PWS_Technical_Exhibit_8 _Checklist_and_Certification_for_Minimum_Level_of_Enhanced_Safeguarding_for_Unclassified_DoD_Information.doc

DOC document 219 KB Posted May 22, 2014

Attached to: Other Health Insurance
Solicitation number: HT0011-14-R-0021
Issued by: Defense Health Agency

About this file

From the source

Certifications Checklist

View the file

Other files

File	Type	Posted
OHI_RFP_Q-A_06-25-14.xls	XLS spreadsheet	Jun 25, 2014
HT0011-14-R-0021-0002-OHI_RFP_Amendment.pdf	PDF	Jun 25, 2014
HT0011-14-R-0021-Additional_Questions_and_Answers-06-25-14.docx	DOCX document	Jun 25, 2014
HT0011-14-R-0021-Attachment_5-DD254.pdf	PDF	Jun 23, 2014
HT0011-14-R-0021-0001-OHI_RFP_Amendment.pdf	PDF	Jun 23, 2014
HT0011-14-R-0021-OHI-Attachment_10-Past_Performance_Questionnaire.docx	DOCX document	Jun 23, 2014
HT0011-14-R-0021-Additional_Questions_and_Answers.docx	DOCX document	Jun 23, 2014
HT0011-14-R-0021-OHI_RFP.pdf	PDF	Jun 23, 2014
OHI_RFP_Q-A_06192014_(5).xls	XLS spreadsheet	Jun 19, 2014
HT0011-14-R-0021_(2).docx	DOCX document	May 22, 2014
PWS_Technical_Exhibit_6 _Non-Disclosure_Agreement.docx	DOCX document	May 22, 2014
PWS_Technical_Exhibit_9 _Writtten_Determination_in_Support_of_Minimum_Level_of_Enhanced_Safeguarding_for_Unclassified_DoD_Information.doc	DOC document	May 22, 2014

Show all 12

On GovTribe

Work with this file

Download the original file
Contacts named in this file
Similar government files
Ask GovTribe AI about this file

Try for free Login

Text version

The file's text, extracted by GovTribe without its formatting.

HT0011-14-R-0021, PWS Technical Exhibit 8

Checklist and Certification for Minimum Level of Enhanced Safeguarding for Unclassified DoD Information Processed in accordance with provisions at H.3. Requirements for Minimum Level of Enhanced Safeguarding for Unclassified DoD Information, and CDRL AP040 Checklist and Certification for Minimum Level of Enhanced Safeguarding for Unclassified DoD Information, of Contract . [Insert TRICARE Contract #]

Version 3.1 Access Control HIPAA Security (Technical Safeguards)

Ref #

Nomenclature

Compliance Statement

Assessment Method

Compliance Date

Activity Description

AC-2

Account Management

FORMDROPDOWN

AC-3

Access Enforcement

FORMDROPDOWN

AC-3(4)

Access Enforcement

FORMDROPDOWN

AC-4

Information Flow Enforcement

FORMDROPDOWN

AC-6

Least Privilege

FORMDROPDOWN

AC-7

Unsuccessful Login Attempts

FORMDROPDOWN

AC-11

Session Lock

FORMDROPDOWN

AC-11(1)

Session Lock

FORMDROPDOWN

AC-17

Remote Access

FORMDROPDOWN

AC-17(2)

Remote Access

FORMDROPDOWN

AC-18

Wireless Access

FORMDROPDOWN

AC-18(1)

Wireless Access

FORMDROPDOWN

AC-19

Access Control for Mobile Devices

FORMDROPDOWN

Awareness & Training HIPAA Security (Administrative)

Ref #

Nomenclature

Compliance Statement

Assessment Method

Compliance Date

Activity Description

AT-2

Security Awareness

FORMDROPDOWN

Audit & Accounting HIPAA Security (Technical Safeguards)

Ref #

Nomenclature

Compliance Statement

Assessment Method

Compliance Date

Activity Description

AU-2

Auditable Events

FORMDROPDOWN

AU-3

Content of Audit Records

FORMDROPDOWN

AU-6

Audit Review, Analysis & Reporting

FORMDROPDOWN

AU-6(1)

Audit Review, Analysis & Reporting

FORMDROPDOWN

AU-7

Audit Reduction & Report Generation

FORMDROPDOWN

AU-8

Time Stamps

FORMDROPDOWN

AU-9

Protection of Audit Information

FORMDROPDOWN

AU-10

Non-Repudiation

FORMDROPDOWN

AU-10(5)

Non-Repudiation

FORMDROPDOWN

Configuration Management HIPAA Security (Administrative Safeguards)

Ref #

Nomenclature

Compliance Statement

Assessment Method

Compliance Date

Activity Description

CM-2

Baseline Configuration

FORMDROPDOWN

CM-6

Configuration Settings

FORMDROPDOWN

CM-7

Least Functionality

FORMDROPDOWN

CM-8

Information Sys Component Inventory

FORMDROPDOWN

Contingency Planning HIPAA Security (Administrative Safeguards)

Ref #

Nomenclature

Compliance Statement

Assessment Method

Compliance Date

Activity Description

CP-9

Information System Backup

FORMDROPDOWN

Identification & Authentication HIPAA Security (Technical Safeguards)

Ref #

Nomenclature

Compliance Statement

Assessment Method

Compliance Date

Activity Description

IA-2

User Identification & Authentication

FORMDROPDOWN

IA-4

Identifier Management

FORMDROPDOWN

IA-5

Authenticator Management

FORMDROPDOWN

IA-5(1)

Authenticator Management

FORMDROPDOWN

Select Method

Incident Response HIPAA Security (Administrative Safeguards)

Ref #

Nomenclature

Compliance Statement

Assessment Method

Compliance Date

Activity Description

IR-2

Incident Response Training

FORMDROPDOWN

IR-4

Incident Handling

FORMDROPDOWN

IR-5

Incident Monitoring

FORMDROPDOWN

IR-6

Incident Reporting

FORMDROPDOWN

Maintenance HIPAA Security (Administrative Safeguards)

Ref #

Nomenclature

Compliance Statement

Assessment Method

Compliance Date

Activity Description

MA-4

Remote Maintenance

FORMDROPDOWN

MA-4(6)

Remote Maintenance

FORMDROPDOWN

MA-5

Maintenance Personnel

FORMDROPDOWN

MA-6

Timely Maintenance

FORMDROPDOWN

Media Protection HIPAA Security (Physical Safeguards)

Ref #

Nomenclature

Compliance Statement

Assessment Method

Compliance Date

Activity Description

MP-4

Media Storage

FORMDROPDOWN

MP-6

Media Sanitization & Disposal

FORMDROPDOWN

Physical & Environmental Protection HIPAA Security (Physical Safeguards)

Ref #

Nomenclature

Compliance Statement

Assessment Method

Compliance Date

Activity Description

PE-5

Access Control for Display Medium

FORMDROPDOWN

PE-7

Visitor Control

FORMDROPDOWN

Program Management HIPAA Security (Administrative Safeguards)

Ref #

Nomenclature

Compliance Statement

Assessment Method

Compliance Date

Activity Description

PM-10

Security Authorization Process

FORMDROPDOWN

Select Method

System & Comm Protection HIPAA Security (Administrative / Technical Safeguards)

Ref #

Nomenclature

Compliance Statement

Assessment Method

Compliance Date

Activity Description

SC-2

Application Partitioning

FORMDROPDOWN

SC-4

Information in Shared Resources

FORMDROPDOWN

SC-7

Boundary Protection

FORMDROPDOWN

SC-7(2)

Boundary Protection

FORMDROPDOWN

SC-9

Transmission Confidentiality

FORMDROPDOWN

SC-9(1)

Transmission Confidentiality

FORMDROPDOWN

SC-13

Use of Cryptography

FORMDROPDOWN

SC-13(1)

Use of Cryptography

FORMDROPDOWN

Select Method

SC-13(4)

Use of Cryptography

FORMDROPDOWN

Select Method

SC-15

Collaborative Computing

FORMDROPDOWN

SC-28

Protection of Information at Rest

FORMDROPDOWN

Select Method

System & Information Integrity HIPAA Security (Administrative Safeguards)

Ref #

Nomenclature

Compliance Statement

Assessment Method

Compliance Date

Activity Description

SI-2

Flaw Remediation

FORMDROPDOWN

SI-3

Malicious Code Protection

FORMDROPDOWN

SI-4

Information System Monitoring

FORMDROPDOWN

CERTIFICATION OF COMPLIANCE: I certify that I am an official representative for “<Insert Contract Company's Name> acknowledges that certification and submission of this document does not constitute approval or acceptance by the Government of the processes or procedures of (insert name of contractor) in meeting the expressed, enhanced safeguarding requirements required by contract, and that the Government may effect any or all rights and remedies allowed by law, regulation and/or contract requirements, clauses or special provisions in ensuring (insert name of contractor) meets the identified enhanced safeguarding requirements.”

Signature:

Date:

Name:

Title:

Company:

TMA Form September 2012

File details come from the government source that posted it. Updated Nov 14, 2017.