102-192.80—How do we develop written security policies and plans?

Agency mail managers must coordinate with their agency security service and/or the Federal Protective Service to develop agency mail security policies and plans. The Federal Protective Service has, working with the Interagency Security Committee which it chairs, developed standards for building construction and management, including standards for mail centers. At a minimum, the agency mail security plan must address the following topics—
(a) Risk assessment;
(b) Plan to protect staff and all other occupants of agency facilities from hazards that might be delivered in the mail;
(c) Operating procedures;
(d) Plan to provide a visible mail screening operation;
(e) Training mail center personnel;
(f) Testing and rehearsing responses to various emergency situations by agency personnel;
(g) Managing threats;
(h) Communications plan;
(i) Occupant Emergency Plan (OEP);
(j) Continuity of Operations Plan (COOP); and
(k) Annual reviews.

Code of Federal Regulations

Note to § 102-192.80 : The agency mail manager and facility manager(s) need not prepare all of these plans themselves. They should participate actively in the development and implementation of each of these elements, but other parts of the agency or outside security professionals should take the lead in their respective areas of expertise.