Physical Information Security
The security of the physical information is protected according to the following protocol:
1. All project team members with offices will have doors that lock, and at times when the individual is not in the office, the office will remain locked (e.g. at night, during out-of-office meetings, etc.). A secure location will be available for team meetings and a secure common work area (project office) will be provided with telephones and computers. All RFQ and RFP documents will be stored in locked cabinets. No information is to be removed from the common work area. All RFQ and RFP are to be locked in the cabinets overnight.
2. Any staff with keys to the project office will sign a key registry.
3. Copies of other keys will be tracked and restricted to individuals who need to access the offices or cabinets.
4. All paper documents related to the Project will be stored in a locked cabinet or office.
5. An appropriate security protocol regarding shredding will be established and adhered to.
6. A "clean desk" policy will be adhered to where possible.
7. All final materials integral to the transaction process will be appropriately retained and filed.
8. All other documents that are not integral to the official transaction process record may not need to be retained (such as duplicate copies, rough notes and preliminary drafts used to develop the official record).