Transmittal Letter

Information Resource Certification and Accreditation (C&A) Process

Handbook AS-805-A June 2015
Transmittal Letter

A. Explanation. As part of the Postal Service’s efforts to enhance security across all technology, this handbook establishes the process and guidance for the Postal Service information resource certification and accreditation (C&A) process. The process provides a framework for characterizing an information resource, determining sensitivity and criticality, defining security requirements and controls, testing security solutions, assessing risk, and evaluating the security posture of Postal Service applications to ensure that appropriate, cost-effective information security controls and processes are implemented.

B. Availability. This document is available on the Postal Service intranet at http://blue.usps.gov/cpim.

C. Comments. Submit comments and questions to:

CORPORATE INFORMATION SECURITY OFFICE
UNITED STATES POSTAL SERVICE
4200 WAKE FOREST ROAD
RALEIGH NC 27668-1510

Comments may also be sent by e-mail to information_security@usps.com. Use “AS-805-A” in the subject header.

D. Effective Date. This handbook is effective immediately.

(A) Randy Miskanic, Chief Information Officer and Executive Vice PresidentM

(A) Randy Miskanic
Chief Information Officer and Executive Vice President