proc9000-1392-SOP.doc
DOC document 55 KB Posted
- Solicitation number
- SBAHQ-12-R-0001
About this file
SOP 9000-1392
View the file
Other files
Show all 24
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
SBA Procedural Notice
| TO: |
| All Employees and Contractors |
| CONTROL NO.: 9000-1392 |
| SUBJECT: |
| Information Technology – Maintaining System Security Documentation |
| EFFECTIVE: 11/26/2002 |
This is a reminder to all employees, contractors, and other authorized SBA computer systems users that systems security planning documentation is a requirement of the Office of Management and Budget (OMB), this Agency, the Computer Security Act, and other Federal laws.
Security plans are essential for all of the Agency's Major Applications and General Support Systems. Major Applications are systems that perform clearly defined functions for which there are readily identifiable security considerations and needs (e.g., an electronic funds transfer system, payroll system, or personnel system). General Support Systems are interconnected information resources under the same direct management control that shares common functionality (e.g., the Local Area Network) including smart terminals that support a field office, the Agency's data processing centers including their operating systems and utilities, etc.
The purposes of the system security planning documents are to:
· Provide an overview of the security requirements of the systems and describe the controls in place or planned for meeting those requirements; and
· Delineate responsibilities and expected behavior of all individuals who access these systems.
Agency System Security Plans can be developed using the System Security Plan Template available at http://yes.sba.gov/offices/ociosec then click on Policy and Guidelines.
All Agency System Security Plans should be marked, handled, and controlled to the level of sensitivity determined by Agency policy. In addition, Agency System Security Plans should be dated for ease of tracking modifications and approvals. Dating each page of a security plan may be appropriate if updates are to be made through change pages.
If you require additional information, please contact Lewis Baskerville on (202) 401-1980 or Joyce Lewis on (202) 205-6318 Lawrence E. Barrett
Chief Information Office
EXPIRES: 11/1/2003
SBA Form 1353.3 (12-93) PerForm Version; previous editions obsolete.
Must be accompanied by SBA Form 58.
File details come from the government source that posted it. Updated .