Kahua Account Request Form

Please provide the following information to set up your Kahua account:
**All Fields are required for External User Types**

Request Date*

User Type*

First Name*

Middle Initial (Enter NMN if no middle name)*

Last Name*

Email Address*
Contractors with an @gsa.gov email address please submit that here.

Company/Agency*
Example: Contractors, please make sure to list your contracting company name here.

Work Phone*
xxx-xxx-xxxx

Cell Phone*
xxx-xxx-xxxx

GSA Project Manager Email Address (**Required for External Users)
**All Contractors and Customers must list their GSA PM email address for their Kahua account request to be processed**

Project Name

Kahua Project Number

Project Location (City, State)

GSA Region*
Locate your GSA Region: https://www.gsa.gov/about-us/gsa-regions

Enter your project role*
For example: Budget Analyst, Construction Manager (CMa), Planning Manager, Architect/Engineer (A/E), and Client Agency Rep

Rules of Behavior
You must comply with copyright and site licenses of proprietary software.

You must process only data that pertains to official business and is authorized to be processed on the system.

You must report all security incidents or suspected incidents to your IT department and to GSA’s Incident Response team at GSA-IR@gsa.gov.

You must discontinue use of any system resources that show signs of being infected by a virus or other malware and report the suspected incident.

You must use only data for which you have been granted authorization.

You must notify your manager if access to system resources is beyond that which is required to perform your job.

You must coordinate your user access requirements, and user access parameters, with your manager.

You must ensure that access to application-specific sensitive data is based on your job function.

You must safeguard resources against waste, loss, abuse, unauthorized users, and misappropriation.

You must ensure that access is assigned based on your manager’s approval.

You must ensure that hard copies of Confidential and Proprietary information is destroyed (after it is no longer needed) commensurate with the sensitivity of the data.

You must ensure that Confidential and Proprietary information is protected against unauthorized access using encryption, according to Kahua standards, when sending it via electronic means (telecommunications networks, e-mail, and/or facsimile).

You must not retrieve information for someone who does not have authority to access that information.

You must not store customer information on a system that is not owned by your company.

You must report any support requests or other system concerns using the Kahua Support Form or to kahuasupport@gsa.gov. No other ticketing systems should be used.

WEB BROWSERS
You must ensure that web browsers check for a publisher’s certificate revocation.

You must ensure that web browsers check for server certificate revocation.

You must ensure that web browsers check for signatures on downloaded files.

You must ensure that web browsers empty/delete temporary Internet files when the browser is closed.

You must ensure that web browsers use Transport Layer Security (TLS) 1.2 (or higher). TLS must use 2048-bit or larger keys for encryption.

You must ensure that web browsers warn about invalid site certificates.

You must ensure that web browsers warn if the user is changing between secure and non-secure mode.

You must ensure that web browsers warn if forms submittal is being redirected.

You must ensure that web browsers do not allow access to data sources across domains.

You must ensure that web browsers do not allow the navigation of sub-frames across different domains.

You must ensure that web browsers do not allow the submission of non-encrypted critical form data.

MOBILE DEVICES
You may only use Government or Contractor Issued and Managed devices when accessing the Kahua Mobile Application. Personal or unmanaged devices are not allowed to use government data or the Kahua Federal Network.

You must run the latest version of your device’s operating system from the device’s marketplace.

You must ensure that the storage on your mobile device is encrypted.

You may only download data or documents onto the device for immediate use. Once the use is complete, you must immediately delete the downloaded content.

I have read and accepted the Rules of Behavior

Accept Rules of Behavior*

**Please do not submit more than one account request form.**

Send me a copy of my responses

Email address