Appendix B.5 - Policies Procedures and Standards FINAL.pdf

DIPLOMATIC SECURITY

Appendix 1-B.5—Policies, Procedures and Standards

18/OCT/10Page i

APPENDIX 1-B.5

POLICIES, PROCEDURES AND STANDARDS

for

18/OCT/10

18/OCT/10Page 2

The following are DS Services Center Standard Operating Procedures (SOP) samples.

The complete libraries of SOPs are available for internal review concurrent with DoS Secret Security Clearance requirements:

(*) Denotes: Limited to internal review do to sensitive information.

Sample Helpdesk SOPs supporting Enterprise Vault:

o

EnterpriseVault Explained for Helpdesk o SOP – Enterprise Vault ONE User Attachments * o SOP – Enterprise Vault Users Guides * o SOP – Exporting Vault data to a PST File *

Other SOPs that support the Bureau of Diplomatic Security that are governed under internal review include Services support for:

o Access Management* o Audio Visual Services* o Client Server Applications* o Desktop Applications* o Mobile Devices* o Support Systems* o Training Services* o WEB Based Applications*

Other support requirements are governed by the following Manuals, Polices and Mandates (links):

Department of State Foreign Affairs Manual: 5 FAM http://www.state.gov/m/a/dir/regs/fam/05fam/index.htm o 5 FAM 100 Information Technology Management

110 IT Management 120 Information Management Staffing Abroad 130 IT Performance Measures o 5 FAM 200 Correspondence 210 Preparing Official Correspondence 220 Communications to the United Nations and Other International

Organizations 230 The Organization of the American States o 5 FAM 300 Unassigned o 5 FAM 400 Records Management

410 Records and Information Lifecycle Management Program 420 Creating Records 430 Disposition of Records http://www.state.gov/m/a/dir/regs/fam/05fam/index.htm

18/OCT/10Page 3

440 Electronic Records, Facsimile Records, and Electronic Mail Records

450 Micrographic Records 460 The Privacy Act and Personally Identifiable Information 470 Access to and Use of Information 480 unassigned 490 Use of Copyrighted Material o 5 FAM 500 Telecommunications 510 Telecommunications Services and Equipment 520 Telephone Services 530 Facsimile Transmission 540 Voice Radio Systems 550 Diplomatic Telecommunications Service 560 Tactical Satellite Communications 570 Television Services and Equipment 580 Wireless Information Technology o 5 FAM 600 Information Technology Systems 610 Developing and Managing Information Technology (IT)

Systems 620 Information Technology Project Management 630 Data Management 640 Project Quality Management 650 Configuration Management 670 Benefit Cost Analysis 680 Earned Value Management Program o 5 FAM 700 Internet and Intranet Use 710 General 720 General Polices 730 System Security 740 Cookies 750 E-Mail Policy 760 Classification of WEB Based Documents 770 Federal Websites 780 Internet Access 790 Using Social Media o 5 FAM 800 Information Systems Management 810 Information Systems Management 820 Information Technology Roles and Responsibilities 830 IT Service Center 840 Managing Systems 850 Continuity of Operations and Contingency Planning 860 Hardware and Software Maintenance 870 Networks o 5 FAM 900 Information Technology Acquisition 910 Information Technology Acquisition Policies 920 Procedures for the Acquisition of Information Technology

18/OCT/10Page 4

930 through 950 Unassigned 960 Publications 970 External Research o 5 FAM 1000 Information Technology (IT) Planning 1010 Information Technology (IT) Planning 1020 Information Technology (IT) Strategic Plan 1030 Information Technology (IT) Tactical Planning 1040 Information Technology (IT) Capital Investment Planning

Process 1050 Unassigned 1060 Information Assurance Management o 5 FAM 1100 Unassigned o 5 FAM 1200 Unassigned o 5 FAM 1300 Publications and Related Services

1310 Publication and Graphics Policy and Program 1320 Department Copiers (Domestic) o 5 FAM 1400 Library Services 1410 Ralph J. Bunche Library Program 1420 Ralph J. Bunche Library Publication Acquisitions 1430 Ralph J. Bunche Library Reference and Access Services o Change Transmittals IM-111 (07-01-2010) 460 The Privacy Act and Personally

Identifiable Information IM- 110 (06-11-2010) 790 Using Social Media IM- 109 (05-05-2010) 870 Networks IM- 108 (07-10-2009) 830 IT Service Center

IM- 107 (06-09-2009) 210, 410, 420, 490, 610, 770, 1310, 1320,

1420, and 1430.

IM- 106 (06-05-2009) 810 Information Systems Management IM- 105 (05-14-2009) 870 Networks IM- 104 (04-07-2009) 860 Hardware and Software Maintenance IM- 103 (01-15-2009) 410 Records and Information Life Cycle

Management Program

Department of State Foreign Affairs Handbook: 5 FAH-5 http://www.state.gov/m/a/dir/regs/fah/c23287.htm o 100 Information Technology Systems 110 Procedures for Developing and Managing Department of State

Projects 120 Project Controls o 200 Project Management 210 Managing Department of State Projects o 300 Data Administration 310 Data Management Services 320 System Development Projects http://www.state.gov/m/a/dir/regs/fah/c23287.htm

18/OCT/10Page 5 o 400 Quality Assurance 410 Quality Assurance Discipline o 500 Configuration Management 510 Project Development and Change Control 520 Life Cycle Management 530 Configuration Management Process 540 Configuration Management Summary o 600 Benefit Cost Analysis 610 Using the Benefit Cost Analysis 620 Benefit Cost Analysis Process

Other areas of publishable Information related to the Mission and governance policies supporting the Bureau of Diplomatic Security can be found by following the links below:

The Bureau of Diplomatic Security o http://www.state.gov/m/ds http://www.state.gov/m/ds