A&A Upcoming Deadline – Create “FY2015 SOP” Folder

This message is to provide an update of activities involving the Science and Support System (S&SS).

The Information Security Office is coordinating an FY15 Information Technology Security Activities memo to be distributed in the next few weeks to Information System Owners, Science Center Directors and Program Managers.   In order to provide as much time as possible to complete the first few activities, the following guidance and targeted dates for completion are being provided in advance of the memo to all Information System Security Officers (ISSO) and Asset Security Managers regarding i) Information System Contingency Plan (ISCP) updates and ii) Contingency Plan (CP) Testing and Exercises.

As in previous fiscal years, completion of activities will be tracked through the Continuous Monitoring dashboard at http://internal.usgs.gov/oei/security/continuous_monitoring.html.

Information System Contingency Plan updates:

1. Create an “FY2015 SOP” folder for your System or Asset on the A&A SharePoint Portal

The A&A SharePoint portal is available at https://collaboration.usgs.gov/wg/poam/SitePages/Home.aspx.

2. Review the Business Impact Analysis (BIA)

All Systems and Assets were asked to complete a new BIA using a SharePoint tool by July 3, 2014.  The BIA tool is located at https://collaboration.usgs.gov/wg/poam/BIA/BIA/Forms/AllItems.aspx.

3. Review the most recent ISCP to ensure it meets the BIA requirements.

Existing ISCPs are located in the System or Asset folders on the A&A SharePoint portal

https://collaboration.usgs.gov/wg/poam/SitePages/Home.aspx.

4. Once the ISCP is reviewed and updated, upload the ISCP to the “FY2015 SOP” folder created in step 1 by November 14, 2014.

 Note:  Contingency Training is an annual requirement.   If an individual identified with an assigned role and/or responsibility in the ISCP is unable to participate in the test/exercise, this requirement can be satisfied by reviewing the most recent FY15 CP Test Report AND sending an email to the ISSO or Asset Security Manager stating they have reviewed the report and accept their CP role and/or responsibility.