Attachment C - Applicable Documents.pdf
PDF 63 KB Posted
- Attached to
- Fire & Emergency Medical Services Records Management System (FEMSRMS) BASE + 4 Option Years
- Solicitation number
- 80TECH26QA104
About this file
This is an attachment listing applicable documents for a NASA federal contract opportunity. The document specifies mandatory compliance with federal legislation, NASA policies, procedures, and technical handbooks that contractors must follow during contract performance.
The applicable documents include federal requirements such as the Federal Information Security Management Act of 2002, Homeland Security Presidential Directive 12 for identification standards, Americans with Disabilities Act Section 508 accessibility requirements, and various NASA policy directives (NPD) and procedural requirements (NPR) covering information technology management, privacy, security, records management, forms management, continuity of operations planning, and enterprise architecture. Additionally, contractors must comply with six cybersecurity implementation handbooks covering policy preparation, categorization, selection, implementation, assessment, authorization, and monitoring. The document notes that cybersecurity handbooks and standards specific to particular tasks or requirements are accessible only internally through https://cset.nasa.gov/ascs/cspd-handbooks/ and must be obtained directly from the Contracting Officer, indicating restricted access to additional compliance materials necessary for contract performance.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Attachment C
Applicable Documents
* Federal Information Security Management Act of 2002 (44 U.S.C. 3541 - 3549)
* Homeland Security Presidential Directive (HSPD)-12: Policy for a Common Identification Standard for Federal Employees and Contractors
* Americans with Disabilities Act - Section 508 (29 U.S.C 794d)
* NPD 2800.1, Managing Information Technology
* NPR 2800.2, Information and Communication Technology Accessibility
* NPR 2841.1, Identity, Credential, and Access Management
* NPD 1382.17, NASA Privacy Policy
* NPD 2810.1, NASA Information Security Policy
* NPD 1420.1, NASA Forms Management
* NPD 1440.6, NASA Records Management
* NPD 1490.1, NASA Printing, Duplicating, and Copying Management
* NPR 1382.1, NASA Privacy Procedural Requirements
* NPR 1441.1, NASA Records Management Program Requirements
* NPD 2540.1, Acceptable Use of Government Office Property Including Information Technology
* NPD 2830.1, NASA Enterprise Architecture
* NPR 1040.1, NASA Continuity of Operations (COOP) Planning Procedural Requirements
* NPR 2810.1, Security of Information and Information Systems
* NPR 2810.7, Controlled Unclassified Information
* NPR 2830.1, NASA Enterprise Architecture Procedures
* NPR 7120.7, NASA Information Technology and Institutional Infrastructure Program and Project Management Requirements
* The following handbooks relevant to the development, authorization, and maintenance of NASA information systems. (Current versions as posted on https://cset.nasa.gov/ascs/cspd-handbooks/)
i. ITS-HBK-AASTEP0.v1.0.0 Step 0: Prepare Policy
ii. ITS-HBK-AASTEP1.v1.0.0 Step 1: Categorize Policy
Attachment C
iii. ITS-HBK-AASTEP2.v1.0.0 Step 2: Select Policy
iv. ITS-HBK-AASTEP3.v1.0.0 Step 3: Implement Policy
v. ITS-HBK-AASTEP4.v1.0.0 Step 4: Assess Policy
vi. ITS-HBK-AASTEP5.v1.0.0 Step 5: Authorize Policy
vii. ITS-HBK-AASTEP6.v1.0.0 Step 6: Monitor Policy
Note: Cybersecurity Handbooks, and standards that apply to specific tasks or requirements are accessible internal only at https://cset.nasa.gov/ascs/cspd-handbooks/ and must be obtained from the Contracting Officer.
File details come from the government source that posted it. Updated .