The Bureau of Information Services should work with the Office of Administration, Division of Acquisition Management, and the agency’s contracting officer’s representatives to maintain the Contractor Security Control Log, ensure that it is continually updated to reflect all contractors and their staff that work at the RRB, and indicate whether the contractor staff will have access to personally identifiable information or a system of records.