Attachment 3 Baseline Security References.pdf

PDF 106 KB Posted

Attached to
RD Application Sustainment Operations & Maintenance Support Federal contract opportunity
Solicitation number
12SAD125R0002
Issued by
Department of Agriculture Rural Housing Service

About this file

Written by GovTribe AI ·

This document is a list of federal security and compliance standards that Rural Development applications and systems must adhere to throughout the entire software development lifecycle (SDLC). The document compiles references to critical cybersecurity and information protection regulations, including key standards from the Office of Management and Budget, Federal Information Security Modernization Act, Executive Order 14028, and multiple National Institute of Standards and Technology (NIST) Special Publications. The referenced documents cover areas such as risk management, security controls, cybersecurity supply chain risk management, protecting controlled unclassified information, microservices API security strategies, and guidelines for protecting personally identifiable information. The document emphasizes that new standards and requirements will be incorporated into the SDLC as they become available, ensuring ongoing compliance with evolving federal security mandates.

View the file

Other files for this federal contract opportunity

Other files attached to RD Application Sustainment Operations & Maintenance Support, newest first.
File Type Posted
Attachment 14 USDA Visual Identity.pdf PDF
Attachment 13 USDA C-SCRM Contract Language.pdf PDF
Attachment 11 RD Application Technology Matrix.xlsx XLSX spreadsheet
Attachment 1 Performance Work Statement.docx DOCX document
Exhibit B Past Performance Questionnaire.docx DOCX document
Solicitation_12SAD125R0002.pdf PDF
Attachment 12 Software Development Lifecycle SDLC Process Guide.pdf PDF
Attachment 10 OM vs DME Decision Rubric.pdf PDF
Attachment 8 Conflict of Interest Policy and Disclosure Form.pdf PDF
Exhibit C Total Evaluated Price Workbook.xlsx XLSX spreadsheet
Exhibit A Question and Answer Form.xlsx XLSX spreadsheet
Attachment 9 Non-Disclosure Agreement.pdf PDF
Attachment 7 KPI Listing - PSO_SE.xlsx XLSX spreadsheet
Attachment 6 Acceptance and Defect Rubric.pdf PDF
Attachment 5 Change Management Process Guide.pdf PDF
Attachment 4 Background Investigation Requirements.pdf PDF
Attachment 2 Quality Assurance Surveillance Plan.docx DOCX document
Show all 17

On GovTribe

Work with this file on GovTribe

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file
Try for free Login

Text version

The file's text, extracted by GovTribe without its formatting.

All Rural Development applications and systems must adhere to Federal security and compliance standards throughout the entire software development lifecycle (SDLC).

This document lists references current requirements, noting that new standards and requirements will be incorporated throughout the SDLC as they become available.

• Office of Management and Budget (OMB) Circular A-130, Managing Information as a Strategic Resource;

• Federal Information Technology Acquisition Reform Act of 2014 (FITARA);

• Federal Information Security Modernization Act of 2014 (FISMA), 44 United States Code

(U.S.C.) § 3551, et seq.;

• Executive Order 14028 Improving the Nation’s Cybersecurity (2021);

• Computer Matching and Privacy Protection Act of 1988, P.L. 100-503, October 1988 (CMA)

• National Institute of Standards and Technology (NIST) Special Publications (SP) 800-37

Revision 2, Risk Management Framework for Information Systems and Organizations: A System Life Cycle Approach for Security and Privacy

• National Institute of Standards and Technology (NIST) Special Publications (SP) 800-53 Revision 5, Security and Privacy Controls for Federal Information Systems and Organizations;

• National Institute of Standards and Technology (NIST) Special Publications SP 800-160 Vol. 1 Rev. 1, Engineering Trustworthy Secure Systems | CSRC (nist.gov), Engineering Trustworthy Secure Systems;

• National Institute of Standards and Technology (NIST) Special Publications (SP) 800-161 Revision 1, Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations;

• National Institute of Standards and Technology (NIST) Special Publications (SP) 800-171 Revision 2, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations;

• National Institute of Standards and Technology (NIST) Special Publications (SP) 800-172, Enhanced Security Requirements for Protecting Controlled Unclassified Information: A Supplement to NIST Special Publication 800-171;

• National Institute of Standards and Technology (NIST) Special Publications (SP) 800-204 Security Strategies for Microservices APIs; including Parts 204A, 204B and 204C;

• National Institute of Standards and Technology (NIST) Framework for Improving Critical Infrastructure Cybersecurity Version 1.1;

• National Institute of Standards and Technology (NIST) Guide to Protecting the Confidentiality of Personally Identifiable Information (PII) SP 800-122

• RD Software Source Code Policy, Jan 1, 2023 https://obamawhitehouse.archives.gov/sites/default/files/omb/assets/OMB/circulars/a130/a130revised.pdf https://www.usda.gov/ocio/guidelines-and-compliance-resources/fitara https://www.govinfo.gov/app/details/PLAW-113publ283/ https://www.govinfo.gov/app/details/PLAW-113publ283/ https://www.federalregister.gov/documents/2021/05/17/2021-10460/improving-the-nations-cybersecurity https://www.federalregister.gov/documents/2016/02/17/2016-03164/computer-matching-and-privacy-protection-act-of-1988-report-of-matching-program-corporation-for https://csrc.nist.gov/publications/detail/sp/800-37/rev-2/final https://csrc.nist.gov/publications/detail/sp/800-37/rev-2/final https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final https://csrc.nist.gov/pubs/sp/800/160/v1/r1/final https://csrc.nist.gov/pubs/sp/800/160/v1/r1/final https://csrc.nist.gov/publications/detail/sp/800-161/rev-1/final https://csrc.nist.gov/publications/detail/sp/800-161/rev-1/final https://csrc.nist.gov/publications/detail/sp/800-171/rev-2/final https://csrc.nist.gov/publications/detail/sp/800-171/rev-2/final https://csrc.nist.gov/publications/detail/sp/800-172/final https://csrc.nist.gov/publications/detail/sp/800-204/final https://www.nist.gov/cyberframework https://csrc.nist.gov/publications/detail/sp/800-122/final

File details come from the government source that posted it. Updated .