ࡱ> g ,bjbjVV :r<r<$%"""8ZL4"aM"07pLLLLLLL$YN QM;;;MM===;^L=;L==JhK^{;JL1M0aMKQi<6Q KK8QK;;=;;;;;MM=^;;;aM;;;;Q;;;;;;;;; :  Internal Inspections Report HEADQUARTERS Version 1.0 Effective Date: January 12, 2011 Prepared By: [Insert Agency] [Insert Agency Address] [Insert Date] INSTRUCTIONS The following questions serve as an internal audit checklist regarding the agencies security procedures relating to Internal Revenue Service documents and federal security implementation controls. The purpose of this questionnaire is to measure the agencies level of compliance with federal disclosure regulations. When answering the questions in this document, the answers should be entered on the line directly below the question. Formatting and color for the answer has already been set, so modifying this it not advisable. The responses will be colored blue, so its easily identifiable. For Example: 1. How is FTI received from the IRS? FTI is received from the IRS via the secure Tumbleweed client to a Windows XP workstation. After completion, the form should be printed out and signed by the Disclosure Officer and the Director from the Agency. The Agency should complete the contact information below for all parties that involved in supplying information. NameTitleE-mail It is advisable for the agency to collect and maintain documented evidence to back to answers to this report in the instance of an audit. Having this evidence on hand will also aid the IRS Safeguards on-site review. Record Keeping Requirements (Publication 1075 section 3.0) IRC Section 6103(p)(4)(A) How is FTI received from the IRS? (Tumbleweed, ConnectDirect, other Secure Data Transmission (SDT)-list) Are FTI receipts logged ? What data elements are captured in the log? Are products/documents created from the FTI data (letters, reports, etc.)? Describe what products/documents are created. How are these products/documents tracked and stored until destruction? Upon receipt of FTI, how and where is the data electronically distributed? What type of FTI is received from the IRS? Are back-up files stored off-site? Where (Site Name and address) are files stored? What protections are in place? Who currently has access (name & title)? Secure Storage (Publication 1075 section 4.0) IRC Section 6103(p)(4)(B) Please describe the physical security of the Agency Headquarter? (e.g. keypad locked doors, guard desks, locations, hours, etc.) If keypads are used, is each attempt logged? Who reviews the access attempt logs? (Name and title) What alarm systems are currently running at Agency Headquarters? (e.g. Intrusion Alarms, Motion Detectors, Exit Alarms) Who monitors these alarms? (Name and title) Are security cameras used at the Agency Headquarters? Who monitors the security feed? (Name and title) Are records maintained on the issuance of keys/key cards? How are records maintained? (automated file, written log, etc.) Who is responsible for the issuance of keys/key cards (Name and title) Are periodic reviews conducted to reconcile records and determine if users still need access? Date of last review. Is FTI locked in a storage cabinet? Where is the key kept? Who has access to the key? How many keys are in existence? Who maintains the backup keys? Are combination locks used? How often is the combination changed? Who controls the combinations? Are ID cards required to be worn by employees at all times? How are ID cards inventoried or managed? Do visitors/vendors sign a visitor access log? What data elements are captured in the log? Who reviews the visitor access log periodically? Two barriers are required to protect FTI. Please Describe the one that applies to your agency: i. Secured perimeter / locked container ii. Locked perimeter / secured interior iii. Locked perimeter / secured container iv. Other (describe) Who has access to the office after core business hours? How is security enforced after core business hours? Are files stored at an off-site storage facility? Is this a state-run facility or a contractor site? How access limited from non-agency personnel? How are the files shipped / transferred to the off-site storage facility? Restricting Access (Publication 1075 section 5.0) IRC Section 6103(p)(4(C) What identifying information is used to retrieve FTI? Is FTI kept separate or is it commingled with other information? Can FTI within agency records be located and separated easily? After independent verification occurs, what specific data is entered into the system? How is access limited to authorized personnel? Is FTI made available to personnel outside of agency personnel (contractors, other agencies, etc.)? List personnel/offices and provide a justification. Does the agency have web based applications? Is FTI accessible through a web site? Are FTI access log reports monitored to detect unauthorized browsing? Is FTI transmitted via email? How is the FTI protected? (encryption - describe) Is FTI transmitted via fax machine? Where is the receiving fax machine located? (location in office) Are all individuals in the receiving location cleared for FTI access? Disposing Federal Taxpayer Information (Publication 1075 section 8.0) IRC Section 6103(p)(4)(F) Is FTI paper waste material generated? Where is paper waste material placed? (recycle bins, locked containers, waste baskets, other container) How is the paper waste material destroyed? Who performs the destruction of paper waste material? (Agency Staff, Contractor list) Is a contractor used to pick up the waste material? Name of contractor: Where does the contractor take the waste material for destruction? Does agency staff accompany material and view destruction? Computer System Security (Publication 1075 section 5.6) Are there user accounts for the application containing FTI? How are these accounts managed? Who manages the accounts? Are accounts given the appropriate level of permissions that do not exceed a persons need for their job functions? How often and by whom are accounts reviewed for access need? Are accounts configured to lock after 3 failed login attempts? Are application users supplied with unique user IDs? How does the user receive their network user ID? Are user IDs disabled after 90 days of inactivity? Are user IDs archived? Are application passwords set to be a minimum of 8 characters in length? What complexity requirements are tied to passwords? Are passwords required to be changed at least every 90 days? How many generations of passwords are maintained? Is an IRS approved warning banner displayed prior to a user application? Is the application configured to lock/terminate the session after 15 minutes of inactivity? Is auditing enabled on the application? What auditable events are set to be captured? Is appropriate storage capacity given to audit records? Are there alerts established to inform administrators of an audit processing failure? How is the administrator alerted? Does the application provide capabilities for monitoring, analyzing, and report generation of auditable events? Does the reporting feature allow for reduction, so that reports on specific audit events can be tailored to a report? Are time stamps used with each audit event? How is the audit information protected? How long are audit records maintained? Does the Agency provide annual security awareness training? Are there records maintained to track employee completion of this training? Does the Agency provide job-related security training? Are there records maintained to track employee completion of this training? Does the Agency utilized the Plan of Actions and Milestones (POA&M) process to manage risks identified through security assessments or risk assessments? Is a baseline configuration maintained for the application that contains software versions, patch levels, services used, etc.? Does the Agency follow a configuration change control process? How are change requests submitted? Who analyzes the requests? Is there an established Configuration Control Board that is involved in the approval process? Are all changes to the information system documented? Is there a list of personnel who are authorized to make changes to the application? Is this list of personnel periodically reviewed? Does the Agency have an implemented Incident Response process? Does the Agency track and document security incidents on an ongoing basis? Does the Agency promptly report incidents involving FTI to TIGTA? Are Risk Assessments conducted with results documented? How often are Risk Assessments conducted? What is the date of the last Risk Assessment? Is the application managed using a System Development Life Cycle (SDLC) methodology that is consistent with NIST SP 800-64? I acknowledge that Ive been presented and reviewed the responses laid out here in the Internal Inspections Report as apart of the IRS Safeguards Internal Inspections requirement. /s/ ______________________________________________ _____________ Disclosure Officer Date /s/ ______________________________________________ _____________ Agency Executive Date     PAGE  PAGE 1 "#$012`abcefhlmz{ndZnM@<hM}hNhwcgOJQJ^JhNhM}OJQJ^Jh}/OJQJ^JhwcgOJQJ^Jh_h}/OJQJ^Jh_hwcgOJQJ^Jh"7h#U5OJQJ^Jh#UOJQJ^J#h"7h#U5CJOJQJ^JaJh#U5CJOJQJ^JaJhM}OJQJ^Jh_hM}OJQJ^J hNhM}hwcg5:CJOJQJ\^JhM}5:CJOJQJ\^J"#$12>?`abcdef $ 0*$a$gdM}$ a$gdM}  gd#U$ a$gd#U  gdM}gdNgdM}fghijklmz) " # K gd+>$ ^$ gd+> 7$8$H$gd] egd;b$a$gdM}gdN $ 0*$a$gdM} " # K Y 濳h_3h_35>*CJaJhvX1h*CJaJhvX1h*5>*CJaJhvX1h*5CJaJhj5>*CJaJhjhRyB*phh+>B*phh^2h+>h] e h] eh] eh;bhEe h;b5>*2  $$7$8$H$Ifa$gdvX1l 7$8$H$gd] e I222$7$8$H$IfgdvX1l kd$$IflF l*   t06    44 lapytvX1 ^GGG$7$8$H$IfgdvX1l kd$$Ifl#F l*  t06    44 lapytvX1 ^GGG$7$8$H$IfgdvX1l kd$$IflF l*  t06    44 lapytvX1 ^GGG$7$8$H$IfgdvX1l kdL$$Ifl#F l*  t06    44 lapytvX1 ^GGG$7$8$H$IfgdvX1l kd$$IflF l*  t06    44 lapytvX1 ^GGG$7$8$H$IfgdvX1l kd$$IflF l*  t06    44 lapytvX1 ^GGG$7$8$H$IfgdvX1l kdn$$IflF l*  t06    44 lapytvX1 ^GGG$7$8$H$IfgdvX1l kd$$$IflF l*  t06    44 lapytvX1 ^GGG$7$8$H$IfgdvX1l kd$$IflF l*  t06    44 lapytvX1 ^GGG$7$8$H$IfgdvX1l kd$$IflF l*  t06    44 lapytvX1 ^GGG$7$8$H$IfgdvX1l kdF$$IflF l*  t06    44 lapytvX1 ^GGG$7$8$H$IfgdvX1l kd$$IflF l*  t06    44 lapytvX1 ^GGG$7$8$H$IfgdvX1l kd$$IflF l*  t06    44 lapytvX1 ^GGG$7$8$H$IfgdvX1l kdh $$IflF l*  t06    44 lapytvX1 xy^UUUSKB^gd"t & Fgd"t 7$8$H$gd] ekd $$IflF l*  t06    44 lapytvX1  xy|ABCF 234degøθøΦΔΔΔθΔΔΔΔyqh"tCJaJher@h}/B*CJaJphh}/B*CJaJphh:her@B*ph h:h}/ h:hmfh:h:"B*phh:h}/B*phh:h"tB*ph h:h"th"th"thEe5>*CJaJh"th"t5>*CJaJh^25>*CJaJ,yz{|BCDEFp^pgder@^gder@p^pgd"t & Fgd"t & Fgd"t^gd"t   234defggd"tp^pgder@ & Fgd"t & Fgd"t^gder@fghij & Fgd*CJaJh*CJaJhaZCJaJhVh9B*CJaJphhVB*CJaJphh:hVB*ph h:haZh:h9B*ph/1wxy89:  gdaZp^pgdV & FgdaZ^gdV & FgdaZ  vwxy89:NOPQR@ ^@ gd^ & FgdVp^pgd^ & FgdV^gdVLMNnopqr p^pgd>@ & Fgd^^gd>@ & FgdVgdV^gdV & FgdV@ ^@ gd^KLMNnor   B C E %!&!'!=!?!B!!!!!!!"""5"6"7"""""""# # #8#9#<#t#u#w###ȽϽϽϽϽϽϽϽϽϽϽϽ h:h`: h:h>@h:h`:B*phh:h>@B*ph h:hV h:h^hVhVhV5>*CJaJhVCJaJh^h`:B*CJaJph@    B C D E %!&!'!@!A!B! & Fgd>@^gd>@ & Fgd>@ & Fgd^p^pgd>@B!!!!!!!!"""5"6"7"""""""# # #8# & Fgd^ & Fgd^p^pgd>@ & Fgd>@^gd>@ & Fgd>@8#9#:#;#<#t#u#v#w########d$e$f$$$$$ % % %@ ^@ gd>@ & Fgd^ & Fgd^p^pgd>@#####d$e$f$$$$$$ % % % %5%6%8%_%`%a%%%%%%%$&%&&&r&s&t& '''''''''''(((t(u(v(((()))5)6)7)v)w)x))))** *A*B*C*m*n*o****+ h:ho h:h`:h:hB*phh:h>@B*ph h:h^h:h`:B*phO %5%6%7%8%_%`%a%%%%%%%$&%&&&r&s&t& ''''' & Fgdo^gd>@ & Fgdop^pgd>@ & Fgd^''''''''''((((t(u(v(((()))5)6)7)p^pgd>@ & Fgdo & Fgdo^gd>@7)v)w)x))))** *A*B*C*m*n*o****++++ ++h^hgdjp^pgd>@ & Fgdo^gd>@ & Fgdo++++++,),.,1,5,r,,,,,,,,,,,,,,,,,,,,,,,,,,,,ºh#U0JmHnHuhmh2w h2w0Jjh2w0JUhvX1jhvX1U hjhjhjhjaJhjhj56aJhj h:hjh:h`:B*phh:h>@B*ph&++++,/,0,1,5,r,,,,,,,,,,,, &`#$gdm  h^hgdj$  h^ha$gdj $h^ha$gdjh^hgdj,,,,,,,,h^hgdj &`#$gdmh]hgd2w8 001h:p&/ =!h"h#h$h% $$If!vh#v #v#v:V l  t065 55pytvX1$$If!vh#v #v#v:V l# t065 55pytvX1$$If!vh#v #v#v:V l t065 55pytvX1$$If!vh#v #v#v:V l# t065 55pytvX1$$If!vh#v #v#v:V l t065 55pytvX1$$If!vh#v #v#v:V l t065 55pytvX1$$If!vh#v #v#v:V l t065 55pytvX1$$If!vh#v #v#v:V l t065 55pytvX1$$If!vh#v #v#v:V l t065 55pytvX1$$If!vh#v #v#v:V l t065 55pytvX1$$If!vh#v #v#v:V l t065 55pytvX1$$If!vh#v #v#v:V l t065 55pytvX1$$If!vh#v #v#v:V l t065 55pytvX1$$If!vh#v #v#v:V l t065 55pytvX1$$If!vh#v #v#v:V l t065 55pytvX1^ 2 0@P`p2( 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p 0@P`p8XV~_HmH nH sH tH @`@ NormalCJ_HaJmH sH tH V@V N Heading 1 $@&a$5:CJ,OJQJ\^JaJ,R@R N Heading 2$ 0*$@&a$5OJQJ^J:@: , Heading 7 <@&DA`D Default Paragraph FontRi@R  Table Normal4 l4a (k (No List <Oq< ,800-53 ControlCJDOD M}center plain,cp$a$aJzOz M}%col text,9 col text,ct,centered title @PPaJLP@"L j Body Text 2$5$7$8$9DH$a$aJj@3j * Table Grid7:V04B4 2wHeader  !4 @R4 2wFooter  !.)@a. 2w Page NumberPK![Content_Types].xmlN0EH-J@%ǎǢ|ș$زULTB l,3;rØJB+$G]7O٭V$ !)O^rC$y@/yH*񄴽)޵߻UDb`}"qۋJחX^)I`nEp)liV[]1M<OP6r=zgbIguSebORD۫qu gZo~ٺlAplxpT0+[}`jzAV2Fi@qv֬5\|ʜ̭NleXdsjcs7f W+Ն7`g ȘJj|h(KD- dXiJ؇(x$( :;˹! I_TS 1?E??ZBΪmU/?~xY'y5g&΋/ɋ>GMGeD3Vq%'#q$8K)fw9:ĵ x}rxwr:\TZaG*y8IjbRc|XŻǿI u3KGnD1NIBs RuK>V.EL+M2#'fi ~V vl{u8zH *:(W☕ ~JTe\O*tHGHY}KNP*ݾ˦TѼ9/#A7qZ$*c?qUnwN%Oi4 =3N)cbJ uV4(Tn 7_?m-ٛ{UBwznʜ"Z xJZp; {/<P;,)''KQk5qpN8KGbe Sd̛\17 pa>SR! 3K4'+rzQ TTIIvt]Kc⫲K#v5+|D~O@%\w_nN[L9KqgVhn R!y+Un;*&/HrT >>\ t=.Tġ S; Z~!P9giCڧ!# B,;X=ۻ,I2UWV9$lk=Aj;{AP79|s*Y;̠[MCۿhf]o{oY=1kyVV5E8Vk+֜\80X4D)!!?*|fv u"xA@T_q64)kڬuV7 t '%;i9s9x,ڎ-45xd8?ǘd/Y|t &LILJ`& -Gt/PK! ѐ'theme/theme/_rels/themeManager.xml.relsM 0wooӺ&݈Э5 6?$Q ,.aic21h:qm@RN;d`o7gK(M&$R(.1r'JЊT8V"AȻHu}|$b{P8g/]QAsم(#L[PK-![Content_Types].xmlPK-!֧6 0_rels/.relsPK-!kytheme/theme/themeManager.xmlPK-!0C)theme/theme/theme1.xmlPK-! ѐ' theme/theme/_rels/themeManager.xml.relsPK] $ $$$' }0#+,+/47;?Cf ylP,P1  B!8# %'7)+,, !"#$%&'()*,-.01235689:<=>@ABDE  '!!8@0(  B S  ? _Toc112117357 _Toc114473392 _Toc112117361 _Toc112117362 _Toc111861540 _Toc111862263 _Toc111863139 _Toc112065759 _Toc112065835 _Toc112117365 _Toc111861541 _Toc111862264 _Toc111863140 _Toc112065760 _Toc112065836 _Toc112117366 _Toc139945493 _Toc112117370 _Toc112117405 _Toc137973986 _Toc137974192 _Toc138144442 _Toc138144662 _Toc138144882 _Toc138146404 _Toc138146624 _Toc138146848 _Toc138147312 _Toc138147778 _Toc138148870 _Toc138149128 _Toc138149448 _Toc138149733 _Toc138150056 _Toc138217457 _Toc139945529 _Toc137973988 _Toc137974194 _Toc138144444 _Toc138144664 _Toc138144884 _Toc138146406 _Toc138146626 _Toc138146850 _Toc138147314 _Toc138147780 _Toc138148872 _Toc138149130 _Toc138149450 _Toc138149735 _Toc138150058 _Toc138217459 _Toc139945531 _Toc113938884 _Toc138144464 _Toc138144684 _Toc138144904 _Toc138146426 _Toc138146646 _Toc138146870 _Toc138147334 _Toc138147800 _Toc138148892 _Toc138149150 _Toc138149470 _Toc138149755 _Toc138150078 _Toc138217479 _Toc139945551 _Toc138144466 _Toc138144686 _Toc138144906 _Toc138146428 _Toc138146648 _Toc138146872 _Toc138147336 _Toc138147802 _Toc138148894 _Toc138149152 _Toc138149472 _Toc138149757 _Toc138150080 _Toc138217481 _Toc139945553 _Toc138144508 _Toc138144728 _Toc138144948 _Toc138146470 _Toc138146690 _Toc138146914 _Toc138147378 _Toc138147844 _Toc138148936 _Toc138149194 _Toc138149514 _Toc138149799 _Toc138150122 _Toc138217523 _Toc139945595 _Toc138144509 _Toc138144729 _Toc138144949 _Toc138146471 _Toc138146691 _Toc138146915 _Toc138147379 _Toc138147845 _Toc138148937 _Toc138149195 _Toc138149515 _Toc138149800 _Toc138150123 _Toc138217524 _Toc139945596 _Toc138144510 _Toc138144730 _Toc138144950 _Toc138146472 _Toc138146692 _Toc138146916 _Toc138147380 _Toc138147846 _Toc138148938 _Toc138149196 _Toc138149516 _Toc138149801 _Toc138150124 _Toc138217525 _Toc139945597 _Toc138144516 _Toc138144736 _Toc138144956 _Toc138146478 _Toc138146698 _Toc138146922 _Toc138147386 _Toc138147852 _Toc138148944 _Toc138149202 _Toc138149522 _Toc138149807 _Toc138150130 _Toc138217531 _Toc139945603 _Toc138144517 _Toc138144737 _Toc138144957 _Toc138146479 _Toc138146699 _Toc138146923 _Toc138147387 _Toc138147853 _Toc138148945 _Toc138149203 _Toc138149523 _Toc138149808 _Toc138150131 _Toc138217532 _Toc139945604 _Toc138144518 _Toc138144738 _Toc138144958 _Toc138146480 _Toc138146700 _Toc138146924 _Toc138147388 _Toc138147854 _Toc138148946 _Toc138149204 _Toc138149524 _Toc138149809 _Toc138150132 _Toc138217533 _Toc139945605 _Toc137974075 _Toc137974281 _Toc138144543 _Toc138144763 _Toc138144983 _Toc138146505 _Toc138146725 _Toc138146949 _Toc138147413 _Toc138147879 _Toc138148971 _Toc138149229 _Toc138149549 _Toc138149834 _Toc138150157 _Toc138217558 _Toc139945630 _Toc114476505 _Toc114476507 _Toc114476509 _Toc114476511 _Toc114476513 _Toc114476515 _Toc114476517 _Toc114476519 _Toc114476521 _Toc114476523 _Toc114476525 _Toc114476527 _Toc114476532 _Toc114476534 _Toc114476536 _Toc114476538 _Toc114476540 _Toc114476542 _Toc114476544 _Toc114476546 _Toc114476548 _Toc114476550 _Toc114476552 _Toc114476554 _Toc114476556 _Toc114476558 _Toc112571157 _Toc112571159/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$$  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwxyz{|}~/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$/$$$0>K$$$$$$$$$$$$1)1B E _ h '*$$$$$$$$$$$3333333333333$`|F / j  / F  / Q #::Rr'B $$$$$$$$$$$$$$`$$$$$$$$$$$$$[ C}mj_Nf$"9"4Xچh ^`hH.h ^`hH.h pLp^p`LhH.h @ @ ^@ `hH.h ^`hH.h L^`LhH.h ^`hH.h ^`hH.h PLP^P`LhH.h ^`hH.h^`B*phhH.h pLp^p`LhH.h @ @ ^@ `hH.h ^`hH.h L^`LhH.h ^`hH.h ^`hH.h PLP^P`LhH.h 88^8`hH.h ^`hH.h  L ^ `LhH.h   ^ `hH.h xx^x`hH.h HLH^H`LhH.h ^`hH.h ^`hH.h L^`LhH.h ^`hH.h ^`hH.h pLp^p`LhH.h @ @ ^@ `hH.h ^`hH.h L^`LhH.h ^`hH.h ^`hH.h PLP^P`LhH.h ^`hH.h ^`hH.h pLp^p`LhH.h @ @ ^@ `hH.h ^`hH.h L^`LhH.h ^`hH.h ^`hH.h PLP^P`LhH.C}m4X_N$"[           lV\                                  Q6Tu_Ty.-7A,[>@er@N#UnV] eEemfwcg"t2wRyM}`:^aZVsS;b}/z:3jm^29BMVo:"$$@0000$@UnknownG*Ax Times New Roman5Symbol3. *Cx ArialA$BCambria Math"1h؆+# s Bs Bqhh4w$w$ 2qHX ?Ee2!xx INTERNAL INSPECTIONS REPORTChris LevesqueIsner, Jonathan [USA]      Oh+'0  ,8 X d p|INTERNAL INSPECTIONS REPORTChris Levesque Normal.dotmIsner, Jonathan [USA]4Microsoft Office Word@vA@'@ꨚ s՜.+,D՜.+,X hp  Booz Allen HamiltonBw$ INTERNAL INSPECTIONS REPORT TitleL 5= Languageen  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFHIJKLMNPQRSTUVWXYZ[\]^_`abcdefghijklmnopqrstuvwyz{|}~Root Entry F^@Data G1TableOQWordDocument :SummaryInformation(xDocumentSummaryInformation8MsoDataStoreR^WVLYYEQSX31G==2 R^Item  Properties7mKOBIJUQ==2 R^Item  EPropertiesIOCompObjOr  !"#$%&'()*+,-./012345689:;<=>? This value indicates the number of saves or revisions. The application is responsible for updating this value after each revision. DocumentLibraryFormDocumentLibraryFormDocumentLibraryForm   F Microsoft Word 97-2003 Document MSWordDocWord.Document.89q