Enclos 1 IT Security Plan Template.pdf
PDF 3 MB Posted
- Attached to
- GeoXO Lightning Mapper (LMX) Solicitation Federal contract opportunity
- Solicitation number
- 80GSFC22R0005
About this file
This document contains an Information Technology Security Management Plan template for a federal contractor providing services to the National Aeronautics and Space Administration. The plan outlines security requirements for a contract to develop the GeoXO Lightning Mapper instrument, which will be used by the National Oceanic and Atmospheric Administration to produce severe weather forecasts and public safety warnings. Key details include the identification and categorization of information systems handling sensitive data under the contract, as well as the implementation of security controls to protect these systems from cyber threats. The contractor must also comply with applicable federal laws and regulations governing IT security, such as the Federal Information Security Management Act.
View the file
Other files for this federal contract opportunity
| File | Type | Posted |
|---|---|---|
| GeoXO Lightning Mapper Phase A Study RFP Questions and Answers 2.pdf | ||
| GeoXO Lightning Mapper Phase A Study RFP Questions and Answers.pdf | ||
| Attachment A-LMXSOW-0065_V_1_2.pdf | ||
| RFP 80GSFC22R0005 updated Final.pdf | ||
| LMX RFP Cover Letter Corrected.pdf | ||
| 80GSFC22R0005 SF33-14c.pdf | ||
| Attachment A SOW R.pdf | ||
| LMX RFP Cover Letter.pdf | ||
| RFP 80GSFC22R0005 Final1.pdf | ||
| Attachment A LMX SOW R.pdf | ||
| Attachment C GIRD1.pdf | ||
| MEL - GeoXO Lightning Mapper-1.pdf | ||
| Attachment H IT Security Applicable.pdf | ||
| Attachment F Tech Dev and Risk1.pdf | ||
| Attachment B PORD1.pdf | ||
| Attachment D UIID1.pdf | ||
| Attachment E IMAR1.pdf | ||
| Attachment G IT Security Cover Sheet.pdf |
Show all 18
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Information Technology Security Management Plan
Issue Date Effective Date:
SENSITIVE BUT UNCLASSIFIED
(SBU) Version 7 03/2021
(Insert Contract # Here)
IT Security Management Plan Review and Approval
This Information Technology Security Management Plan (ITSMP) for the was prepared for the exclusive use of NASA and completed on
I have reviewed the contents of this plan, and believe that it presents an accurate representation.
Reviewed by: ________________________________
ISSO, or equivalent Date
Concurred by: ________________________________
COR/Task Monitor Date
Approved by: ________________________________
Center CISO Date
Accepted by: ________________________________
Contracting Officer Date
SENSITIVE BUT UNCLASSIFIED
Contents
Change History .......................................................................................................................................................................................... ii IT Security Management Plan Review and Approval ............................................................................................................................... iii 1 Contract Identification
1.1 Contract Name
1.2 Contract Number
1.3 Responsible Organization
1.4 Contact Information
1.4.1 Physical Location
1.4.2 Points of Contact
1.5 General Contract Description
1.5.1 Information System Categorization
1.5.2 Security Categorization
1.5.3 Information System
1.5.4 Contractor Badging
1.5.5 Supply Chain Risk Management (SCRM)
1.5.6 Related Laws/Regulations/Policies
2 Security Control Implementations 3 Federal Information Security Management Act (FISMA) Reporting Appendix A: Acronyms
1.5.6 Related Laws/Regulations/Policies
• 5 U.S.C. 552, Freedom of Information Act, 1967
• 5 U.S.C. 552a, Privacy Act, 1974
• FIPS 199, Standards for Security Categorization of Federal Information and Information Systems
• FIPS 200, Minimum Security Requirements for Federal Information and Information Systems
• NIST SP 800-18 Rev. 1, Guide for Developing Security Plans for Federal Information Systems
• NIST SP 800-30 Rev. 1, Guide for Conducting Risk Assessments
• NIST SP 800-34 Rev. 1, Contingency Planning Guide for Information Technology Systems
• NIST SP 800-37 Rev. 2, Guide for the Security Authorization of Federal Information Systems
• NIST SP 800-42, Guideline on Network Security Testing
• NIST SP 800-53 Rev. 4, Recommended Security Controls for Federal Information Systems
• NIST SP 800-53A Rev. 4, Techniques and Procedures for Verifying the Effectiveness of Security Controls in Federal
Information Systems
• NIST SP 800-60 v1 Rev. 1, Guide for Mapping Types of Information and Information Systems to Security Categories
• NIST SP 800-61 Rev. 2, Computer Security Incident Handling Guide
• NIST SP 800-64 v1, Security Considerations in the Information System Development Life Cycle
• OMB Circular A-130, Appendix III, Security of Federal Automated Information Systems
• Public Law (PL) 99-474, The Computer Fraud and Abuse Act of 1986
• PL 93-502 -Freedom of Information Act 1974
• Presidential Decision Directive (PDD-63), Critical Infrastructure Protection Federal Information Security Management Act of 2002 (FISMA)
• NPR 2810.1A, Security of Information Technology
Additional Information: If there is any additional information that you wish to provide, please use the box below.
Version 7 03/2021
File details come from the government source that posted it. Updated .