[pic]

Defense Security Service Electronic Communications Plan Sample

Date: 02/01/2012

Company:
|XYZ, Inc. |

Address:
|12345 West Broad Way, New York, NY. 54321 |

Cage Code:
|89PGK |

ODAA Unique Identifier:
|89PGK-20111119-00009-00019 |

Table of Contents

1. INTRODUCTION 5

2. PURPOSE 5

3. ROLES/PERSONNEL SECURITY 6

4. DETAILED SYSTEM DESCRIPTION/TECHNICAL OVERVIEW 8

5. IDENTIFICATION AND AUTHENTICATION POLICY AND PROCEDURES 9

5.1 USER IDENTIFICATION AND AUTHENTICATION 9 5.2 DEVICE IDENTIFICATION AND AUTHENTICATION 10 5.3 IDENTIFIER MANAGEMENT 10 5.4 AUTHENTICATOR MANAGEMENT 10 5.5 ACCESS CONTROL POLICY AND PROCEDURES 11 5.7 ACCESS ENFORCEMENT 12 5.8 INFORMATION FLOW ENFORCEMENT 13 5.9 SEPARATION OF DUTIES 13 5.10 LEAST PRIVILEGE 14 5.11 UNSUCCESSFUL LOGIN ATTEMPTS 14 5.12 SYSTEM USE NOTIFICATION 14 5.13 SESSION LOCK 15 5.15 SUPERVISION AND REVIEW — ACCESS CONTROL 16 5.16 REMOTE ACCESS 16 5.17 USE OF EXTERNAL INFORMATION SYSTEMS 17

6. SECURITY AWARENESS AND TRAINING POLICY AND PROCEDURES 18

6.1 SECURITY TRAINING 19

7. AUDIT AND ACCOUNTABILITY POLICY AND PROCEDURES 19

7.1 AUDITABLE EVENTS 19 7.2 CONTENT OF AUDIT RECORDS 20 7.3 AUDIT STORAGE CAPACITY 20 7.4 AUDIT MONITORING, ANALYSIS, AND REPORTING 20 7.5 TIME STAMPS 21