DHS Security and Training Requirements for Contractors

This webpage provides the security and training requirements that Contractors must comply with when special clauses Safeguarding of Sensitive Information (MARCH 2015) and Information Technology Security and Privacy Training (MARCH 2015) are included in a solicitation and/or contract.

Personnel Security Policy

• DHS Instruction Handbook 121-01-007 Department of Homeland Security Personnel Suitability and Security Program

Information Security Policy

• DHS Management Directive 11042.1 Safeguarding Sensitive But Unclassified (for Official Use Only) Information
• DHS Management Directive 11056.1 Sensitive Security Information (SSI)

Information Technology Security Policy

• DHS Sensitive Systems Policy Directive 4300A
• DHS 4300A Sensitive Systems Handbook
• DHS 4300A Attachment G – Rules of Behavior
• Security Authorization Process Guide v11.1
• DHS Security Authorization Templates
• Fiscal Year 2014 DHS Information Security Performance Plan
• Information System Security Officer (ISSO) Guide

IT Security Awareness Training

Under Federal Employees, select Launch New CyberAwareness Challenge Federal Version.

• Launch New CyberAwareness Challenge Federal Version

Privacy Safeguards

• DHS Handbook for Safeguarding Sensitive Personally Identifiable Information
• DHS Privacy Incident Handling Guidance

Privacy Training

• Privacy at DHS: Protecting Personal Information