The file's text, extracted by GovTribe without its formatting.
ATTACHMENT C.1, APPLICABLE DIRECTIVES
Note FAA orders are firewalled and access will be made available after award. Copies of FAA orders, directives, and policies may be obtained from the FAA Contracting Officer referenced in SECTON G.2. Requests must clearly identify the title and/or number of the document.
| FAA Orders and Notices (Access provided upon award) |
| https://employees.faa.gov/tools_resources/orders_notices/ |
| Electronic Product Environmental Assessment Tool (EPEAT) |
| https://epeat.net/ |
https://www.epa.gov/greenerproducts/electronic-product-environmental-assessment-tool-epeat
| Federal Energy Management Program (FEMP) |
| http://energy.gov/eere/femp/federal-energy-management-program |
| EPA's Comprehensive Procurement Guidelines (CPG) |
| https://www.epa.gov/smm/comprehensive-procurement-guideline-cpg-program |
PIV/CAC - FIPS 201-2. NIST, SP 800-96, PIV Card to Reader Interoperability Guidelines http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-96.pdf
| FIPS 201-2, Personal Identification Verification (PIV) of Federal Employees and Contractors |
| http://csrc.nist.gov/publications/PubsFIPS.html |
| Responsible Recycling Practices (R2) |
| http://www.epa.gov/osw/conserve/materials/ecycling/certification.htm |
| FAA Reutilization and Disposition Process and Procedure Guide 1/27/2016 (sanitizing hard drives) |
| Document will be released upon request, after signing an NDA |
| Federal Information Security Modernization Act of 2014 (FISMA Moderate) |
| https://www.dhs.gov/fisma |
https://www.congress.gov/113/plaws/publ283/PLAW-113publ283.pdf
| Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 794d) |
| http://www.section508.gov/ |
https://www.gpo.gov/fdsys/pkg/USCODE-2011-title29/html/USCODE-2011-title29-chap16-subchapV-sec794d.htm
| World Wide Web (W3) Consortium’s Web Content Accessibility Guidelines (WCAG) 2.0 |
| http://www.w3.org/WAI/intro/wcag |
https://www.w3.org/TR/WCAG20/
| Government Product/Service Accessibility Templates (GPATs) |
| https://www.section508.gov/tools/playbooks/technology-accessibility-playbook-intro/play08 |
https://www.section508.gov/sell
| Media Sanitizing and Destruction Policy Order # 1370.121 |
| Document will be released upon request, after signing an NDA |
Information Systems Security Program Policy Order # 1370.121
Document will be released upon request, after signing an NDA
| Homeland Security Presidential Directive 12 (HSPD 12), dated August 27, 2004, entitled “Policy for a Common Identification Standard for Federal Employees and contractors” |
| https://www.dhs.gov/homeland-security-presidential-directive-12 |
| Executive Order # 13693, Planning for Federal Sustainability in the Next Decade, March 19, 2015 |
| https://www.whitehouse.gov/the-press-office/2015/03/19/executive-order-planning-federal-sustainability-next-decade |
| Government Furnished Property “Procurement Guidance,” March 2016 |
| http://fast.faa.gov/PPG_Procurement_Guidance.cfm |
| Fiscal Year 2016 (FY16) Information Systems Security Authorization Handbook Version 1, October 2015 |
| Document will be released upon request, after signing an NDA |
| Boundary Protection Policy – Policy Order #1370-121 |
| Document will be released upon request, after signing an NDA |
| NIST Special Publication (SP) 800-53 Recommended Security Controls for Federal Information Systems (as adopted by DOT in the Departmental Compendium) |
| https://www.nist.gov/publications/recommended-security-controls-federal-information-systems |
| Federal Information Processing Standard (FIPS) 199, Standards for Security Categorization of Federal Information and Information Systems |
| http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.199.pdf |
| Federal Information Processing Standard (FIPS) 200, Minimum Security Requirements for Federal Information and Information Systems |
| http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.200.pdf |
| Federal Information Processing Standard (FIPS) PUB 140-2, Security Requirements for Cryptographic Modules |
| http://csrc.nist.gov/groups/STM/cmvp/standards.html |
| NIST Special Publication 800-60 Volume II Revision 1 |
| http://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-60v2r1.pdf |
| FICAM Authority |
| Document will be released upon request, after signing an NDA |
| Logical Access Control Policy – Policy Order #1370.121 |
| Document will be released upon request, after signing an NDA |
| The FICAM Program’s guides for Application Owners and their developers |
| Document will be released upon request, after signing an NDA |
| Enterprise Information Management (EIM) |
| Document access will be released upon request, after signing an NDA |
| Executive Order 10582, Prescribing Uniform Procedures for Certain Determinations, Buy-American Act, December 17, 1954 |
| (http://www.archives.gov/federal-register/codification/executive-order/10582.html) |
| Electronic Data Interchange (EDI), American National Standard Institute (ANSI) X 12 Standard |
| http://www.edibasics.com/edi-resources/document-standards/ansi/ |
| International Standards Organization (ISO) 9001:2015 Quality Management Systems – Requirements, |
| (http://www.iso.org/iso/home/standards/management-standards/iso_9000.htm |
| Executive Order 13423, Strengthening Federal Environmental, Energy, and Transportation Management, January 24, 2007 |
| (https://www.gpo.gov/fdsys/pkg/FR-2007-01-26/pdf/07-374.pdf) |
| Executive Order 10582, Prescribing Uniform Procedures for Certain Determinations, Buy-American Act, December 17, 1954 |
| (http://www.archives.gov/federal-register/codification/executive-order/10582.html |
Executive Order 13514, Federal Leadership in Environmental, Energy, and Economic Performance, October 5, 2009 https://www.fedcenter.gov/programs/eo13514/
| NIST SP 800-73-4, Interfaces for Personal Identification Information |
| https://csrc.nist.gov/publications/detail/sp/800-73/4/final |
| The Federal Enterprise Architecture |
| https://csrc.nist.gov/publications/detail/sp/800-73/4/final |
| FAA Acquisition Management Policy, Enterprise Architecture guidance (Access provided upon award) |
| http://fast.faa.gov/AMP_TOC.cfm |
FAA's Integrated Capability Maturity Model iCMM work practices https://www.faa.gov/aircraft/air_cert/design_approvals/air_software/media/CMM_white_paper.pdf
FAA Web Management Site https://www.faa.gov/documentLibrary/media/Order/1370.93.pdf
FAA Information Technology Standards apply to the non-National Airspace System domains at FAA (Access provided upon award) https://my.faa.gov/content/dam/myfaa/tools_resources/eim/eim-strategy-framework.pdf
| The Federal Enterprise Architecture (FEA) reference documents |
| https://obamawhitehouse.archives.gov/omb/e-gov/FEA |
| FAA Enterprise Architecture guidance, Specific FAA Reference Models will be provided after Contract award. |
| Document will be released upon request, after signing an NDA |
| The Supply Chain Operations Reference (SCOR) Model |
| http://supply-chain.org/scor. |
| Project Management Institute (PMI) Project Management Body of Knowledge (PMBOK) standards and guidelines for project management, especially as they pertain to Agile solution development. |
| Scrum Alliance for applicable resources; www.scrumalliance.org. |
FAA Order 1000.36 - FAA Writing Standards https://www.faa.gov/regulations_policies/orders_notices/index.cfm/go/document.information/documentID/13496
| NIST Special Publication (SP) 800-207 Zero Trust Architecture |
| https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-207.pdf |
| NIST Cybersecurity Framework |
| https://www.nist.gov/cyberframework/framework |
| Agile Manifesto |
| https://agilemanifesto.org/principles.html |
NIST Special Publication (SP) 800-160 volume 2 - Developing Cyber Resilient Systems:
A Systems Security Engineering Approach https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-160v2.pdf
