Exhibit 5 C-SCRM Attestation Form Amendment 9 11.21.24.xlsx
XLSX spreadsheet 21 KB Posted
- Attached to
- Amendment 14-SEWP VI Final RFP (6th Generation of Solutions for Enterprise-Wide Procurements) Federal contract opportunity
- Solicitation number
- 80TECH24R001
About this file
This document is an Exhibit 5 C-SCRM Attestation Form Amendment 9 related to a federal contract opportunity. It contains a questionnaire for offerors to assess their compliance with various cybersecurity requirements, such as limiting information system access, verifying user identities, sanitizing media, monitoring communications, and protecting against malicious code. The offeror must respond "Yes", "No", "In Progress", or "Not Applicable" to each requirement and certify the accuracy of the provided information. A "No" response to any item would disqualify the organization from receiving the SEWP VI contract award.
The related federal contract opportunity is for the 6th Generation of Solutions for Enterprise-Wide Procurements (SEWP VI) Government-Wide Acquisition Contract (GWAC) solicitation issued by the National Aeronautics and Space Administration (NASA) Information Technology Procurement Office (ITPO). This competitive acquisition will result in an Indefinite Delivery Indefinite Quantity (IDIQ) contract with a 10-year ordering period. The solicitation is scheduled for release around February 2024, with proposals due approximately 60 days later and contract award anticipated on May 1, 2025. The contract will provide the federal government with Information Technology Product and Service Solutions across various NAICS codes.
View the file
Other files for this federal contract opportunity
Show all 50
Amendment 14-SEWP VI Final RFP (6th Generation of Solutions for Enterprise-Wide Procurements) has more files on GovTribe.
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Sheet1
| Name of Offeror | ||
| Answer (Y;N;I; or NA) see Legend below | Information see Legend below | |
| Does your organization limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems)? | ||
| Does your organization limit information system access to the types of transactions and functions that authorized users are permitted to execute? | ||
| Does your organization verify and control/limit connections to and use of external information systems? | ||
| Does your organization control information posted or processed on publicly accessible information systems? | ||
| Does your organization identify information system users, processes acting on behalf of users, or devices? | ||
| Does your organization authenticate (or verify) the identities of those users, processes, or devices, as a prerequisite to allowing access to organizational information systems? | ||
| Does your organization sanitize or destroy information system media containing Federal Contract Information before disposal or release for reuse? | ||
| Does your organization limit physical access to organizational information systems, equipment, and the respective operating environments to authorized individuals? | ||
| Does your organization escort visitors and monitor visitor activity; maintain audit logs of physical access; and control and manage physical access devices? | ||
| Does your organization monitor, control, and protect organizational communications (i.e., information transmitted or received by organizational information systems) at the external boundaries and key internal boundaries of the information systems? | ||
| Does your organization implement subnetworks for publicly accessible system components that are physically or logically separated from internal networks? | ||
| Does your organization identify, report, and correct information and information system flaws in a timely manner? | ||
| Does your organization provide protection from malicious code at appropriate locations within organizational information systems? | ||
| Does your organization update malicious code protection mechanisms when new releases are available? | ||
| Does your organization perform periodic scans of the information system and real-time scans of files from external sources as files are downloaded, opened, or executed? | ||
| I understand that a response of "no" to any of the items above disqualifies my organization from receving a SEWP VI Contract award. I hereby certify that, to the best of my knowledge, the provided information is true and accurate. (Signature Required) | ||
| First and Last Name of Signer | ||
| Date of signature | ||
| Legend | Type of information required. | |
| Y=Yes/fully compliant | None | |
| N=Not compliant | None | |
| I=In Progress | Indicate extent of progress | |
| NA=Not Applicable | Indicate why this is Not Applicable |
File details come from the government source that posted it. Updated .