method SC-9(1) Transmission Confidentiality Select Answer Select Method SC-13 Use of Cryptography Select Answer Select Method SC-13(1) Use of Cryptography Select Answer SC-13(4) Use of Cryptography Select Answer SC-15 Collaborative Computing Select Answer Select Method SC-28 Protection of Information at Rest Select Answer

System & Information Integrity

Compliance Statement

Compliance Date Activity Description

SI-2 Flaw Remediation Select Answer Select Method SI-3 Malicious Code Protection Select Answer Select Method SI-4 Select Answer Select Method

CERTIFICATION OF COMPLIANCE: I certify that I am an official representative for [insert name of contractor], that I have authority to sign this document and obligate [insert name of contractor] to the statements made in this document, and that I have personal knowledge of the matters to which this certification applies. I also certify that [insert name of contractor] is in compliance with the enhanced safeguarding requirements identified within the contract clause stated above and this document.

Signature: Date:

Name:

Title:

Company: