CDC RR PWS.docx

Performance Work Statement Title: CDC Ready Responder Program Continued Coordination, Training, and Communication Support Services

Period of Performance of this contract is: 09/01/2026 – 08/31/2031

Base Period: 09/01/2026 – 08/31/2027 Option Period One: 09/01/2027 – 08/31/2028 Option Period Two: 09/01/2028 – 08/31/2029 Option Period Three: 09/01/2029 – 08/31/2030 Option Period Four: 09/01/2030 – 08/31/2031

SECTION 1 – BACKGROUND

The mission of the CDC’s Office of Readiness and Response (ORR) is to ensure that the agency is equipped to address a broad range of public health threats and emergencies. ORR comprises four divisions, including the Division of Emergency Operations (DEO), which leads coordination of resource support for significant emergency responses that exceed the capacity of individual CDC centers, institutes, or offices (CIOs). DEO ensures the agency can successfully staff and sustain emergency response structures across CDC.

Since early 2023, CDCReady Responder, the agency’s workforce preparedness program, has recruited, developed, and sustained a workforce of trained, qualified, and available responders prepared to effectively manage and support public health emergency responses. Led by the ORR and DEO, CDCReady Responder is:

· Building and expanding pools of qualified, response-ready, and available responders.

· Training staff to apply their talents to response work.

· Including staff not already connected to the response community.

· Creating opportunities for staff to build new skill sets and professional connections.

CDCReady Responder is enrolling most, if not all, eligible CDC staff into one or more cadres that align with their knowledge, skillsets, and experience. Cadres represent the core functions of public health emergency response and are groups of employees with specific knowledge, skills, and experience who can fill certain roles in an emergency response.

Ultimately, CDCReady Responder will ensure all staff are ready to engage in response efforts, combining all of our talent at CDC to build a workforce of qualified and trained responders. This proactive approach ensures that when a public health emergency occurs, CDC can immediately draw from a pool of trained, qualified, and available personnel to establish and sustain scalable response operations.

This Performance Work Statement (PWS) represents the next phase of the CDC Ready Responder program. Under the current contract, CDCReady Responder:

· Defined, developed, and implemented key program components, processes, and policies

· Developed an initial preparedness curriculum and training materials to support agency readiness.

· Developed and implemented stakeholder engagement and communication plan including supporting processes and materials

· Developed and implemented a comprehensive and iterative evaluation plan

· Provided system support for CDCReady, CDC’s IT and data platform for managing emergency preparedness and response The new, forthcoming contract will build upon this work, with a focus on ensuring consistency, refining content, and incorporating updates as needed based on evolving public health threats and operational requirements, in addition to creating new content-based trainings to further support the program.

As this program evolves, the continued support described in this PWS is essential to ensure seamless service delivery, preserve institutional knowledge, and maintain CDC’s ability to rapidly respond to emerging public health threats.

SECTION 2 – PURPOSE/OBJECTIVE

The purpose of this contract is to provide continued support to the Office of Readiness and Response (ORR), including but not limited to the Office of the Director (ORR/OD) and the Division of Emergency Operations (DEO), in expanding, enhancing, and sustaining CDC’s workforce preparedness program. Building upon the established foundation currently in place. This new contract will ensure seamless continuity of operations while further evolving the program and training infrastructure to meet the agency’s preparedness and response goals.

Contract objectives include: Comment by Lindsey, Marcus (CDC/OCOO/OFR/OAS): This section should be removed since you reiterate it in the Scope

1. Senior project management – Providing a senior-level project management team, led by a Senior Project Manager who will serve as the primary contact for the Government, ensuring efficient execution of contract activities, timely coordination with CDC stakeholders, and proactive management of risks and performance issues.

2. Program planning and administration – Develop program components, processes, and materials to advance the development, implementation, and adoption of CDCReady Responder.

3. Curriculum and training development - Enhance the CDCReady Responder curriculum through the development, enhancement, and dissemination of trainings and other preparedness activities.

4. Stakeholder engagement and communication - Provide strategic communication and stakeholder engagement support for CDCReady Responder.

5. Evaluation – Refine and expand program and training evaluation plans to monitor progress, ensure accountability, assess effectiveness, and promote program improvement.

6. Exercise - Plan, develop, and execute exercises, ensuring alignment with the Homeland Security Exercise and Evaluation Program (HSEEP) and providing technical support throughout the exercise lifecycle.

7. Federal emergency preparedness and response expertise – Contributing a deep understanding of public health and subject matter expertise in emergency preparedness and response.

SECTION 3 – SCOPE OF WORK

The purpose of this contract is to provide continued and enhanced support to the Office of Readiness and Response (ORR) for the CDCReady Responder Program. Building on the work performed under the previous contract, the new contract effort shall focus on reviewing, refining, and extending the training, planning, and engagement infrastructure now in place.

The contractor shall be responsible for the following key areas:

1. Senior project management – Providing a senior-level project management team, led by a Senior Project Manager who will serve as the primary contact for the Government, ensuring efficient execution of contract activities, timely coordination with CDC stakeholders, and proactive management of risks and performance issues.

2. Program planning and administration – Developing program components, processes, and materials to advance the development, implementation, and adoption of CDCReady Responder.

3. Curriculum and training development - Enhancing the CDCReady Responder curriculum through the development, enhancement, and dissemination of trainings and other preparedness activities.

4. Stakeholder engagement and communication - Providing strategic communication and stakeholder engagement support for CDCReady Responder.

5. Evaluation – Refining and expanding program and training evaluation plans to monitor progress, ensure accountability, assess effectiveness, and promote program improvement.

6. Exercise - Planning, developing, and executing exercises, ensuring alignment with the Homeland Security Exercise and Evaluation Program (HSEEP) and providing technical support throughout the exercise lifecycle.

7. Federal emergency preparedness and response expertise – Contributing a deep understanding of public health and subject matter expertise in emergency preparedness and response.

SECTION 4 – TASKS TO BE PERFORMED

Task 1: Senior Project Management and Performance Oversight - The contractor shall provide senior-level project management team to ensure efficient execution of all contract activities, timely coordination with CDC stakeholders, and proactive identification of risks and performance issues. The contractor shall designate a Senior Project Manager (SPM) to serve as the primary point of contact for the Government, responsible for managing the SPM Team, all other contractor personnel, quality assurance, and stakeholder communication. The Senior Project Manager shall provide regular updates, reporting, and recommendations to the COR and Technical Monitor (TM) and ensure that all tasks remain on schedule and aligned with contractual expectations.

a. Bi-weekly project updates and task risk logs

b. Stakeholder and SME Engagement Plan

c. Strategic Enhancement Recommendation Report for the Systematic Training Plan

d. Updated Systematic Training Plan and Implementation roadmap (if approved)

e. Quarterly Performance review briefings

f. Annual alignment summary tracking integration of planning tools, models, and stakeholder feedback

Task 2: Program Planning and Administrative Support - The contractor shall provide support to ORR/DEO for the planning and administration of CDCReady Responder. The Government assumes these tasks will be continual across the entire PoP for the base and all option years.

This support shall include:

1. Designing and facilitating efforts to define, develop, implement, and refine key program components and processes.

2. Developing materials (e.g. roadmaps, proposals, plans of action, milestones, program/performance metrics, etc.) to support the advancement of CDCReady Responder.

a. Development of such materials may involve collection, analysis, and synthesis of qualitative and quantitative data and other information from a variety of sources.

3. Continuing development and maintenance of CDCReady Responder program manual.

4. Developing, updating, maintaining, and refining CDCReady Responder enrollment and qualification materials, including enrollment and qualification criteria, and supporting materials of knowledge/skills/abilities, necessary to perform public health emergency response roles.

5. Facilitating requirements-gathering for the development of key CDCReady Responder components and processes in CDCReady, the agency’s data/IT platform for managing emergency responses.

6. Preparing and processing documents and correspondence, checking documents for quality, accuracy, and completeness, gathering information, recording data, establishing, and maintaining files, and transmitting information.

7. Proofread, edit, and distribute official correspondence electronically.

8. Update program leadership Microsoft Outlook calendars with meetings and deadlines.

9. Participate in programmatic information gathering and synthesizing documents and other materials for program leadership and stakeholders.

10. Prepare reports, answer inquiries, gather data, and input information into existing databases, using analytic tools.

11. Maintain program functional mailbox, files, manuals, handbooks, and reference libraries in support of CDCReady Responder.

12. Provide support to setting up various meetings, both live and virtual, requiring close coordination and calendar management with other team members. Develop draft agendas, prep training and meeting materials, and manage the electronic distribution of meeting materials to attendees.

Task 3: Curriculum and Training Development - Develop new and enhance existing CDCReady Responder curriculum, related preparedness activities, and trainings; ensuring accuracy, relevance, effectiveness of content over time (making as evergreen as possible); best practices related to audience engagement/entertainment; and state of the art visuals and delivery, incorporating AI when it enhances the items noted above and moving away from slide-based trainings.

These trainings shall align with CDC’s defined responder roles and readiness objectives and reflect current public health priorities, stakeholder input, and best practices in instructional design.

This support shall include: Review, refine, and expand CDCReady Responder training plan - Review and enhancement of the Systematic Training Plan developed under the current contract. The contractor shall evaluate the structure, cadence, and delivery strategies and make improvements as needed to ensure alignment with ORR/DEO goals and responder readiness needs.

1. Review, expand, and update existing trainings

a. Review of the existing General Responder Training Modules developed under the current contract and all evaluation results, feedback, and change requests related to the modules. The contractor shall assess the quality, consistency, and relevance of the training content and identify any gaps or additional GR training needs. Recommendations for improvement and expansion shall be submitted to the COR and technical monitor (TM) for review and approval. Implement updates to General Responder Training Modules and develop new modules as need is identified.

b. Complete development of trainings currently in progress under the contract.

c. Review all other existing trainings developed under the current contract and all evaluation results, feedback, and change requests related to those trainings. The contractor shall assess the quality, consistency, and relevance of the training content and identify any gaps or additional training needs. Recommendations for improvement and expansion shall be submitted to the COR and technical monitor (TM) for review and approval. Implement updates.

d. Existing trainings include a variety of modalities including virtual instructor lead (vILT), e-learning, demonstration video, recorded presentation, quick reference/job aids, and one-pager/briefing, and in-person offerings.

e. All updates should move the training away from slide-based delivery; ensuring accuracy, relevance, effectiveness of content over time (making as evergreen as possible); best practices related to audience engagement/entertainment; and state of the art visuals and delivery, incorporating AI when it enhances the items noted above.

f. This task shall not take precedence over the development of new training modules but conducted concurrently.

2. Identify, develop, and disseminate new trainings

a. Provide ongoing support for the development of 12 new trainings to include additional General Responder training modules and other trainings. The contractor shall use the previously developed Training Roadmap plan to guide further development, source additional training topics as needed, and ensure new materials are aligned with defined roles, response needs, and CDC standards.

b. New trainings should be offered in a variety of modalities to meet training objectives and audience needs including, but not limited to, virtual instructor lead (vILT), e-learning, demonstration video, recorded presentation, quick reference/job aids, and one-pager/briefing, and in-person offerings.

c. New trainings should be developed to ensure accuracy, relevance, effectiveness of content over time (making as evergreen as possible); best practices related to audience engagement/entertainment; and state of the art visuals and delivery, incorporating AI when it enhances the items noted above.

d. This task shall not take precedence over the review and enhancement of training modules but conducted concurrently.

3. Deliver trainings

a. Post all trainings to the learning management system (LMS) and facilitate connection to CDCReady to allow for tracking of training completion.

b. Lead coordination, logistics, and day of support for all vILT and in-person trainings. Ensure on-site presence by at least two contract staff to support in-person trainings.

c. Ensure branding and uniformity of all trainings and materials in CDCReady Responder training portfolio to ensure cohesive appearance.

4. Initiate and manage all aspects of training identification, development, creation, delivery, and evaluation.

a. Develop, utilize, and/or implement relationships, timelines, processes, evaluation reports, and tools to solicit training ideas, update and develop trainings, track progress, and post to LMS. This includes troubleshooting issues related to relationships, timelines, processes, and tools by leveraging own established network of SMEs and in-house resources.

b. Maintain backlog of training feedback and change requests. Immediately address urgent change requests, as determined by Government. Address all other change requests on a bi-annual cycle.

5. Initiate and manage all aspects of a program to provide mentorship and/or job shadowing opportunities for CDCReady Responder roles.

a. Develop, utilize, and/or implement relationships, timelines, processes, and tools to identify mentoring and/or shadowing opportunities, establish key intended outcomes, provide structure for engagement, and track progress. Determine and implement method to account for activity completion for participating responders. Troubleshoot issues related to relationships, timelines, processes, and tools by leveraging own established network of SMEs and in-house resources.

Training modules shall be developed in accordance with established instructional design to ensure the training content is developed systematically, with clear learning objectives, learner engagement strategies, and opportunities for iterative feedback. The use of these models, or one like them, shall support alignment between the training’s purpose, its structure, and the intended learning outcomes, while maintaining flexibility to update content based on evolving public health needs and CDC guidance. All training should incorporate adult learning principles.

· Trainings should meet all technical and accessibility standards, including:

· Fully SCORM-compliant and successfully tested within the CDC LMS;

· Section 508 compliant, including closed captioning, alt text, and keyboard navigation and;

· Developed using current CDC-approved e-learning tools.

A training module shall not be considered complete until it has been fully tested and confirmed functional within the LMS, has been reviewed and approved by the COR and/or Technical Monitor, and has been cleared for release and designated as ready for delivery to CDC Ready Responders. The Government reserves the right to reject incomplete or non-compliant modules, and payment may be withheld until completion standards are met.

Task 4: Strategic Communication and Stakeholder Engagement - The contractor shall provide strategic and operational communication and stakeholder engagement support to enhance awareness, coordination, participation in, and adoption of CDCReady Responder and its associated initiatives.

This support shall include:

1. Developing effective engagement strategy, to include creating relevant materials and resources which generate appropriate awareness of CDCReady Responder and relevant program, training, and emergency response coordination activities.

2. Developing strategic communication plan that defines the various target audiences, how key content shall be delivered, communication channels, frequency and timeframes, and success metrics to track the efficacy of each communication effort. This document shall be a “living document” and shall be updated continuously as partners and stakeholders are identified and as other entities request information.

3. Developing and disseminating internal and external electronic communication, providing updates to existing web pages/sites, creating new content for existing platforms under ORR/DEO’s direction, etc., as needed, to support CDCReady Responder priorities and ensure situational awareness and updates are reaching critical audiences.

4. Supporting coordination with CDC centers, institutes, and offices to ensure consistent and timely dissemination of information related to program activities and initiatives.

5. Assisting with outreach efforts to external stakeholders such as state and local public health agencies, academic institutions, and partner organizations.

6. Conducting stakeholder assessments and analyzing program requirements, to improve program communications

7. Supporting staff inquiries related to CDCReady Responder and participation in the program

8. Managing CDCReady Responder inbox and CDCReady support request tickets. Addressing inquiries and requests.

9. Maintaining CDCReady Responder engagement calendar.

10. Providing additional program and/or stakeholder support, as directed.

The contractor shall bring subject matter expertise in communication and marketing, partner strategy, stakeholder management, and emergency preparedness and response, ensuring that all communication plans, materials, and outreach effectively engage critical audiences and align with CDC priorities and the objectives of the CDCReady Responder Program.

All materials produced under this task must be submitted to the Technical Monitor for review and written approval. Dissemination of any outreach materials shall be conducted solely by CDC.

Task 5: Program and Training Evaluation

This support shall include:

1. Program Evaluation: Building off existing program evaluation plan, refine, expand, and implement plan to monitor progress, promote accountability, advance program improvement, and prioritize implementing solutions that address stakeholder and program needs and/or goals.

2. Training Evaluation: Building off existing training evaluation plan, refine, expand, and implement plan to determine the effectiveness of the CDCReady Responder curriculum and gauge outcomes related to staff completion of CDCReady Responder trainings.

OPTIONAL Task 6: Exercises

The contractor shall provide support to ORR/DEO for the planning, development, and execution of Operations- and Discussion-based exercises using a scenario-based approach. Subject matter experts will be provided by CDC to help execute any subject-specific exercises.

This support shall include:

1. Provide support with the planning, development and execution of exercises consistent with the Homeland Security Exercise and Evaluation Program (HSEEP).

2. Providing technical support on the development and execution of Operations- and Discussion-based exercises, including:

a. Coordinating administrative and logistical efforts in support of the exercise life cycle

b. Creating and coordinating exercise documents

c. Scenario development

d. Executing the exercises

3. Providing pre-exercise support such as planning and development of exercise activities

4. Providing post-exercise support, such as writing after-action reports and summary of conclusions

This work shall include both Operations- and Discussion-based exercises as described below:

1. Operations-based Exercises: Provide support with the planning, development, and execution of operations-based exercises. The contractor shall also provide support for the:

a. development of simulation cell (SIMCELL) duties.

b. development of a Master Scenario Events List (MSEL) to include simulation activities and actions to perform during the exercise; and,

c. efforts of controllers, evaluators, simulators and SIMCELL staff, during the exercise.

2. Discussion-based Exercises: Provide support with the planning, development, and execution of individual, or a series of, discussion-based exercises (each exercise could include seminars, workshops, tabletop exercises (TTXs) which could last up to 8 (eight) hours in duration.

OPTIONAL Task 7: Emergency Response Training Ramp-up

The contractor shall provide support to ORR/DEO with CDC’s delivery of emergency responder training, which may include a variety of responder training with varying content, based on surge needs of the agency as it prepares for and/or manages emergency responses. This task is intended to allow CDC to “ramp up” its emergency responder training efforts quickly and effectively in support of the CDCReady Responder program plan and in the event a public health emergency is approaching or declared.

For this task, upon the identification of urgent training needs within an active response environment, the contractor shall conduct the following activities:

1. Develop new trainings or enhance existing trainings.

2. Manage all aspects of training identification, development, creation, delivery, and evaluation.

3. Offer trainings in appropriate modalities to meet training objectives and audience needs including, but not limited to, virtual instructor lead (vILT), e-learning, demonstration video, recorded presentation, quick reference/job aids, and one-pager/briefing, and in-person offerings.

4. Ensure accuracy, relevance, effectiveness of content over time (making as evergreen as possible); best practices related to audience engagement/entertainment; and state of the art visuals and delivery, incorporating AI when it enhances the items noted above.

5. Post all trainings to the learning management system (LMS) and facilitate connection to CDCReady to allow for tracking of training completion.

6. Lead coordination, logistics, and virtual day of support for all vILT and in-person trainings.

7. Ensure branding and uniformity of all trainings and materials in CDCReady Responder training portfolio to ensure cohesive appearance.

The following labor categories may be used to perform tasks. Vendor should propose labor categories, hours, and mix needed to perform tasks and provide rates for each labor category. The LCATs may be flexibly invoiced to all tasks depending on need of work to be performed, as approved by technical monitor and COR.

Proposed LCATs:

Training Specialist Informatics Specialist Technical Writer/Documentation Specialist Business Analyst (Eval and Resource) Knowledge Management Lead Senior Business Analyst Communications Specialist Communications Team Lead Project Manager Senior Project Manager Instructional Designer Training Coordinator MultiMedia Expert Exercise Designer

SECTION 5 – GOVERNMENT FURNISHED PROPERTY

The contractor shall provide timely, high-quality deliverables in support of each task and optional task outlined in this contract. Deliverables shall be submitted in the formats specified by the Government (e.g., Word, PDF, PowerPoint, LMS-compatible file types) and shall meet all accessibility and formatting requirements as applicable (e.g., Section 508 compliance).

SECTION 6 – PLACE OF PERFORMANCE AND CONTRACT SUPPORT HOURS

SUBSECTION A – PLACE OF PERFORMANCE

There is no routine requirement for onsite work or in-person meetings. All work shall be performed at the contractor’s place of business or remotely, unless otherwise authorized in writing by the Government. The Government does not anticipate providing dedicated office space or equipment for contractor personnel.

All deliverables and communications shall be managed virtually using Government-approved platforms. Remote work authorization does not relieve the contractor of meeting all contractual obligations, performance metrics, deliverables, response time requirements, or applicable security requirements.

SUBSECTION B – CONTRACT SUPPORT HOURS

All meetings, check-ins, and official communications with the Government shall be conducted during standard CDC business hours (Monday through Friday, 8:00 AM to 5:00 PM Eastern Time), excluding federal holidays. The contractor shall determine its internal work hours for independent task execution, provided that all deadlines and performance expectations are met. The Government does not require timekeeping or hourly reporting unless specified for surge support or optional task activation.

SECTION 7 – TRAVEL

There shall be no travel associated with this contract requirement.

SECTION 8 – DELIVERABLES/REPORTING SCHEDULE

Updated General Responder Trainings

By the middle of the third quarter of the option year

COR and Technical Monitor

SUBSECTION A – PERFORMANCE MATRIX

This matrix outlines critical and high-risk tasks under the contract with corresponding performance standards, acceptable quality levels (AQLs), and surveillance methods to evaluate contractor performance.

SECTION 9 – REFERENCE MATERIALS

The following reference materials support the tasks and deliverables defined in this Performance Work Statement (PWS). These materials provide essential context, standards, and frameworks to guide contractor performance and ensure alignment with CDC expectations for the CDCReady Responder Program. All documents will be provided as an addendum to the solicitation package.

SECTION 10 – MINIMUM VENDOR QUALIFICATIONS

To be eligible for award, the contractor must demonstrate the following minimum organizational qualifications:

1. Demonstrated Experience in Instructional Design for Public Health Emergency Response Programs Vendors must have at least three (3) years of verifiable experience designing, developing, and implementing asynchronous eLearning modules specifically for public health, emergency preparedness, or clinical response environments. Work must have included use of instructional design frameworks such as ADDIE or SAM, integration of adult learning principles, and measurable learning outcomes.

2. Proficiency in LMS Integration and SCORM-Compliant Module Development Vendors must have prior experience developing eLearning content that has been successfully deployed within a federal Learning Management System (LMS), with full SCORM compliance and Section 508 accessibility adherence.

3. Established Capability in CDC, HHS, or Similar Federal Health Program Support Vendors must demonstrate direct experience with CDC or HHS priorities, operations, and training standards. Past performance on similar federal contracts, especially those supporting workforce readiness or emergency responder coordination, is required.

4. Dedicated Senior Project Management Oversight The vendor must assign a dedicated Senior Project Manager with a minimum of five (5) years of experience in federal project oversight or training program implementation. This individual shall serve as the primary point of contact and be responsible for performance management, coordination of subject matter experts (SMEs), and ensuring timely delivery of all contract tasks.

5. In-House or Subcontracted Access to Subject Matter Experts Vendors must have access to public health and emergency response SMEs, either in-house or through established partnerships, to support content accuracy, training alignment, and strategic communication efforts.

6. Ability to Provide Fixed Price Proposals by Training Set Vendors must demonstrate the ability to propose firm fixed price (FFP) quotes for sets of training modules, particularly when supporting optional tasks involving the review and enhancement of legacy content.

7. Active Registration in SAM.gov and Compliance with FAR Requirements Vendors must be registered in the System for Award Management (SAM.gov) and be in compliance with applicable FAR clauses, including but not limited to Section 889 and cybersecurity standards.

SECTION 11 – ADDITIONAL REQUIREMENTS

Information Security and Privacy

contract or to which the Contractor may otherwise have access under this contract. Obtain the HHS Information Security Program security requirements, outlined in the HHS Information Security and Privacy Policy (IS2P), by contacting the CO/COR or emailing fisma@hhs.gov.

Based on information provided by the ISSO, Privacy Office, system/data owner, or other security or privacy representative, it has been determined that this solicitation/contract involves:

PII Confidentiality Impact Level has been determined to be: [X] N/A [ ] Low [ ] Moderate [ ] High

5) Controlled Unclassified Information (CUI). CUI is defined as “information that laws, regulations, or Government-wide policies require to have safeguarding or dissemination controls, excluding classified information.” The Contractor (and/or any subcontractor) must comply with Executive Order 13556, Controlled Unclassified Information, (implemented at 32 CFR, part 2002) when handling CUI. 32 C.F.R. 2002.4(aa) As implemented the term “handling” refers to “…any use of CUI, including but not limited to marking, safeguarding, transporting, disseminating, re-using, and disposing of the information.” 81 Fed. Reg. 63323. All sensitive information that has been identified as CUI by a regulation or statute, handled by this solicitation/contract, shall be:

Destruction of information and/or data shall be accomplished in accordance with NIST SP 800-88, Guidelines for Media Sanitization.

The confidentiality, integrity, and availability of such information shall be protected in accordance with HHS and [CDC] policies. Unauthorized disclosure of information will be subject to the HHS/[CDC] sanction policies and/or governed by the following laws and regulations:

proprietary information, etc.) in transit (i.e., email, network connections, etc.) and at rest (i.e., servers, storage devices, mobile devices, backup media, etc.) with FIPS 140-2 validated encryption solution.

B. Training

a. The Contractor shall assist the CDC SOP or designee in reviewing the PIA at least every three years throughout the system development lifecycle (SDLC)/information lifecycle, or when determined by the CDC SOP that a review is required based on a major change to the system (e.g., new uses of information collected, changes to…