Attachment - W81K00-23-Q-0001_Exhibit 1_RMF Timelines (1).pdf
PDF 80 KB Posted
- Solicitation number
- W81K00-23-Q-0001
- Issued by
-
Department of the Army Medical Command
About this file
This attachment and solicitation provide details for a cost-per-reportable-result contract for coagulation reagents and analyzers. The attachment outlines required timeframes for both the vendor and government during the Risk Management Framework assessment process, including initial draft and final dates for documents, scans, checklists, and templates. It also lists timeframe requirements for meetings, plan generation, sending templates and security technical implementation guides to the vendor, and recommendation and scheduling of an Authorization to Operate with Conditions and independent verification and validation. The solicitation requests offers for coagulation reagents and analyzers, with a deadline of November 22, 2022. It specifies inclusion of completed forms, point of contact information, and holding quotes firm for 90 days. Potential contractors must register in SAM. Electronic submissions over 20MB must be split. It is the offeror's responsibility to ensure the government receives the entire quote by the deadline.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
EXHIBIT 1
RMF Assessment Timeframes
Required Vendor Timeframes: The Government shall complete its required actions within the following referenced timeframes but no later than one year after order/contract issuance. If the vendor has completed all required actions in a timely manner and acceptable manner while the Government experiences delays, the vendor would be given additional time for future actions corresponding to the amount of Government delay.
Vendor Requirements: Initial Draft Date Due Final Date Due Vendor to contact Gov POC:
dha.detrick.med-log.mbx.cyberlog@mail.mil
10 business days post award -
Hardware/Software/Architecture Documents 15 business days post award
20 business days post award
RMF Documentation Production 6 weeks post award 4 months post award
Technical Nessus Scans 1 month post award 6 months post award
Technical STIG Checklists 1 month post award 6 months post award
Technical SCAP 1 month post award 6 months post award
Required Vendor Timeframes: The Government shall complete its required actions within the following referenced timeframes but no later than one year after order/contract issuance. If the vendor has completed all required actions in a timely manner and acceptable manner while the Government experiences delays, the vendor would be given additional time for future actions corresponding to the amount of Government delay.
Government Requirements Initial Draft Date Due Final Date Due Kickoff Meeting 15 business days post award -
Security Assessment Plan Generation 20 business days post award 30 days post award
RMF Templates sent to Vendor 5 business days post vendor initial contact -
Copies of Applicable STIGs sent to Vendor 17 business days post award 30 days post award
Authorization to Operate with Conditions (ATO-C) Recommendation
ATO-C recommendation submitted to 3rd party validator 2 weeks after final documentation/technical scans received
Independent Verification and Validation (IV&V) Scheduling
Scheduling request to 3rd party validator 3 weeks after final documentation/technical scans received
File details come from the government source that posted it. Updated .