<table style="width:100%;">
<colgroup>
<col style="width: 11%" />
<col style="width: 5%" />
<col style="width: 6%" />
<col style="width: 22%" />
<col style="width: 1%" />
<col style="width: 1%" />
<col style="width: 2%" />
<col style="width: 4%" />
<col style="width: 8%" />
<col style="width: 3%" />
<col style="width: 14%" />
<col style="width: 0%" />
<col style="width: 1%" />
<col style="width: 11%" />
<col style="width: 3%" />
</colgroup>
<tbody>
<tr class="odd">
<td colspan="3"><img src="media/image1.png"
style="width:0.63889in;height:0.63958in" /></td>
<td colspan="9"><strong>FCC Computer System<br />
Application Access Assignment Form</strong></td>
<td colspan="3"></td>
</tr>
<tr class="even">
<td colspan="15"></td>
</tr>
<tr class="odd">
<td colspan="15">Employees and contractors who are requesting
application access must have this form completed and returned to the
Application Owner. Access must be granted in accordance with FCC
Instruction 1479.2 Computer Security Program Directive.</td>
</tr>
<tr class="even">
<td colspan="15"></td>
</tr>
<tr class="odd">
<td colspan="15"><p>USER INFORMATION</p>
<p><strong>(To be completed by Application Owner)</strong></p></td>
</tr>
<tr class="even">
<td colspan="9">User Name (<em>Print Last, First MI</em>):</td>
<td colspan="6">User Name ID:</td>
</tr>
<tr class="odd">
<td colspan="9">     </td>
<td colspan="6">     </td>
</tr>
<tr class="even">
<td colspan="9">Bureau/Office or Contract Name: </td>
<td colspan="6">Date Access Required:</td>
</tr>
<tr class="odd">
<td colspan="9">     </td>
<td colspan="6">     </td>
</tr>
<tr class="even">
<td colspan="9">Major Application Access:</td>
<td colspan="6">Access Level:</td>
</tr>
<tr class="odd">
<td colspan="9"><strong>     </strong></td>
<td colspan="6"><strong>     </strong></td>
</tr>
<tr class="even">
<td colspan="15"></td>
</tr>
<tr class="odd">
<td colspan="15"><p>APPLICATION RULES OF BEHAVIOR ACKNOWLEDGEMENT</p>
<p><strong>(To be completed by user and returned to Application Owner
when Completed)</strong></p></td>
</tr>
<tr class="even">
<td colspan="15">I have received a copy of the attached Application
Rules of Behavior that provide information on Federal regulations, user
responsibilities and the consequences of my actions, and computer
security policies and procedures. I have read and will fully comply with
the rules in their entirety. I recognize that it is my responsibility to
ensure that I comply with the Federal computer security policies and
procedures described in the FCC Computer Security Program
Directive.</td>
</tr>
<tr class="odd">
<td colspan="15"></td>
</tr>
<tr class="even">
<td colspan="2"><blockquote>
<p>Printed Name:</p>
</blockquote></td>
<td colspan="3"><blockquote>
<p>     </p>
</blockquote></td>
<td colspan="2"></td>
<td colspan="3"><blockquote>
<p>Organization:</p>
</blockquote></td>
<td colspan="4"><blockquote>
<p>     </p>
</blockquote></td>
<td></td>
</tr>
<tr class="odd">
<td colspan="15"></td>
</tr>
<tr class="even">
<td colspan="2"><blockquote>
<p>Signature:</p>
</blockquote></td>
<td colspan="6"></td>
<td colspan="2"><blockquote>
<p>Date:</p>
</blockquote></td>
<td colspan="3"><blockquote>
<p>     </p>
</blockquote></td>
<td colspan="2"></td>
</tr>
<tr class="odd">
<td colspan="15"></td>
</tr>
<tr class="even">
<td colspan="15"></td>
</tr>
<tr class="odd">
<td colspan="15">ACCESS APPROVAL</td>
</tr>
<tr class="even">
<td colspan="15">I am aware that the following access has been granted
to this userID:</td>
</tr>
<tr class="odd">
<td></td>
<td colspan="3">Privileged, Administrative Account.</td>
<td colspan="2"></td>
<td colspan="9">Non-Privileged, Non-Administrative User Account</td>
</tr>
<tr class="even">
<td colspan="15"></td>
</tr>
<tr class="odd">
<td colspan="4">Supervisor or COTR <em>(Printed Name)</em>:</td>
<td colspan="7" rowspan="2">Signature:</td>
<td colspan="4" rowspan="2">Date:      </td>
</tr>
<tr class="even">
<td colspan="4">     </td>
</tr>
<tr class="odd">
<td colspan="4">Application Security Custodian <em>(Printed
Name):</em></td>
<td colspan="7" rowspan="2">Signature:</td>
<td colspan="4" rowspan="2">Date:      </td>
</tr>
<tr class="even">
<td colspan="4">     </td>
</tr>
<tr class="odd">
<td colspan="15"></td>
</tr>
<tr class="even">
<td colspan="15"><p><strong>Return this form to the Computer Security
Officer, Room 1-A325</strong></p>
<p><strong>445 12th Street, S.W., Washington, DC 20554</strong></p></td>
</tr>
</tbody>
</table>

  ---------------- ----------------------------------------------------------------
  **APPLICATION    
  RULES OF         
  BEHAVIOR**       

  **Passwords:**   

                   Passwords must be at least       characters long.

                   Do not write down passwords.

                   Do not share your passwords or accounts with others.

                   Enable a password protective inactivity screensaver at your
                   station.

                   Passwords are to be changed every       days.

                   Use paraphrases instead of dictionary words when creating
                   passwords.

                   

  **Electronic     
  Data/Media and   
  Paper:**         

                   Do not post system sensitive material in areas subject to public
                   traffic or viewing (offices next to windows on ground floors
                   please take special note).

                   Do not transport system sensitive material in an unprotected
                   manner.

                   Lock down all sensitive unclassified material when leaving your
                   work area.

                   Protect sensitive unclassified information from alteration,
                   disclosure or loss.

                   Ensure all storage media are reformatted before they are removed
                   for storage in a protected environment.

                   Ensure that appropriate warning labels are printed on each and
                   every page of the sensitive documentation.

                   Prevent dumpster diving\--do not discard system sensitive
                   materials or communications in public trash containers.

                   Deleting a file does not remove its data from the media. Use
                   utilities which delete with overwriting before releasing media
                   for other assignments or to ensure its destruction.

                   Access only information for which you are authorized, "need to
                   know/access."

                   Respect the copyright on the material you reproduce.

                   Backup data files at frequent intervals.

                   Respect and protect the privacy and confidentiality of records
                   and privacy act information while in your custody.

                   

  **Dial in        
  Access:**        

                   Dial in users must ensure that adequate safeguards are in place
                   on the remote computer to ensure the security of the system to
                   which you are dialing in to.

                   Lock your terminal or log off if you must leave the work area
                   even briefly.

                   

  **Laptops:**     

                   Login IDs, passwords and /or sensitive information should not be
                   saved on the hard drive. Use a diskette/CD to save information.

                   Protect passwords and user ID's from hacker, electronic
                   eavesdroppers or shoulder surfers.

                   

  **Internet       
  Usage:**         

                   Do not transmit sensitive information via the internet.

                   Keep your anti-virus software current.

                   Periodically virus scan your client.

                   Virus scan all e-mail attachments.

                   Do not open executable attachments.

                   

  **General:**     

                   Use FCC computing resources when accessing applications in a
                   manner consistent with its intended purpose.

                   Report sensitive circumstances to the help desk.

                   Politely challenge unescorted visitors in your area (request
                   identification and purpose).

                   Be alert to the risk of theft, espionage and intrusion in the
                   areas you work in and take appropriate countermeasures.

                   Attend or participate in annual information security training.

                   Report violations of security policies or procedures that come
                   to your attention.

                   Prevent social engineering--do not reset passwords for any
                   person via telephone until the identity of the requestor has
                   been confirmed and verified.

                   Do not divulge account access procedure to any unauthorized
                   user.

                   Users are not permitted to override technical and management
                   controls.
  ---------------- ----------------------------------------------------------------

##