Agenda - 11-03-1999 - 8b - Laserfiche WebLink

Browse Search

Security Guidelines We are providing the security requirements used by the Census Bureau in all its work facilities, and on all its computers. The Census Bureau accepts that the implementation of these guidelines may vary slightly from one New Construction program participant to another, but the end results must be the same for each participant-non-disclosure of Title 13, United States Code information. Protecting Census 2000 Address Information On Paper • Keep all Census 2000 address information in a locked room during non-work hours. If possible, store the Census 2000 address materials in locked desks or cabinets. • During work hours, do not leave a room unattended where Census 2000 address information is stored; lock the room whenever you leave it. • Do not leave Census 2000 address information unattended at your desk. • .Only make copies of the information if required to complete your task; while making copies, do not leave the copying machine unattended. • To FAX a document containing Census 2000 address information to a Census Bureau location, make sure the document is properly labeled, verify the FAX number before sending, and arrange for a Census Bureau employee to be at the FAX machine to receive it. • Do not discuss the Census 2000 address information or locations of addresses with anyone who is not a New Construction program liaison or a Census Bureau employee.. • Do not disclose precise, or even anecdotal information, about Census 2000 addresses or locations. Protecting Electronic Census 2000 Address Information • Operating systems, programs, applications, and data related to the review of Census 2000 addresses must be accessible only to New Construction program liaisons. The automated data processing (ADP) system should restrict the read., write, delete, and execute functions applicable to the Census 2000 addresses. + The ADP system must use log-on routines that require aUser-ID and password that conform to the following guidelines: 1. Assign a unique User-ID and password for each New Construction program liaison. 2. Disable passwords after three bad attempts. 3. Reject passwords that are the same as the User-ID or that have been used within the last 6 months. 4. Passwords must be at least six characters. 5. Do not display passwords on terminals or printers. 6. Encrypt passwords. 7. Assign a 30-day expiration date to passwords. 8. On new accounts, use expired passwords to force users to set new passwords. • The ADP system must display a warning log-on feature. • Computer screens must display a warning that states: 'This computer contains U.S. Census Bureau address information protected by Title 13 United States Code; unauthorized release of this information is punishable by fines or imprisonment." Form D-1b54 X321-991 'Z