Effective immediately, Handbook AS-805, Information Security, is revised. The February 2010 edition has been updated to reflect the following:
n BP Connectivity: Added a requirement for business partner (BP) review connectivity.
n ADRPs: Added a new requirement for Application Disaster Recovery Plans (ADRPs).
n PCI DSS: Added new requirements associated with the new PCI Data Security Standard (DSS).
n MDCP: Added a new section to address the Mass Data Compromise Response Plan (MDCP).
n Policy Review: Added a new requirement for a semiannual review of information security policy.
Handbook AS-805 is now available on the Postal Service™ PolicyNet website:
n Go to http://blue.usps.gov.
n Under “Essential Links” in the left-hand column, click PolicyNet.
n On the PolicyNet page, click HBKs.
(The direct URL for the Postal Service PolicyNet website is http://blue.usps.gov/cpim.)
The direct URLs for Handbook AS-805 (February 2010) are the following:
n http://www.usps.com/cpim/ftp/hand/as805.pdf (PDF version).
n http://www.usps.com/cpim/ftp/hand/as805/welcome.htm (HTML 508-compliant version).
Note: Offices should update references/links to Handbook AS-805 in local documents.
— Corporate Information Security, Chief Information Officer, 9-23-10
