Home > About USPS & News > Forms & Publications > Postal Periodicals and Publications > Handbooks > Handbook AS-805 - Information Security

• 1-1 Policy
• 1-2 Purpose
• 1-3 Scope of Information Security Policies
• 1-4 Guiding Principles
• 1-5 Importance of Compliance
• 1-6 Information Security and the Privacy Act
• 1-7 Information Security Program

• 2-1 Policy
• 2-2 How Roles and Responsibilities Are Presented
• 2-3 Roles and Responsibilities Summary

• 3-1 Policy
• 3-2 Roles and Responsibilities
• 3-3 Information Designation
• 3-4 Security Requirements
• 3-5 Handling Information and Media
• 3-6 Disposal and Destruction of Information and Media
• 3-7 Handling Contaminated Information Resources
• 3-8 Handling Non-Postal Service Information

• 4-1 Policy
• 4-2 Roles and Responsibilities
• 4-3 Types of Risk Management
• 4-4 Information Resource Risk Management
• 4-5 Independent Risk Management
• 4-6 Site Risk Management

• 5-1 Policy
• 5-2 Roles and Responsibilities
• 5-3 Monitoring
• 5-4 Ensuring Compliance
• 5-5 Hardware and Software
• 5-6 Electronic Mail and Messaging
• 5-7 Internet
• 5-8 Generally Prohibited Uses of Postal Service Information Resources
• 5-9 Prohibited Uses of Personal Information Resources
• 5-10 Protection of Privacy

• 6-1 Policy
• 6-2 Roles and Responsibilities
• 6-3 Employee Accountability
• 6-4 Sensitive Positions
• 6-5 Background Investigations and Clearances
• 6-6 Information Security Awareness and Training
• 6-7 Departing Personnel

• 7-1 Policy
• 7-2 Roles and Responsibilities
• 7-3 Facility Security

• 8-1 Policy
• 8-2 Roles and Responsibilities
• 8-3 General Development Concepts
• 8-4 Security Activities and the Development Life Cycle
• 8-5 Information Security Assurance Process
• 8-6 Application Information Security Assurance Phases
• 8-7 Business Partnerships and Alliances

• 9-1 Policy
• 9-2 Roles and Responsibilities
• 9-3 Security Services Overview
• 9-4 Authorization
• 9-5 Accountability
• 9-6 Identification
• 9-7 Authentication
• 9-8 Confidentiality
• 9-9 Integrity
• 9-10 Availability
• 9-11 Security Administration
• 9-12 Audit Logging

• 10-1 Policy
• 10-2 Roles and Responsibilities
• 10-3 General Guidelines for Hardware and Software
• 10-4 Configuration and Change Management
• 10-5 Hardware Security
• 10-6 Software and Applications Security
• 10-7 Protection against Viruses and Malicious Code
• 10-8 Audit Logs

• 11-1 Policy
• 11-2 Roles and Responsibilities
• 11-3 Networks and Communications Security
• 11-4 Network Architecture
• 11-5 Protecting the Network Infrastructure
• 11-6 Internet Technologies
• 11-7 Protecting the Network/Internet Perimeter
• 11-8 Network Connections
• 11-9 Business Partner Requirements
• 11-10 Limiting Third-Party Network Services
• 11-11 Implementing Access and Administrative Controls
• 11-12 Remote Access
• 11-13 Network Audit Logs

• 12-1 Policy
• 12-2 Roles and Responsibilities
• 12-3 Business Continuance Management
• 12-4 Business Continuity Planning
• 12-5 Disaster Recovery Planning
• 12-6 Relationship of Criticality, Recovery Time Objective, and Recovery Point Objective
• 12-7 Mainframe Recovery Testing for Computer Operations Service Centers
• 12-8 Backup of Information Resources
• 12-9 BCM Plan Maintenance and Testing Requirements Summary
• 12-10 Operational Workarounds
• 12-11 Continuity of Operations Planning

• 13-1 Policy
• 13-2 Roles and Responsibilities
• 13-3 Information Security Incidents
• 13-4 Incident Prevention
• 13-5 Preliminary CIRT Activities
• 13-6 Incident Response

• 14-1 Policy
• 14-2 Roles and Responsibilities
• 14-3 Compliance
• 14-4 Testing Security Systems and Processes
• 14-5 Inspections, Reviews, and Evaluations
• 14-6 Monitoring
• 14-7 Audits
• 14-8 Confiscation and Removal of Information Resources

• 15-1 Policy
• 15-2 Roles and Responsibilities
• 15-3 Scope
• 15-4 Baseline Requirements
• 15-5 Prevention of Unacceptable Risk
• 15-6 Wireless Solutions
• 15-7 Device Support
• 15-8 Procurement Requirements
• 15-9 Deployment Requirements
• 15-10 Compliance and Monitoring Requirements

• 1 Chief Inspector
• 2 Vice President, Chief Technology Officer
• 3 Manager, Corporate Information Security Office
• 4 Information Security Executive Council
• 5 Vice Presidents, Functional Business Areas
• 6 Vice President, Emergency Preparedness
• 7 Vice President, Engineering
• 8 Vice President, Network Operations Management
• 9 All Officers and Managers
• 10 Executive Sponsors
• 11 Portfolio Managers
• 12 Managers of Major Information Technology Sites
• 13 Installation Heads
• 14 Chief Privacy Officer
• 15 Inspector General
• 16 Manager, Office of the Inspector General, Technical Crimes Unit
• 17 Manager, Business Continuance Management
• 18 Manager, Telecommunications Services
• 19 Managers Responsible for Computing Operations and the ACE Infrastructure
• 20 Managers of Development Centers
• 21 Program Manager, Secure Infrastructure Services
• 22 Network Connectivity Review Board
• 23 Computer Incident Response Team
• 24 Managers, Help Desks
• 25 Contracting Officers and Contracting Officer Representatives
• 26 General Counsel
• 27 Business Partners
• 28 Project Managers
• 29 Accreditor
• 30 Certifier
• 31 Security Control Officers
• 32 Information Systems Security Officers
• 33 Information Systems Security Officers
• 34 System Administrators
• 35 Database Administrators
• 36 All Personnel