Travel Services Information Security Requirements - DRAFT.pdf
PDF 94 KB Posted
- Attached to
- Travel Support Services Federal contract opportunity
- Solicitation number
- 70US09RFIOCT2022
View the file
Other files for this federal contract opportunity
| File | Type | Posted |
|---|---|---|
| Travel Services Contract Language - DRAFT.pdf | ||
| RFI 70US09RFIOCT2022 QA.pdf | ||
| REQUEST FOR INFORMATION TRAVEL SERVICES.pdf | ||
| STATEMENT OF WORK TRAVEL SERVICES RFI.pdf |
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Ref
Requirement
Section
Deliverable
Qty.
Format/Method of Delivery
Due Date
FedRAMP Readiness
Assessment Report (if
FedRAMP Ready)
1 Electronic
Within 10 days from contract award
Attestation of A2LA certification of FedRAMP recognized 3PAO
Within 10 days from contract award
FIPS-199 Categorization
FedRAMP WBS or USSS
WBS published at kick-off.
E-Authentication Workbook off.
FedRAMP Requirements
Traceability Matrix (if applicable)
Privacy Threshold Assessment
Privacy Impact Assessment
System Security Plan
Contingency Plan
Contingency Plan Test
As Needed Electronic
Incident Response Plan
Configuration Management Plan
Security Assessment Plan
Security Assessment Report
Plans of Action & Milestones
Risk Exposure Table off.
Report: Weakness Remediation
– System
15th of each month
Report: Scan Compliance
Report: Hardware Asset
Management
Report: Software Asset
Report: Vulnerability
Report: Host Based Defense
Report: Static Custom Code
Analysis
30 days from date of award and 5 days after new code is introduced
Report: Dynamic Custom Code
Analysis new code is introduced
Report: Software Bill of
Materials (SBOM) Attestation new code is introduced
Data Breach Notification
Procedures award
Data Breach Remediation
Contract Verification
DHS Rules of Behavior
15 days from date of award or onboarding of new personnel
DHS Privacy Training
15 days from date of award or onboarding of new personnel
508 Compliance 1 Electronic
90 days from contract
Certification of Sanitization of
Government and Government-
Activity-Related Files and
Information
On date of contract closeout
File details come from the government source that posted it. Updated .