1. Access Control: Physical and administrative controls to prevent unauthorized entry into operations, data storage, library, and other support areas. This includes: a. Physical controls b. administrative controls c. Protection of sensitive material 2. Operating Systems Controls: Ensure system integrity and prevent unauthorized use of sensitive system interfaces, including: a. Controls for access to data files and software programs, recording, and displaying non routine activity indicating potential security violations. b. Equipment security to protect against theft and unauthorized use, addressing concerns such as theft, sabotage, civil disturbance, natural disasters, and other threats. c. Software and data security, incorporating administrative, physical, and technical safeguards into all applications and significant modifications. d. Telecommunications security to protect Department of Labor program data during transmission by data communications equipment, including procedures, controls, security safeguards, and contingency plans for major disruptions. e. Personnel Security Policies: Covering all individuals involved in system design, operation, maintenance, or data access for VIDOL programs, including security awareness and training activities.
