You must comply with copyright and site licenses of proprietary software. You must process only data that pertains to official business and is authorized to be processed on the system. You must report all security incidents or suspected incidents to the IT department. You must discontinue use of any system resources that show signs of being infected by a virus or other malware and report the suspected incident. You must challenge unauthorized personnel that appear in your work area. You must use only the data for you have been granted authorization. You must notify your manager if access to system resources is beyond that which is required to perform your job. You must attend computer security awareness and privacy training as requested by . You must coordinate your user access requirements, and user access parameters, with your manager. You must ensure that access to application-specific sensitive data is based on your job function. You must safeguard resources against waste, loss, abuse, unauthorized users, and misappropriation. You must ensure that access is assigned on your manager’s approval. You must familiarize yourself with any special requirements for accessing, protecting, and utilizing data, including Privacy Act requirements, copyright requirements, and procurement of sensitive data. You must ensure electronic official records (including attachments) are printed and stored according to policy and standards. You must ensure that sensitive, confidential, and proprietary information sent to a fax or printer is handled in a secure manner, e.g., sheet to contain statement that information being faxed is Confidential and Proprietary, For Company Use Only, etc. You must ensure that hard copies of Confidential and Proprietary information is destroyed it is no longer needed) commensurate with the sensitivity of the data. You must ensure that Confidential and Proprietary information is protected against unauthorized access using encryption, according to standards, when sending it via electronic means (telecommunications networks, e-mail, and/or facsimile).
You must comply with copyright and site licenses of proprietary software. You must process only data that pertains to official business and is authorized to be processed on the system. You must report all security incidents or suspected incidents to the IT department. You must discontinue use of any system resources that show signs of being infected by a virus or other malware and report the suspected incident. You must challenge unauthorized personnel that appear in your work area. You must use only the data for you have been granted authorization. You must notify your manager if access to system resources is beyond that which is required to perform your job. You must attend computer security awareness and privacy training as requested by . You must coordinate your user access requirements, and user access parameters, with your manager. You must ensure that access to application-specific sensitive data is based on your job function. You must safeguard resources against waste, loss, abuse, unauthorized users, and misappropriation. You must ensure that access is assigned on your manager’s approval. You must familiarize yourself with any special requirements for accessing, protecting, and utilizing data, including Privacy Act requirements, copyright requirements, and procurement of sensitive data. You must ensure electronic official records (including attachments) are printed and stored according to policy and standards. You must ensure that sensitive, confidential, and proprietary information sent to a fax or printer is handled in a secure manner, e.g., sheet to contain statement that information being faxed is Confidential and Proprietary, For Company Use Only, etc. You must ensure that hard copies of Confidential and Proprietary information is destroyed it is no longer needed) commensurate with the sensitivity of the data. You must ensure that Confidential and Proprietary information is protected against unauthorized access using encryption, according to standards, when sending it via electronic means (telecommunications networks, e-mail, and/or facsimile).
SSP-A05-FedRAMP-RoB-Template.docx