Attachment_J.9_Information_Systems_Security_Requirements.docx

Attachment J.9 Information Systems Security Requirements

Requirements Incorporated by Reference

1. QIO Infrastructure Operations and Support Manual and Data Management located in the QIO Manual (Chapter 8) https://www.cms.gov/Regulations-and-Guidance/Guidance/Manuals/downloads/qio110c08.pdf

2. CMS Information Systems Security Virtual Handbook https://www.cms.gov/Research-Statistics-Data-and-Systems/CMS-Information-Technology/InformationSecurity/index.html

3. Quality Net System or Incident Security Policy http://qualitynet.org/

4. CMS Contractor Website Guidelines https://www.cms.gov/About-CMS/Agency-Information/Aboutwebsite/contractorwebguidlines.html

5. CMS Information Systems Security and Privacy Policy https://www.cms.gov/Research-Statistics-Data-and-Systems/CMS-Information-Technology/InformationSecurity/index.html

1. Federal Information Security Management Act of 2002 http://csrc.nist.gov/drivers/documents/FISMA-final.pdf

7. E-Government Act of 2002 (Public Law 107-347) https://www.cms.gov/Research-Statistics-Data-and-Systems/Computer-Data-and-Systems/Privacy/eGovernment-Act.html

1. CMS Internet Only Manual IOM Pub. 100-17 https://www.cms.gov/Regulations-and-Guidance/Guidance/Manuals/Internet-Only-Manuals-IOMs.html

9. QIO Program Brand Guidelines Manual http://qionet.sdps.org

10. Crown Web Guidelines http://mycrownweb.org/assets/crownweb-dm/dm_guidelines/

11. Information Systems Library- Refer to this Hyperlink:

http://www.cms.gov/Research-Statistics-Data-and-Systems/CMS-Information- Technology/InformationSecurity/Information-Security-Library.html