Link to contents


Information Technology


REVISED HANDBOOK

Handbook AS-805, Information Security

Effective August 4, 2005, Handbook AS-805, Information Security, is revised as follows to update the requirement for labeling computer screen displays.

We will incorporate these revisions into the next online update of Handbook AS-805 available on the PolicyNet Web site:

• Go to http://blue.usps.gov.

• Under "Essential Links" in the left-hand column, click on References.

• Under "References" in the right-hand column, under "Policies," click on PolicyNet.

• Then click on HBKs.

(The direct URL for the Postal Service PolicyNet Web site is http://blue.usps.gov/cpim.)

Handbook AS-805, Information Security

* * * * *

3 Information Designation and Control

* * * * *

3-5 Handling Information and Media

* * * * *

3-5.1 Labeling of Information and Media

3-5.1.1 Sensitive Information

[Revise text to read as follows:]

Sensitive information included in electronic media (e.g., disks, diskettes, tapes) and hardcopy output (e.g., printouts, screen prints, architecture drawings, and engineering layouts) must be legibly and durably labeled as "RESTRICTED INFORMATION."

On applications processing sensitive information, the following statement must be prominently displayed on the login/password screen or the welcome screen:

"Information within this application is designated sensitive and should be properly protected from unauthorized access or disclosure."

3-5.1.2 Business-Controlled Sensitivity Information

[Revise text to read as follows:]

Business-controlled sensitivity information included in electronic media and hardcopy output must be legibly and durably labeled as "RESTRICTED INFORMATION."

On applications processing business-controlled sensitive information, the following statement must be prominently displayed on the login/password screen or the welcome screen:

"Information within this application is designated business-controlled sensitive and should be properly protected from unauthorized access or disclosure."

* * * * *

— Corporate Information Security,
Information Technology, 8-4-05

EXTRA SERVICES

Reduction in Online Retention Period

On August 1, 2005, we will reduce the online retention period for records for most extra services products in the Product Tracking System from 90 days to 60 days. We are implementing this change to improve system performance and response time.

Please note the following exceptions to the 60-day online retention period for records for extra services products:

• The online retention period for domestic Express Mail®, Global Express Mail®, and Global Express Guaranteed® records will remain at 90 days.

• Online records for inbound international records will remain in the Product Tracking System database for 270 days.

We will continue to observe the full retention period for all records. After the online retention period has expired, we will store (archive) records in offline files for the remainder of the full retention period. (For specific retention periods, see Handbook PO-610, Signature Capture and Electronic Record Management: Manager's Guide to Standard Operating Procedures, section 4.5.)

Customers and Postal ServiceTM personnel can restore archived information by accessing the Track & Confirm Web page at www.usps.com (click on Track & Confirm) or by calling Customer Service at 800-222-1811. (Postal Service personnel can also restore archived information by accessing the Track & Confirm Intranet Web page at http://blue.usps.gov; click on My Work; then, under "Moving the Mail Tools," click on Track and Confirm.) Following a restoration request, all event information is restored, usually within 2 to 4 hours (although on rare occasions the restoration process may take up to 24 hours).

— Product Information Requirements,
Product Development, 8-4-05