MSS_Checklist_on_Safeguarding.doc
DOC document 215 KB Posted
- Attached to
- Medical Support Services Final RFP Federal contract opportunity
- Solicitation number
- 110515MSS01
- Issued by
- Defense Health Agency
About this file
MSS Checklist
View the file
Other files for this federal contract opportunity
Show all 42
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Checklist and Certification for Minimum Level of Enhanced Safeguarding for Unclassified DoD Information Contract [Insert TRICARE Contract #]
Processed in accordance with provisions of . [insert reference#] and CDRL [insert CDRL#]
NIST SP 800-53 rev4 updated 48 CFR-252 rev1 Access Control
| Ref # |
| Nomenclature |
| Compliance Statement |
| Assessment Method |
| Compliance Date |
| Activity Description |
| AC-2 |
| Account Management |
| FORMDROPDOWN |
FORMDROPDOWN
| AC-3 |
| Access Enforcement |
| FORMDROPDOWN |
FORMDROPDOWN
| AC-3(4) |
| Access Enforcement |
| FORMDROPDOWN |
FORMDROPDOWN
| AC-4 |
| Information Flow Enforcement |
| FORMDROPDOWN |
FORMDROPDOWN
| AC-6 |
| Least Privilege |
| FORMDROPDOWN |
FORMDROPDOWN
| AC-7 |
| Unsuccessful Login Attempts |
| FORMDROPDOWN |
FORMDROPDOWN
| AC-11 |
| Session Lock |
| FORMDROPDOWN |
FORMDROPDOWN
| AC-11(1) |
| Session Lock |
| FORMDROPDOWN |
FORMDROPDOWN
| AC-17 |
| Remote Access |
| FORMDROPDOWN |
FORMDROPDOWN
| AC-17(2) |
| Remote Access |
| FORMDROPDOWN |
FORMDROPDOWN
| AC-18 |
| Wireless Access |
| FORMDROPDOWN |
FORMDROPDOWN
| AC-18(1) |
| Wireless Access |
| FORMDROPDOWN |
FORMDROPDOWN
| AC-19 |
| Access Control for Mobile Devices |
| FORMDROPDOWN |
FORMDROPDOWN
| AC-20(1) |
| Use of External Information Systems |
| FORMDROPDOWN |
FORMDROPDOWN
| AC-20(2) |
| Use Of External Information Systems | Portable Storage Devices |
| FORMDROPDOWN |
FORMDROPDOWN
| AC-22 |
| Publicly Accessible Content |
| FORMDROPDOWN |
FORMDROPDOWN
Awareness & Training
| Ref # |
| Nomenclature |
| Compliance Statement |
| Assessment Method |
| Compliance Date |
| Activity Description |
| AT-2 |
| Security Awareness |
| FORMDROPDOWN |
FORMDROPDOWN
Audit & Accounting
| Ref # |
| Nomenclature |
| Compliance Statement |
| Assessment Method |
| Compliance Date |
| Activity Description |
| AU-2 |
| Auditable Events |
| FORMDROPDOWN |
FORMDROPDOWN
| AU-3 |
| Content of Audit Records |
| FORMDROPDOWN |
FORMDROPDOWN
| AU-6 |
| Audit Review, Analysis & Reporting |
| FORMDROPDOWN |
FORMDROPDOWN
| AU-6(1) |
| Audit Review, Analysis & Reporting |
| FORMDROPDOWN |
FORMDROPDOWN
| AU-7 |
| Audit Reduction & Report Generation |
| FORMDROPDOWN |
FORMDROPDOWN
| AU-8 |
| Time Stamps |
| FORMDROPDOWN |
FORMDROPDOWN
| AU-9 |
| Protection of Audit Information |
| FORMDROPDOWN |
FORMDROPDOWN
| AU-10 |
| Non-Repudiation |
| FORMDROPDOWN |
FORMDROPDOWN
Configuration Management
| Ref # |
| Nomenclature |
| Compliance Statement |
| Assessment Method |
| Compliance Date |
| Activity Description |
| CM-2 |
| Baseline Configuration |
| FORMDROPDOWN |
FORMDROPDOWN
| CM-6 |
| Configuration Settings |
| FORMDROPDOWN |
FORMDROPDOWN
| CM-7 |
| Least Functionality |
| FORMDROPDOWN |
FORMDROPDOWN
| CM-8 |
| Information Sys Component Inventory |
| FORMDROPDOWN |
FORMDROPDOWN
Contingency Planning
| Ref # |
| Nomenclature |
| Compliance Statement |
| Assessment Method |
| Compliance Date |
| Activity Description |
| CP-9 |
| Information System Backup |
| FORMDROPDOWN |
FORMDROPDOWN
Identification & Authentication
| Ref # |
| Nomenclature |
| Compliance Statement |
| Assessment Method |
| Compliance Date |
| Activity Description |
| IA-2 |
| User Identification & Authentication |
| FORMDROPDOWN |
FORMDROPDOWN
| IA-4 |
| Identifier Management |
| FORMDROPDOWN |
FORMDROPDOWN
| IA-5 |
| Authenticator Management |
| FORMDROPDOWN |
FORMDROPDOWN
| IA-5(1) |
| Authenticator Management |
| FORMDROPDOWN |
| Select Method |
Incident Response
| Ref # |
| Nomenclature |
| Compliance Statement |
| Assessment Method |
| Compliance Date |
| Activity Description |
| IR-2 |
| Incident Response Training |
| FORMDROPDOWN |
FORMDROPDOWN
| IR-4 |
| Incident Handling |
| FORMDROPDOWN |
FORMDROPDOWN
| IR-5 |
| Incident Monitoring |
| FORMDROPDOWN |
FORMDROPDOWN
| IR-6 |
| Incident Reporting |
| FORMDROPDOWN |
FORMDROPDOWN
Maintenance
| Ref # |
| Nomenclature |
| Compliance Statement |
| Assessment Method |
| Compliance Date |
| Activity Description |
| MA-4 |
| Remote Maintenance |
| FORMDROPDOWN |
FORMDROPDOWN
| MA-4(6) |
| Remote Maintenance |
| FORMDROPDOWN |
FORMDROPDOWN
| MA-5 |
| Maintenance Personnel |
| FORMDROPDOWN |
FORMDROPDOWN
| MA-6 |
| Timely Maintenance |
| FORMDROPDOWN |
FORMDROPDOWN
Media Protection
| Ref # |
| Nomenclature |
| Compliance Statement |
| Assessment Method |
| Compliance Date |
| Activity Description |
| MP-4 |
| Media Storage |
| FORMDROPDOWN |
FORMDROPDOWN
| MP-6 |
| Media Sanitization & Disposal |
| FORMDROPDOWN |
FORMDROPDOWN
Physical & Environmental Protection
| Ref # |
| Nomenclature |
| Compliance Statement |
| Assessment Method |
| Compliance Date |
| Activity Description |
| PE-2 |
| Physical Access Authorizations |
| FORMDROPDOWN |
FORMDROPDOWN
| PE-3 |
| Physical Access Control |
| FORMDROPDOWN |
FORMDROPDOWN
| PE-5 |
| Access Control for Display Medium |
| FORMDROPDOWN |
FORMDROPDOWN
Program Management
| Ref # |
| Nomenclature |
| Compliance Statement |
| Assessment Method |
| Compliance Date |
| Activity Description |
| PM-10 |
| Security Authorization Process |
| FORMDROPDOWN |
| Select Method |
Risk Management
| Ref # |
| Nomenclature |
| Compliance Statement |
| Assessment Method |
| Compliance Date |
| Activity Description |
| RA-5 |
| Vulnerability Scanning |
| FORMDROPDOWN |
FORMDROPDOWN
System & Comm Protection
| Ref # |
| Nomenclature |
| Compliance Statement |
| Assessment Method |
| Compliance Date |
| Activity Description |
| SC-2 |
| Application Partitioning |
| FORMDROPDOWN |
FORMDROPDOWN
| SC-4 |
| Information Remnance |
| FORMDROPDOWN |
FORMDROPDOWN
| SC-7 |
| Boundary Protection |
| FORMDROPDOWN |
FORMDROPDOWN
| SC-8 (1) |
| Transmission Confidentiality And Integrity | Cryptographic Or Alternate Physical Protection |
FORMDROPDOWN
FORMDROPDOWN
| SC-13 |
| Use of Cryptography |
| FORMDROPDOWN |
FORMDROPDOWN
| SC-15 |
| Collaborative Computing |
| FORMDROPDOWN |
FORMDROPDOWN
| SC-28 |
| Protection of Information at Rest |
| FORMDROPDOWN |
FORMDROPDOWN
System & Information Integrity
| Ref # |
| Nomenclature |
| Compliance Statement |
| Assessment Method |
| Compliance Date |
| Activity Description |
| SI-2 |
| Flaw Remediation |
| FORMDROPDOWN |
FORMDROPDOWN
| SI-3 |
| Malicious Code Protection |
| FORMDROPDOWN |
FORMDROPDOWN
| SI-4 |
| Information System Monitoring |
| FORMDROPDOWN |
FORMDROPDOWN
CERTIFICATION OF COMPLIANCE: I certify that I am an official representative for Signature:
| Date: |
| Name: |
| Title: |
| Company: |
DHA
March 2014
File details come from the government source that posted it. Updated .