Attachment_D-_Security_Controls_Rules_of_Behavior_Agreement.pdf

RFQ-FSA-410000-19-0038 (Amd 2)

Attachment D - Security Controls Rules of Behavior Agreement

Bureau of the Fiscal Service Security Controls Rules of Behavior Agreement

I, ____________________________, hereby consent to the terms in this Agreement in consideration of my being granted conditional access to certain United States Government documents or material containing sensitive but unclassified information. I understand and agree to the following terms and conditions:

Upon signing this Security Controls Rules of Behavior and a Non-Disclosure Agreement, I will be permitted access to official Bureau of the Fiscal Service documents containing sensitive but unclassified information related to security controls and understand that no copies may be made from the originals.

Any notes I take during the course of such access shall be provided to Fiscal Service for review prior to my departure. I shall not allow any individuals access to security control requirements information without Fiscal Service’s approval and the individual’s signed ‘Security Controls Rules of Behavior’ (this information includes notes Fiscal Service permits to leave the controlled Reading Room appointment area along with notes and working papers created after the review appointment)

If I take any notes during the security control requirement documentation review using a portable electronic device (PED), such as but not limited to a laptop computer, the PED shall have FIPS 140-2 validated full disk encryption in use.

At no time will I transmit, transport, process, or store information about security control requirements in any location located outside of the United States.

I will return all paper copies of any notes about the security control requirements, including notes and working papers created after the security control requirement documentation review appointment, to Fiscal Service with my proposal or when I determine a proposal will not be submitted. I will destroy all electronic copies of any notes relating to security control requirements in accordance with NIST SP 800- 12 and NIST SP 800-88. I will include in my proposal a notice to the Fiscal Service attesting to such file destruction; should I not make a proposal, I will send notice to the Fiscal Service attesting to the destruction of the files.

I make this Agreement in good faith, without mental reservation or purpose of evasion.

Printed Name

Signature Date