Attachment_J-37_-_Judiciary_Information_Security_Guidance_and_the_Judiciary_Information_Security_Framework_Documents_for_Reading_Room.pdf

RFP USCA18R0158 - BNC J-37

Judiciary Information Security Guidance and the Judiciary Information Security Framework Documents for Reading

Room

1. Judiciary Information Security Guidance

SECURITY GUIDELINES:

Best Practices:

• Security of Wireless Keyboard and Mice, New!, November 2017

• Wireless LAN Best Practices, Updated!, August 2017

• Compendium of Example IT Security Policies, July 2017, Updated!, November 2017

• Information Systems Backup and Storage Best Practices, June 2017

• Media Sanitization and Information Disposal Best Practices, Updated!, June 2018

• Developing Local IT Security Policies Best Practices, Updated!, June 2018

• Best Security Practices for New Technology Adoption, October 2016

• Limiting Use of Admin-Level Accounts, November 2015

• Secure Software Development Best Practices, October 2015

• Information Systems Account Management, September 2015

• Information Systems Personnel Security Best Practices, December 2014

• Program Management: Building Blocks of a Local IT Security Program, October 2014

• Information Systems Biometric Authentication Best Practices, June 2014

• Information Systems Maintenance Best Practices, June 2014

• Information Systems Physical Security Best Practices, April 2014

• Virtual Private Network (VPN) Best Practices, June 2013

Resource Packets:

• System Security Plan in CSAM, New!, April 2018

• Password Policy RP, Updated!, April 2018

• System Security Plan RP, Updated!, April 2018 http://jnet.ao.dcn/information-technology/security/best-practices-resource-packets-and-guidelines/wireless-keyboard-mice http://jnet.ao.dcn/information-technology/security/best-practices/wireless-lan http://jnet.ao.dcn/information-technology/security/best-practices-resource-packets-and-guidelines/compendium-example-it-security-policies http://jnet.ao.dcn/sites/default/files/information_technology/library/security/info_sys_backup_and_storage_bps.docx http://jnet.ao.dcn/media-sanitization-and-information-disposal-best-practices http://jnet.ao.dcn/best-security-practices-developing-local-it-security-policies http://jnet.ao.dcn/best-security-practices-new-technology-adoption http://jnet.ao.dcn/information-technology/security/best-practices-resource-packets-and-guidelines/limiting-use-admin-level-accounts http://jnet.ao.dcn/best-security-practices-secure-software-development http://jnet.ao.dcn/best-practices-systems-account-management http://jnet.ao.dcn/information-technology/security/personnel-security-best-practices http://jnet.ao.dcn/security/local-it-best-practices http://jnet.ao.dcn/information-technology/security/biometric-authentication-best-practices http://jnet.ao.dcn/information-technology/security/information-system-maintenance-best-practices http://jnet.ao.dcn/information-technology/security/information-systems-physical-security-best-practices http://jnet.ao.dcn/virtual-private-network-best-practices http://jnet.ao.dcn/sites/default/files/information_technology/library/security/system_security_plan_in_csam.docx http://jnet.ao.dcn/sites/default/files/information_technology/library/security/password_policy_rp.docx http://jnet.ao.dcn/information-technology/security/framework-shp/system-security-plan

• Defining the System Boundary RP, Updated!, September 2017

• Recommended Safeguard/Control Implementation Resources, New!, February 2018

• Plan of Action and Milestones (POA&M) Management, Updated!, March 2018

• Vulnerability Management RP, Updated!, February 2018

• International Travel: IT Security and Physical Safety RP, Updated!, January 2018

• Documenting IT Security Agreements RP, Updated!, November 2017

• Security Risk Management RP, Updated!, September 2017

• Court-Unit Risk Assessment Package (RAP), Updated!, August 2017

• How to Build an Effective IT Security Training and Awareness Program RP, June 2017

• Security Log Management RP, March 2017

• Internal Network Access Control RP, January 2017

• Information System Contingency Planning RP, January 2017

• Information Systems and Services Acquisition, September 2015

• Continuous Monitoring of Safeguard Effectiveness RP, September 2015

• Mobile Device Security RP, December 2014

• Configuration Management RP, Updated!, April 2018

• System Boundary Protection RP, August 2014

• Secure Baseline Configuration RP, August 2014

• Security Patch Management RP, July 2014

• IT Security Incident Response RP, June 2014

Guidelines:

• IT Security in the Proof of Concept, Prototype, or Pilot Project, New!, March 2018

• Software Supply Chain Risk Management and Due Diligence, July 2017

• Getting Started - IT Security Management Personnel New to Their Role, March 2016

• ITSO Testing Services FAQs, September 2015

• Security Testing for NextGen CM/ECF: Methodology Document, July 2015

• Tell Me More About NextGen CM/ECF: General FAQs, November 2014

• Judiciary IT Security Guidance for Traveling Abroad, October 2014 http://jnet.ao.dcn/sites/default/files/information_technology/library/security/defining_system_boundary_rp.docx http://jnet.ao.dcn/information-technology/security/framework-shp/sirs http://jnet.ao.dcn/sites/default/files/information_technology/library/security/poam_management_rp.docx http://jnet.ao.dcn/sites/default/files/information_technology/library/security/vulnerability_management_rp.docx http://jnet.ao.dcn/sites/default/files/information_technology/library/security/international_travel_rp.docx http://jnet.ao.dcn/sites/default/files/information_technology/library/security/documenting_it_security_agreements_rp.docx http://jnet.ao.dcn/sites/default/files/information_technology/library/security/security_risk_management_rp.docx http://jnet.ao.dcn/sites/default/files/information_technology/library/security/court_unit_risk_assessment_package_rap.docx http://jnet.ao.dcn/sites/default/files/information_technology/doc/security/how_to_build_an_effective_it_security_training_and_awareness_program_rp.docx http://jnet.ao.dcn/sites/default/files/information_technology/library/security/security_log_management_rp.docx http://jnet.ao.dcn/sites/default/files/information_technology/library/security/internal_network_access_control_rp.docx http://jnet.ao.dcn/sites/default/files/information_technology/library/security/info_sys_contingency_planning_rp.docx http://jnet.ao.dcn/resource-packet-information-systems-and-services-acquisition http://jnet.ao.dcn/sites/default/files/information_technology/library/security/continuous_monitoring_of_safeguard_effectiveness_rp.docx http://jnet.ao.dcn/sites/default/files/information_technology/doc/security/mobile_device_security_rp.docx http://jnet.ao.dcn/sites/default/files/information_technology/library/security/configuration_management_rp.docx http://jnet.ao.dcn/sites/default/files/information_technology/library/security/system_boundary_protection_rp.docx http://jnet.ao.dcn/sites/default/files/information_technology/library/security/secure_baseline_configuration_rp.docx http://jnet.ao.dcn/sites/default/files/information_technology/library/security/security_patch_management_rp.docx http://jnet.ao.dcn/sites/default/files/information_technology/library/security/it_security_incident_response_rp.docx http://jnet.ao.dcn/information-technology/security/best-practices-resource-packets-and-guidelines/poc-prototype-pilot http://jnet.ao.dcn/information-technology/security/best-practices-resource-packets-and-guidelines/due-diligence-pocket-guide http://jnet.ao.dcn/information-technology/security/getting-started-it-security-management http://jnet.ao.dcn/information-technology/security/security-training-and-awareness-resources/itso-testing-services-faq http://jnet.ao.dcn/information-technology/security/best-practices-resource-packets-and-guidelines/security-testing-nextgen-cmecf http://jnet.ao.dcn/resources/national-applications-and-systems-supported/nextgen-cmecf/general-faqs http://jnet.ao.dcn/information-technology/security/security-training-and-awareness-resources/security-awareness-brochures/judiciary-it-security-guidance-traveling-abroad

• ODBC and Web Services: Weighing the IT Security Risks, February 2014

• Judiciary IT Security Guidance - Bring Your Own Device (BYOD), February 2013

International Travel Guidance:

• Visit the International Travel Guidance page to learn about and get resources to prepare for your next international trip. July 2017

2. Judiciary Information Security Framework

*Please note: In order to view the documents, all offerors must schedule an appointment for a reading room viewing.

http://jnet.ao.dcn/information-technology/security/odbc-and-web-services-weighing-it-security-risks http://jnet.ao.dcn/information-technology/security/security-training-and-awareness-resources/security-awareness-brochures/bring-your-own-device-byod http://jnet.ao.dcn/information-technology/security/international-travel