DSE security knowledge hub

Security knowledge,
without the noise.

Page 250 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.

DSE-authoredOfficial sourcesReviewed guidance
Search the library
DSE post stream

Guidance and analysis from DSE

3,000 articles
DSE visual briefPhysical security

Evaluate records-storage facilities as purpose-built protective environments

Under 36 CFR 1234, the rule requires that piping (with the exception of fire protection sprinkler piping and storm water roof drainage piping) not be run through records storage areas unless supplemental measures such as gutters or shields are used to prevent water leaks and the piping assembly is inspected for potential leaks regularly.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the guide
DSE visual briefPhysical security

Set records-storage environmental controls by media and retention need

Under 36 CFR 1234, the rule requires that paper-based permanent, unscheduled, and sample/select records be stored in records storage space that provides 24 hour/365 days per year air conditioning (temperature, humidity, and air exchange) equivalent to that required for office space.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the briefing
DSE visual briefPhysical security

Submit system-specific records-storage fire certification evidence to NARA

Under 36 CFR 1234, the rule requires that the documentation demonstrate how that system meets the requirement in section 1234.12(s) through: a report under seal of a licensed fire protection engineer that details the characteristics of the system.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the checklist
DSE visual briefContinuity & recovery

Maintain electronic-system inventories, documentation, and migration plans

Under 36 CFR 1236, the rule requires that agencies maintain up-to-date documentation about electronic information systems that is adequate to specify all technical characteristics necessary for reading and processing the records contained in the system.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the guide
DSE visual briefContinuity & recovery

Connect standard state mitigation plans to funding and risk-reduction decisions

Under 44 CFR 201, the rule requires that states have an approved Standard State Mitigation Plans meeting the requirements of this section as a condition of receiving non-emergency Stafford Act assistance and FEMA mitigation grants.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the playbook
DSE visual briefContinuity & recovery

Document the capability claims behind an enhanced state mitigation plan

Under 44 CFR 201, the rule requires that the Enhanced State Mitigation Plan demonstrate that a State has developed a comprehensive mitigation program, that the State effectively uses available mitigation funding, and that it is capable of managing the increased funding.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the briefing
DSE visual briefContinuity & recovery

Turn local mitigation plans into prioritized, maintained risk-reduction programs

Under 44 CFR 201, the rule requires that the plan include the following: a plan maintenance process that includes a process by which local governments incorporate the requirements of the mitigation plan into other planning mechanisms such as comprehensive or capital improvement plans, when appropriate.

Published Reviewed 3 min readBy DSE Security Editorial Team
Read the checklist