Attachment J-11 IT Requirements List.pdf
PDF 88 KB Posted
- Attached to
- Title IV Financial Aid Origination and Disbursement (TIVOD) System & Customer Services Transition Services
- Solicitation number
- 91003124R0005
About this file
This document is a list of IT security and privacy requirements for a Department of Education contract opportunity. The key details include:
The solicitation (91003124R0005) is for the Title IV Financial Aid Origination and Disbursement (TIVOD) System & Customer Services Transition Services. It is a two-phase solicitation conducted by the Department of Education, Office of Federal Student Aid. The Phase I solicitation will be evaluated on Go/No-Go Criteria and Rough Order of Magnitude (ROM), and only selected offerors will receive the Phase II solicitation. The IT requirements outlined cover areas such as federal information security and privacy standards, supply chain management, records management, accessibility, and artificial intelligence. Specific standards referenced include NIST SP 800-37, NIST SP 800-171, FIPS 200, OMB memorandums, and federal executive orders.
View the file
Other files
Show all 13
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Department of Education Security and Privacy Requirements https://www2.ed.gov/fund/contract/about/bsp.html
General Department Information Security and Privacy Requirements
EDAR 3452.239-71 (DEVIATION) (NOV 2022)
Guide for Developing Security Plan for Federal Information Systems
NIST-SP-800-18
Federal Information Processing Standards FIPS 200 Federal zero trust architecture (ZTA) OMB M-22-09 National Institute of Standards and Technology (NIST) Special Publication (SP): Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach
NIST-SP-800-37
IT Disposal Requirements NIST publication 800-88 Internet access via TIC or MTIPS OMB Memorandum M-19-26, Update to the Trusted
Internet Connections (TIC) Initiative, September 12, 2019.
Identity Assurance Level (IAL3) and Authentication Assurance Level 3 (AAL3)
NIST SP 800-63-3
Supply Chain Management Conformance OMB Memorandum M22-18 NIST Software Attestation Federal records • Federal Records Act (44 U.S.C. chs. 21, 29, 31, 33), 36 CFR Chapter XII Subchapter B, and the Privacy Act of 1974 (5 U.S.C. 552a)
• Federal Records Act 44 U.S.C. § 3301 Controlled Unclassified information EO 13556, 32 CFR Part 2002, ED Directive OCIO 3-113, and NIST-800-171 Revision 2 (or current version) Record Keeping 36 CFR 1236.20
32 CFR 2002.14(g) Handling and Safeguarding Requirements 32 CFR 2002.14(a-e) https://www2.ed.gov/fund/contract/about/bsp.html
Artificial Intelligence • Executive Order 13859: Maintaining American Leadership in Artificial Intelligence (February 11, 2019)
• OMB M-21-06: Guidance for Regulation of Artificial Intelligence Applications (November 17, 2020)
• Executive Order 13960: Promoting the Use of Trustworthy Artificial Intelligence in the Federal Government (December 3, 2020)
• NIST AI-100-1: Artificial Intelligence Risk Management Framework (AIRMF1.0) (January 2023)
• Executive Order on the Safe, Secure, and Trustworthy Development and Use of Artificial Intelligence (October 30, 2023)
• Department of Education guidance: Initial Cybersecurity Standard for Usage of Artificial Intelligence (AI) at the Department (October 31, 2023)
• Draft Policy Guidance on U.S. Government Use of AI.
More details on this policy, which is currently available for public comment, can be found at ai.gov/input and https://ai.gov/wp-content/uploads/2023/11/AI-in- Government-Memo-Public-Comment.pdf
IT Accessibility Requirements • Section 508 of the Rehabilitation Act, as amended by P.L. 105-220
• Revised 508 Standards, at 36 C.F.R. § 1194.1 & Apps. A, C & D. https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines https://ai.gov/wp-content/uploads/2023/11/AI-in-Government-Memo-Public-Comment.pdf https://ai.gov/wp-content/uploads/2023/11/AI-in-Government-Memo-Public-Comment.pdf https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines https://www.access-board.gov/guidelines-and-standards/communications-and-it/about-the-ict-refresh/final-rule/text-of-the-standards-and-guidelines
File details come from the government source that posted it. Updated .