Attachment H - DOS Connectivity Requirements

DOS Connectivity Requirements
1. The Department of State (DOS) Sponsoring Bureau, along with DS/CTS/CMO and DS/IS/ IND are responsible for ensuring that the below listed requirements are adhered to during the life of the contract;
2. The DOS Sponsoring Bureau must ensure that an ISSO and an Alternate On-Site ISSO are designated for this connection;
3. The Contractor facility must be secured for the protection of SBU data in accordance with the Foreign Affairs Manual and Physical Security Standards for Department of State Domestic Occupied Space;
4. All hardware and software used for this connection must be IT-CCB or local CCB approved and configured and managed in accordance with 12 FAM 620 and all applicable Department of State (DOS) computer security configuration guidelines. These documents are available on OpenNet at:




http://irm.m.state.sbu/sites/bmp/grp/sm/ITCCB/Pages/ITCCBHome.htm, http://a.m.state.sbu/sites/gis/dir/fam/Pages/12FAM/12FAM.aspx and, https://intranet.ds.state.sbu/DS/SI/CS/ESS/SCM/SCM%20Final%20Documents/Forms/ AllItems.aspx.

Questions regarding the IT-CCB or local CCB can be sent to [email protected]. Questions regarding 12 FAM 600 and the security configuration guides can be sent to [email protected];
5. Citizens of specifically designated Human and/or Technical Intelligence Threat Countries may not develop, modify or perform maintenance on software developed for use on DOS computer systems, or on systems connected to DOS systems, without approval from DS/CTS/CMO;
6. The DOS network extension will have no other network connections; 7. IRM/OPS/ENM must ensure that network equipment:
a. Have access restricted to only authorized personnel in IRM/OPS/ENM or other Department of State (DOS) cleared personnel authorized by IRM/OPS/ENM; b. Is secured to preclude tampering in:
i. An approved server room; or
ii. Mounted in an enclosure box with a DS-approved lock. iii. If applicable, servers used for this extension must be located in a server room that is constructed and secured in accordance with 12 FAH-10, Information System Security Controls and Procedures; and Physical Security Standards for Department of State Domestic Occupied Space;

DOS Connectivity Requirements
8. All Contractor personnel that have unescorted physical and/or logical access to DOS network workstations, servers and/or encryptors must be eligible for contract performance and meet the personnel security requirements as documented in the DD Form 254 Contract Security