Attachment_6_-_NIST_SP_800-53_Security_Controls_Matrix.xlsx
XLSX spreadsheet 40 KB Posted
- Solicitation number
- 140A1624R0009
About this file
This document is an Excel template for the NIST SP 800-53 Security Controls Matrix related to Solicitation #140A1624R0009 for the Safety of Dams Environmental Monitoring System Operation, Data, and Support contract opportunity.
The template requires offerors to identify the proposed responsible party (government, contractor, or hybrid) for implementing, maintaining, and monitoring each NIST SP 800-53 Revision 5.1.1 control. For controls where the offeror is responsible in whole or part, they must indicate the level of assessment completed (not assessed, self-assessment, independent third-party assessment, or FedRAMP Third Party Assessment Organization). Offerors must also attest to whether each control is implemented, not implemented, or not applicable. Supporting documentation is required for independent third-party and FedRAMP assessments.
The related federal contract opportunity is Solicitation #140A1624R0009 for the Safety of Dams Environmental Monitoring System Operation, Data, and Support, issued by the Department of the Interior Bureau of Indian Affairs Central Office.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Sol_140A1624R0009_Amd_0003.pdf | ||
| Sol_140A1624R0009_Amd_0002.pdf | ||
| Sol_140A1624R0009_Amd_0001.pdf | ||
| Attachment_4_-_Representative_TO__3___Establishing_Support_of_a_New_Site.docx | DOCX document | |
| Attachment_9___Government_Furnished_Equipment.xlsx | XLSX spreadsheet | |
| Attachment_7_-_DOI_IT_Baseline_Compliance_Contract_Guidelines.pdf | ||
| Attachment_2___Representative_TO__1_-_Data_Services_SOW.docx | DOCX document | |
| Sol_140A1624R0009.pdf | ||
| Attachment_8___Labor_Category_Descriptions.docx | DOCX document | |
| Attachment_5___Pricing_Schedule.xlsx | XLSX spreadsheet | |
| Attachment_3___Representative_TO__2___Annual_Operation_and_Maintenance_Services_SOW.docx | DOCX document | |
| Attachment_1___IDIQ_Overall_SOW.docx | DOCX document |
Show all 12
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Sheet1
| NIST SP 800-53 Security Controls Matrix |
| Solicitation # 140A1624R0009, Safety of Dams Environmental Monitoring System Operation, Data, and Support |
| Offerors shall utilize this template to attest to the level of assessment for each NIST SP 800-53, Revision 5.1.1 control based on their proposed technical solution. |
Instructions: Offerors shall refer to the link below for NIST SP 800-53 Revision 5.1.1 Security and Privacy Controls for Information Systems and Organizations. Offerors shall type each low impact NIST SP 800-53 Revision 5.1.1 control number (Column A) and title (Column B) beginning in Row 9. Next, Offeror's shall indicate their proposed* responsible party (Government or Contractor or Hybrid) to implement, maintain, and monitor each control by marking an "X" in either Column C or D or E. For controls marked "Hybrid", Offerors shall provide an explanation of the shared and/or divided responsibilities. Then, for each control indicating that the Offeror is the proposed responsible party in whole or in part ("X" in Column D or E) Offerors shall attest to the level of assessment completed. The options are Control Not Yet Assessed (Column G) or Self-Assessment (Column H) or Independent Third Party Assessment (Column I) or FedRAMP Third Party Assessment Organization (3PAO) (Column J). An "X" shall be placed in only one assement column for each control. Supporting documentation shall be submitted for each Independent Third Party Assessment and 3PAO. Finally, Offerors shall attest to the result for each control assessment by marking an "X" for Pass = Implemented (Column K) or Fail = Not Implemented (Column L) or Not Applicable (Column M). An "X" shall be placed in only one result column for each control.
*The Government reserves the right to negotiate the responsible party with the successful Offeror.
| https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final | |||||||||||||
| Control Number | Control Title | Proposed Responsible Party | Level Of Assessment | Control Assessment Results | |||||||||
| Government | Contractor | Hybrid | Explanation for Hybrid | Control Not Yet Assessed | Self-Assessment | Independent Third Party Assessment | FedRAMP Third Party Assessment Organization (3PAO) | Pass = Implemented | Fail = Not Implemented | Not Applicable | OPTIONAL COMMENTS |
https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final
File details come from the government source that posted it. Updated .