80TECH27QA003 - Attachment C - Applicable Documents.pdf
PDF 82 KB Posted
- Attached to
- FIRE & EMERGENCY MEDICAL SERVICES RECORDS MANAGEMENT SYSTEM (FEMSRMS) SOFTWARE BASE + 3 OPTION YEARS ORDER
- Solicitation number
- 80TECH27QA003
About this file
This document is Attachment C to solicitation 80TECH27QA003 and lists applicable documents required for contract performance. The document is an appendix that does not address specific required products or services, response dates, pricing, or other contracting timeline details.
The attachment identifies federal laws, NASA policies, directives, and procedural requirements (NPD and NPR documents) that contractors must comply with during contract execution. Key regulatory references include the Federal Information Security Management Act of 2002, Homeland Security Presidential Directive 12 (common identification standards), Americans with Disabilities Act Section 508 (accessibility), and NASA-specific policies covering information technology management, privacy, information security, records management, and enterprise architecture. The document also references seven NASA Information Technology Security (ITS) handbooks addressing policy development, categorization, selection, implementation, assessment, authorization, and monitoring. A note indicates that cybersecurity handbooks and standards applicable to specific tasks are accessible internally only through https://cset.nasa.gov/ascs/cspd-handbooks/ and must be obtained from the Contracting Officer.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Attachment C
Applicable Documents
* Federal Information Security Management Act of 2002 (44 U.S.C. 3541 - 3549)
* Homeland Security Presidential Directive (HSPD)-12: Policy for a Common Identification Standard for Federal Employees and Contractors
* Americans with Disabilities Act - Section 508 (29 U.S.C 794d)
* NPD 2800.1, Managing Information Technology
* NPR 2800.2, Information and Communication Technology Accessibility
* NPR 2841.1, Identity, Credential, and Access Management
* NPD 1382.17, NASA Privacy Policy
* NPD 2810.1, NASA Information Security Policy
* NPD 1420.1, NASA Forms Management
* NPD 1440.6, NASA Records Management
* NPD 1490.1, NASA Printing, Duplicating, and Copying Management
* NPR 1382.1, NASA Privacy Procedural Requirements
* NPR 1441.1, NASA Records Management Program Requirements
* NPD 2540.1, Acceptable Use of Government Office Property Including Information Technology
* NPD 2830.1, NASA Enterprise Architecture
* NPR 1040.1, NASA Continuity of Operations (COOP) Planning Procedural Requirements
* NPR 2810.1, Security of Information and Information Systems
* NPR 2810.7, Controlled Unclassified Information
* NPR 2830.1, NASA Enterprise Architecture Procedures
* NPR 7120.7, NASA Information Technology and Institutional Infrastructure Program and Project Management Requirements
* The following handbooks relevant to the development, authorization, and maintenance of NASA information systems. (Current versions as posted on https://cset.nasa.gov/ascs/cspd-handbooks/)
i. ITS-HBK-AASTEP0.v1.0.0 Step 0: Prepare Policy
ii. ITS-HBK-AASTEP1.v1.0.0 Step 1: Categorize Policy
80TECH27QA003
Attachment C
iii. ITS-HBK-AASTEP2.v1.0.0 Step 2: Select Policy
iv. ITS-HBK-AASTEP3.v1.0.0 Step 3: Implement Policy
v. ITS-HBK-AASTEP4.v1.0.0 Step 4: Assess Policy
vi. ITS-HBK-AASTEP5.v1.0.0 Step 5: Authorize Policy
vii. ITS-HBK-AASTEP6.v1.0.0 Step 6: Monitor Policy
Note: Cybersecurity Handbooks, and standards that apply to specific tasks or requirements are accessible internal only at https://cset.nasa.gov/ascs/cspd-handbooks/ and must be obtained from the Contracting Officer.
80TECH27QA003
File details come from the government source that posted it. Updated .