Attachment_g_IT_2_Security_Applicable_Documents_List_includes_links.doc

DOC document 254 KB Posted Jul 22, 2019

Attached to: NASA-GSFC WFIRST INSTRUMENT CARRIER FABRICATION
Solicitation number: Not on record
Issued by: National Aeronautics and Space Administration Goddard Space Center

About this file

From the source

Revised Attachment G, IT Security ADL with links

View the file

Other files

File	Type	Posted
Signed_Selection_Statement.pdf	PDF	Oct 15, 2019
Responses_to_Questions.pdf	PDF	Jul 22, 2019
Amendment__1.pdf	PDF	Jul 22, 2019
Amendment__1_Follow-on_pages.pdf	PDF	Jul 22, 2019
540-PG-8719.1.A_Lift_Sling_Design_Extension_2019v2.pdf	PDF	Jul 22, 2019
NPR_6000_001H_.pdf	PDF	Jul 22, 2019
nasa-std-5005d.pdf	PDF	Jul 22, 2019
WFIRST-PLAN-06635.pdf	PDF	Jul 22, 2019
WFIRST-IC-SPEC-0069-.pdf	PDF	Jul 22, 2019
540-PG-8700.2.1E_Admin_Rev.pdf	PDF	Jul 22, 2019
WFIRST-IC-SPEC-0035-.pdf	PDF	Jul 12, 2019
Attachment_F,_Small_Business_Subcontracting_Plan.pdf	PDF	Jul 12, 2019
Attachment_D,_WFIRST-RQMT-05819_Released_Rev_A.pdf	PDF	Jul 12, 2019
IC_Flight_Structure_Fabrication_Applicable_Drawings.pdf	PDF	Jul 12, 2019
Attachment_E,_533_Attach_Core_Completion.pdf	PDF	Jul 12, 2019
Signed_RFP_cover_letter.pdf	PDF	Jul 12, 2019
RFP.pdf	PDF	Jul 12, 2019
Enclosure_2,_IT_Security_Management_Plan_Template.pdf	PDF	Jul 12, 2019
Attachment_G,_IT_Security_Applicable_Documents_List.pdf	PDF	Jul 12, 2019
Attachment_A,_WFIRST-IC-SOW-0001-.pdf	PDF	Jul 12, 2019
WFIRST-IC-SPEC-0062_-.pdf	PDF	Jul 12, 2019
WFIRST-IC-SPEC-0067--1.pdf	PDF	Jul 12, 2019
Attachment_I,_QA_Plan.pdf	PDF	Jul 12, 2019
Attachment_H,_IT_Security_Management_plan.pdf	PDF	Jul 12, 2019
WFIRST-IC-SPEC-0017A.pdf	PDF	Jul 12, 2019
Attachment_C,_WFIRST-IC-LIST-0023-.pdf	PDF	Jul 12, 2019
Attachment_B,_WFIRST-IC-SPEC-0046-.pdf	PDF	Jul 12, 2019
Enclosure_1,_QASP_Cost-Type_Contract_Template.pdf	PDF	Jul 12, 2019
WFIRST-IC-SPEC-0068_-.pdf	PDF	Jul 12, 2019
WFIRST-IC-SPEC-0032-.pdf	PDF	Jul 12, 2019
SF_33.pdf	PDF	Jul 12, 2019
WFIRST-IC-LIST-0023_FLight_Structure_DILS_(002).pdf	PDF	Jun 14, 2019
WFIRST-IC-SPEC-0046_TDMS_Insrtrument_Carrier_Flight_Structure_(002).pdf	PDF	Jun 14, 2019
WFIRST-IC-SOW-0001_flight_structure_TDMS_version_(002).pdf	PDF	Jun 14, 2019

Show all 34

On GovTribe

Work with this file

Download the original file
Contacts named in this file
Similar government files
Ask GovTribe AI about this file

Try for free Login

Text version

The file's text, extracted by GovTribe without its formatting.

Contract TBD Attachment G

ATTACHMENT G

INFORMATION TECHNOLOGY (IT) SECURITY

APPLICABLE DOCUMENTS LIST

June 2016

RFP 80GSFC19R0036

CONTRACT TBD

Information Technology (IT) Security Applicable Documents List

June 2016 NASA Policy Directives (NPD) and NASA Procedural Requirements (NPR)

Document

Subject

Effective Date

NPR 1382.1A

NASA Privacy Procedural Requirements

https://nodis3.gsfc.nasa.gov/displayDir.cfm?Internal_ID=N_PR_1382_001A_&page_name=main July 10, 2013

NPD 1382.17H

NASA Privacy Policy

https://nodis3.gsfc.nasa.gov/displayDir.cfm?Internal_ID=N_PD_1382_017J_&page_name=main June 24, 2009

NPD 1440.6I

NASA Records Management

https://nodis3.gsfc.nasa.gov/displayDir.cfm?Internal_ID=N_PD_1440_006I_&page_name=main September 10, 2014

NPR 1441.1E

NASA Records Management Program Requirements

https://nodis3.gsfc.nasa.gov/displayDir.cfm?Internal_ID=N_PR_1441_001E_&page_name=main January 29, 2015

NPD 2540.1H

Personal Use of Government Office Equipment Including Information Technology

https://nodis3.gsfc.nasa.gov/displayDir.cfm?Internal_ID=N_PD_2540_001H_&page_name=main February 24, 2016

NPD 2800.1B

Managing Information Technology

https://nodis3.gsfc.nasa.gov/displayDir.cfm?Internal_ID=N_PD_2800_001B_&page_name=main March 21, 2008

NPR 2800.1B

Managing Information Technology

https://nodis3.gsfc.nasa.gov/displayDir.cfm?Internal_ID=N_PR_2800_001B_&page_name=main March 20, 2009

NPD 2810.1E

NASA Information Security Policy

https://nodis3.gsfc.nasa.gov/displayDir.cfm?Internal_ID=N_PD_2810_001E_&page_name=main July 14, 2015

NPR 2810.1A

Security of Information Technology w/ Change 1, May 19, 2011)

https://nodis3.gsfc.nasa.gov/displayDir.cfm?Internal_ID=N_PR_2810_001A_&page_name=main May 16, 2006

NPD 2830.1A

NASA Enterprise Architecture

https://nodis3.gsfc.nasa.gov/displayDir.cfm?Internal_ID=N_PD_2830_001A_&page_name=main November 2, 2011

NPR 2830.1A

NASA Enterprise Architecture Procedures

https://nodis3.gsfc.nasa.gov/displayDir.cfm?Internal_ID=N_PR_2830_001A_&page_name=main December 19, 2013

NPR 2841.1

Identity, Credential, and Access Management

https://nodis3.gsfc.nasa.gov/displayDir.cfm?Internal_ID=N_PR_2841_0001_&page_name=main January 6, 2011

NASA Interim Directive (NID)

Document

Subject

Effective Date

NM2810-64

NASA Interim Directive: Information Technology Security and Efficiency Requirements

https://nodis3.gsfc.nasa.gov/policy_letters/NM_2810-64_.pdf May 22, 2008

NID 7120.99

NASA Information Technology and Institutional Infrastructure Program and Project Management Requirements

https://nodis3.gsfc.nasa.gov/OPD_docs/NID_7120_99_.pdf December 22, 2011

NASA Interim Technical Requirements (NITR)

Document

Subject

Effective Date

NITR 2800_2

Email Services and Email Forwarding

https://nodis3.gsfc.nasa.gov/tech_guidance/N_ITR_2800_2_.pdf September 18, 2009

NITR 2800_1

NASA Information Technology Waiver Requirements and Procedures

https://nodis3.gsfc.nasa.gov/tech_guidance/N_ITR_2800_1_.pdf August 13, 2009

IT Security Handbooks (ITS-HBK)

Document

Subject

Effective Date

ITS-HBK-1382.02-01

Privacy Goals and Objectives

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_1382_02_01.pdf July 27, 2012

ITS-HBK-1382.03-01

Privacy Risk Management and Compliance: PIAs and SORNs

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_1382_03_01.pdf September 25, 2012

ITS-HBK-1382.03-02

Privacy Risk Management and Compliance: Annual Reporting Procedures for Reviewing and Reducing PII and Eliminating the Unnecessary Use of SSN

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_1382_%20%20.03_02.pdf September 7, 2011

ITS-HBK-1382.04-01

Privacy and Information Security: Overview

https://www.nasa.gov/sites/default/files/atoms/files/its-hbk_1382_04_01_privacy_and_information_security.pdf August 28, 2012

ITS-HBK-1382.05-01

Privacy Incident Response and Management: Breach Response Team Checklist

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_1382_%20%20..05_01.pdf September 25, 2012

ITS-HBK-1382.06-01

Privacy Notice and Redress: Web Privacy & Written Notice, Complaints, Access and Redress

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_1382_%2006_01.pdf September 7, 2012

ITS-HBK-1382.07-01

Privacy Awareness and Training: Overview

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_1382_%2007_01.pdf September 7, 2014

ITS-HBK-1382.08-01

Privacy Accountability: Overview

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_1382_08_01.pdf August 28, 2012

ITS-HBK-1382.09-01

Privacy Rules of Behavior and Consequences: Overview

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_1382_%20%2009_01.pdf September 7, 2012

ITS-HBK-2810.0001-B

Format and Procedures for an IT Security Policies and Handbooks

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_0001_B.pdf June 19, 2014

NITR 2810.1

NASA Information Technology Security Disclaimer

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/NITR_2810_1_.pdf Sept 30, 2014

ITS-HBK-1441.01.01

Records Retention and Disposition: Overview

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/IT-HBK_1441_01-01_.pdf Jul 02, 2014

ITS-HBK-1440.01.01

Records Planning & Management: Records

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/IT-HBK_1440_01-01_.pdf Jul 02, 2014

ITS-HBK-2841.001-A

Identity, Credential, and Access Management Services

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2841_%2003_.pdf Feb 01, 2011

IT-SOP-2841.001-A

Identity and Credential Service Providers Federation Requests

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/IT-SOP_2841_001_1.pdf Feb 01, 2011

IT-SOP-2841.002-A

Identity, Credential, and Access Management (ICAM): Service Deviation Requests Management & Records Life Cycle-Overview

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/IT-SOP_2841_002_A.pdf Feb 01, 2011

IT-STD-1441.1

NASA Records Retention Schedules

https://nodis3.gsfc.nasa.gov/displayDir.cfm?Internal_ID=N_PR_1441_001E_&page_name=main&search_term=1441 May 07, 2014

ITS-HBK-2810.02-01

Security Assessment and Authorization

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_02.%2002_E.pdf May 6, 2011

ITS-HBK-2810.0002-A

Roles and Responsibilities Crosswalk & Definitions

https://www.nasa.gov/pdf/613976main_ITS-HBK-0002_%5BRoles-and-Responsibilities-Crosswalk%5D.pdf May 2, 2013

ITS-HBK-2810.02-02D

Information System Security Assessment and Authorization Process

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_02.%2002_E.pdf February 1, 2015

ITS-HBK-2810.02-04A

Security Assessment and Authorization: Continuous Monitoring – Annual Security Control Assessments

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_02-04_A.pdf March 18, 2014

ITS-HBK-2810.02-05

Security Assessment and Authorization: External Information Systems

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%20%20%20%2002_05.pdf October 24, 2012

ITS-HBK-2810.02-06

Security Assessment and Authorization: Extending and Information Systems Authorization to Operate Process and Templates

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_02-_06.pdf October 24, 2012

ITS-HBK-2810.02-08A

Security Assessment and Authorization: Plan of Action and Milestones (POA&M)

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_02_08.pdf December 11, 2013

ITS-HBK-2810.03-01

Planning

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%20.03_01.pdf May 6, 2011

ITS-HBK-2810.03-02

Planning: Information System Security Plan Template, Requirements, Guidance and Examples

https://prod.nais.nasa.gov/eps/eps_data/161529-OTHER-011-003.pdf February 9, 2011

ITS-HBK-2810.04-01A

Risk Assessment: Security Categorization, Risk Assessment, Vulnerability Scanning, Expedited Patching & Organizationally Defined Values

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_04_01.pdf October 12, 2012

ITS-HBK-2810.04-02

Risk Assessment: Procedures for Information System Security Penetration Testing and Rules of Engagement

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_04_2A.pdf April 30, 2013

ITS-HBK-2810.04-03

Risk Assessment: Web Application Security Program

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%20%2004_03.pdf April 30, 2013

ITS-HBK-2810.05-01

Systems and Service Acquisition

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%20%2005__01.pdf November 21, 2011

ITS-HBK-2810.06a-01

Awareness and Training

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%20%20%20_06_01.pdf May 5, 2011

ITS-HBK-2810.07-01

Configuration Management

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%20%20%20%2007_01.pdf May 6, 2011

ITS-HBK-2810.08-01

Contingency Planning

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%20%20%2008__01.pdf May 06, 2011

ITS-HBK-2810.08-02

Contingency Planning: Guidance and Templates for Plan Development, Maintenance and Test

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%20%20%2008_02.pdf February 10, 2011

ITS-HBK-2810.09-01A

Incident Response and Management

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%2009_01.pdf December 30, 2014

ITS-HBK-2810.09-02

NASA Information Security Incident Management

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_.09_02_A.pdf August 24, 2011

ITS-HBK-2810.09-03

Targeted Collection of Electronic Data

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%20%2009_03.pdf August 24, 2011

ITS-HBK-2810.09-04

Incident Response and Management: Guidelines for Data Spillage & Sanitization Procedures

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_09-04_.pdf February 27, 2014

ITS-HBK-2810.10-01

Maintenance

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%20%20%20_10_01.pdf May 6, 2011

ITS-HBK-2810.11-01

Media Protection

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_11_01.pdf July 13, 2012

ITS-HBK-2810.11-02

Media Protection: Digital Media Sanitization

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%20%2011_02.pdf July 13, 2012

ITS-HBK-2810.12-01

Physical and Environmental Protection

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%20%20%20.12_01.pdf May 6, 2011

ITS-HBK-2810.13-01

Personnel Security

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%20%20%2013__01.pdf May 6, 2011

ITS-HBK-2810.14-01

System and Information Integrity

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%20%20.%2014_01.pdf May 6, 2011

ITS-HBK-2810.15-01

Access Control

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%20%20_15__1A.pdf September 4, 2012

ITS-HBK-2810.15-02A

Access Control: Elevated Privileges (EP)

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%2015_02.pdf September 20, 2012

ITS-HBK-2810.16-01

Audit and Accountability

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%20%20_16__01.pdf May 6, 2011

ITS-HBK-2810.17-01

Identification and Authentication

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810__17__01.pdf Jan 17, 2011

ITS-HBK-2810.18-01

System and Communications Protection

https://nodis-dms.gsfc.nasa.gov/NASA_Wide/restricted_directives/OCIO_Docs/ITS-HBK_2810_%20%20%2018_01.pdf Apr 6, 2011

Standards

Document

Subject

Effective Date

EA-STD 0001.0

Standard for Integrating Applications into the NASA Access Management, Authentication, and Authorization Infrastructure

https://www.nasa.gov/pdf/322880main_EA-STD-01-Integrating-Applications-into-NASA-Access-Mgmnt-Authentication-and-Authorization-Infrastructure.pdf August 1, 2008

EA-SOP 0003.0

Procedures for Submitting a NASA Agency Forest (NAF) Deviation Request and Transition Plan

https://www.nasa.gov/pdf/322683main_EA-SOP-03-Submitting-NASA-Agency-Forest-Deviation-Request-and-Transition-Plan.pdf August 1, 2008

EA-SOP 0004.0

Procedures for Submitting an Application Integration Deviation Request and Transition Plan

https://www.nasa.gov/pdf/322684main_EA-SOP-04-Submitting-Application-Integration-Deviation-Request-and-Transition-Plan.pdf August 1, 2008

NASA-STD-2804-P

Minimum Interoperability Software Suite

https://elibrary.gsfc.nasa.gov/_assets/doclibBidder/tech_docs/NASA-STD-2804.pdf September 22, 2014

NASA-STD-2805-P

Minimum Hardware Configurations

Error! Not a valid link.

September 22, 2014

Memoranda

From

Subject

Effective Date

Posted Date

Associate CIO for IT Security, Acting

Center Chief Information Officers & Associate CIO for Enterprise Services

EMET Agent Installation

https://inside.nasa.gov/system/files/3_07_2016_emet_memo_draft-final_signed.pdf

3/7/2016

Associate CIO for IT Security, Acting

Chief Information Officers

Recruitment and Retention of a Highly Qualified Federal Workforce

https://inside.nasa.gov/system/files/itsd_16-05_recruitment_and_retention_of_a_highly_qualified_workforce.pdf

11/05/2015

11/13/2015

Associate CIO for IT Security, Acting

Chief Information Officers

Cyber Hygiene Report Actions

https://inside.nasa.gov/system/files/itsd_16-04federal_cyber_hygiene_report_memo_11_10_signed.pdf

11/05/2015

11/13/2015

Associate CIO for IT Security, Acting

Chief Information Officers & Enterprise Service Executives

Cyber Hygiene Report Actions

https://inside.nasa.gov/system/files/itsd16-02federalcyberhygienereportmemosigned.pdf

10/7/2015

Associate Chief Information Officer for Capital Planning and Governance

Chief Information Officers

Information Technology Security Division Handbook Expiration Dates

https://inside.nasa.gov/system/files/s3009095315091807060.pdf

9/17/2015

Associate IT Security Division Director (Acting)

Chief Information Officers

Window Server 2003 Waiver Process

https://inside.nasa.gov/system/files/windows-memo8-18-signed.pdf

8/18/2015

8/19/2015

Associate IT Security Division Director (Acting)

Chief Information Officers

FY15 IT Security and Privacy Awareness Training Reminder

https://inside.nasa.gov/system/files/training_memo_8_18_signed.pdf

8/18/2015

8/19/2015

Office of the Chief Information Security Officer

Senior Agency Information Security Officer (SASIO)

Request the Cancellation of HBK 2810.03-02 Planning: Information System Security Plan Template, Requirements, Guidance, and Examples

https://inside.nasa.gov/system/files/s3009095315072708540_0.pdf

7/27/2015

(Acting) Senior Agency Information Security Officer

Center/Mission Directorate Chief Information Officer (CIO), Chief Information Security Officers (CISO), and Information System Owners (ISO)

Vulnerabilities in Unsupported or End of Life Software

https://inside.nasa.gov/system/files/eol-memo-signed-final.pdf

5/28/2015

(Acting) Senior Agency Information Security Officer

Distribution

Naming Pattern Memo

https://inside.nasa.gov/system/files/naming-pattern-memo-signed-final.pdf

5/28/2015

Office of the Chief Information Officer

(Acting) Senior Agency Information Security Officer

Expired Policy 2810-02.05 Security Assessment and Authorization: External Information Systems

Page not found The requested page "/ocio/sites/inside.nasa.gov.ocio/files/files/Memo_extension_verification_2810-02_05.pdf" could not be found.

11/19/2014

Senior Agency Information Security Official (Acting)

Distribution

Interim Guidance for Leveraging Cloud Services While Meeting Information Security Requirements

Page not found The requested page "/ocio/sites/inside.nasa.gov.ocio/files/files/Memo_NASAInterimGuidanceforLeveragingCloudServices_FINAL-Signed20152801.pdf" could not be found.

1/28/2015

Valerie Burks

Center/Mission Directorate CIOs

Configuration Guidance for Computer Operating Systems

https://inside.nasa.gov/system/files/configuration_guidance_for_computer_operating_systems_dec_2012.pdf

12/17/2012

(Acting) Senior Agency Information Security Officer

Office of the CISO

Extension Verification 2810-02.05

Page not found The requested page "/ocio/sites/inside.nasa.gov.ocio/files/files/extension_verification2810-0205.pdf" could not be found.

11/19/2014

NASA CIO and Deputy CIO for IT Security

Distribution

Updated Password Requirements for AA Accounts

https://inside.nasa.gov/system/files/updated-password-requirements-aa-accounts-2014-07-02.pdf

7/2/2014

Chief Information Officer

Distribution

Establishment and Maintenance of Secure Communications

Page not found The requested page "/ocio/sites/inside.nasa.gov.ocio/files/files/120228_MEMO_EstablishMaintSecureComms.pdf" could not be found.

2/28/2014

Deputy Chief Information Officer for Information Technology Security

Distribution

Implementation of National Institute of Standards and Technology Special Publication 800-53, Revision 4

Page not found The requested page "/ocio/sites/inside.nasa.gov.ocio/files/files/NISTSpecialPub800-53_R4.pdf" could not be found.

12/19/2013

Chief Information Officer

Distribution

Minimum Security Requirements for Personal Mobile Devices

https://inside.nasa.gov/system/files/minimum-security-requirements-for-personally-owned-mobile-devices.pdf

8/27/2013

Chief Information Officer

Distribution

Additional 90-day extension: Blanket waiver for use of Filevault 2.0 to meet Data at Rest (DAR) Encryption Requirements

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1049575main_I3P-PDM.pdf

5/7/2013

Office of the Chief Information Officer

Distribution

Delegation of Authorizing Official Designation to Center and Mission

Directorate Chief Information Officers https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1049356main_Delegation-of-AO_Designation-to-Center-&-MD_CIOs.pdf

4/2/2013

Deputy CIO for Information Security

Distribution

NASA ACES Secure Virtual Team Meeting (SVTM) Approved for Secure Meetings and Communication of SBU Data

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1049075main_SVTM%20Approved%20for%20Secure%20Meetings%2020130205.pdf

2/5/2013

Chief Information Officer

Distribution

Cancellation of PDM 2012-064 Data At Rest (DAR) Waiver Process and issuance of a new PDM addressing Alternate DAR Encryption Products

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1049255main_NASA_I3P_Program_Decision_Memo_Jan2013.pdf

1/27/2013

Deputy CIO for Information Technology Security

Center Mission Directorate Chief Information Officers (CIO)

Configuration Guidance for Computer Operating Systems

Page not found The requested page "/ocio/sites/inside.nasa.gov.ocio/files/files/12-12-17-Configuration-Guidance.pdf" could not be found.

12/17/2012

Associate Deputy Administrator

All NASA Employees

Breach of Personally Identifiable Information (PII) [Laptop DAR/Encryption]

https://inside.nasa.gov/nasa-breach-personally-identifiable-information-pii-laptop-darencryption

11/13/2012

Chief Information Officer

All NASA Center CIO's

Rescinding and/or Archiving Information Technology (IT) Security Memoranda

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1048895main_Rescinding_Archiving%20IT%20Memos_9-20-12.pdf

9/20/2012

Deputy CIO for Information Security

All NASA Center CIOs

FY2012 FISMA Awareness and Training Reporting Metrics

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1048835main_FISMA%20Training%20Awareness%20and%20Trng%20Report%20Metrics_8-28-12.pdf

9/12/2012

OCIO

Distribution

Acceptance of other Federal IT Security Awareness Training to Satisfy NASA's

FISMA Requirements https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1047755main_05_25_2012_AT_Memo.pdf

5/25/2012

Charles F. Bolden, Jr., NASA Administrator

All NASA Employees

Protection of Sensitive Agency Information

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1047855main_MEMO_3April12.pdf

4/3/2012

Assistant Administrator for Security and Program Protection, Chief Information Officer (Acting)

NASA Center Directors

Identity, Credential, and Access Management Business Process Leads

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1023452main_memo_08-27-2009-ICAM%20Business%20Process%20Leads.pdf

8/27/2009

Chief Information Officer (Acting)

Officials-in-Charge of Headquarters, Center CIOs, Mission Directorate CIOs

Security and Support Policy for Smartphones

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1023789main_Final%20Smartphone%20Memo-Aug%202%202009.pdf

8/3/2009

Chief Information Officer (Acting)

Center CIOs

Delegation of Waiver Authority and Responsibility for Vulnerability Scanning Requirements

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1022097main_scan-waiver-CIO-delegation-to-Center-CIO-signed-050609.pdf

5/6/2009

Chief Information Officer (Acting)

Officials-in-Charge of Headquarters Offices, NASA Center Directors

Roles and Responsibilities for Protecting NASA Sensitive But Unclassified (SBU) Information

https://inside.nasa.gov/system/files/roles-responsiblities-privacy.pdf

4/27/2009

Deputy CIO for IT Security

Center CIOs, Center ITSMs

FY 2009 Scanning and Vulnerability Elimination or Mitigation

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1021394main_Monthly-Vulnerability-Scanning-Memo-020609.pdf

2/06/2009

Chief Information Officer

Officials-in-Charge of Headquarters Offices, NASA Center Directors

Personally Identifiable Information (PII) Incident Reporting

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1021254main_Memo%20PII%20Incident%20Reporting_Final_011409_signed.pdf

1/14/2009

Chief Information Officer

All NASA Civil Service and Contractor Employees

Policy for Use of Removable Media, Such as USB Thumb Drives

https://blogs.gsfc.nasa.gov/infosec/?p=151

11/21/2008

Senior Agency Official for Privacy

Official-in-Charge of Headquarters Offices, NASA Center Directors

Personally Identifiable Information (PII) Responsibilities Statement

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1020356main_Signed_PII%20Respnsibilties%20Statement%20Issuance.pdf

9/8/2008

Chief Information Officer

Center CIOs

Deployment of the Software Refresh Portal

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1019356main_SRP-memo-073008.pdf

7/30/2008

Chief Information Officer

NASA CIOs, Mission Directorate CIOs, Center ITSMs, Center Human Resources Directors, IEMP

Requirement to Log and Verify Sensitive Data Extracts

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1021298main_Log%20and%20verify_Jun_9_08_signed.pdf

6/9/2008

Chief Information Officer

NASA CIOs, Mission Directorate CIOs, Center ITSMs, Center ITSMs, Center Human Resources Directors, IEMP

Remote Access to Personally Identifiable Information (PII)

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1021296main_Two%20factor%20memo_jun_9_08_signed.pdf

6/9/2008

Deputy CIO for IT Security

Center ITSMs

Clarification on Requirement for Contractors to Complete NASA Annual IT Security Awareness Training

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1021350main_06_06_08_clarification_on_annual_IT_Sec_training_signed.pdf

6/6/2008

Deputy CIO for IT Security

Center CIOs, Center ITSMs

System Security Documentation in RMS

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1021348main_02_20_08_system_security_doc_rms_update.pdf

2/20/2008

Chief Information Officer

Center CIOs, Deputy CIOs

Information Discovery

https://www.nasa.gov/pdf/322889main_2-4-08_Overview_Information%20Discovery.pdf

2/4/2008

Deputy CIO for IT Security

Center CIOs, Center ITSMs

Decision to Cancel Procurement Information Circular (PIC) 04-03 (System Administrator Certification Program)

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1021346main_01_16_08_cancellation_pic0403_sys_admin_program.pdf

1/16/2008

Chief Information Officer

Official-in-Charge of Headquarters Offices, NASA Center Directors

Release of NPD 2200.1A, Management of NASA Scientific and Technical Information

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1016412main_memo_NPD_2200.1A_sti.pdf

12/18/2007

Deputy CIO for IT Security

Center CIOs, Mission Directorate CIOs

Agency Security Configuration Standards: Federal Desktop Core Configurations

https://www.nasa.gov/pdf/322747main_11_15_07-Agency-Security-Configuration-FDCC.pdf

11/15/2007

Chief Information Officer

Center Chief Information Officers

Designation of FIPS-199 Impact Level for NASA's OAIT Voice Systems

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1021353main_07_10_07_fips199_impact_level_oait_voice.pdf

7/10/2007

Chief Information Officer

Center Chief Information Officers

Designation of FIPS-199 Impact Level for NASA OAIT Data Center Systems

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1021352main_07_10_07_fips199_cat_impact_level_oait_datactrs.pdf

7/10/2007

Chief Information Officer

Center Chief Information Officers

Designation of FIPS-199 Impact Level for NASA OAIT LANs

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1021351main_07_10_07_fips199_cat_impact_level_lans.pdf

7/10/2007

Chief Information Officer (Acting)

Center CIOs, Mission Directorate CIOs

Meeting OMB Memoranda M-06-015 "Safeguarding Personally Identifiable Information;" M-06-016 "Protection of Sensitive Agency Information," and M-06-019 "Reporting Incidents Involving Personally Identifiable Information and Incorporating the Cost for Security in Agency Information Technology Investments"

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1014681main_OCIO_10-17-06.pdf

10/17/2006

Deputy Administrator

Administrator/Official-in-Charge of Headquarters Offices, NASA Center Directors

Meeting NASA Information Technology Security Requirements

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1021354main_07_26_06_it_require.pdf

7/26/2006

Deputy CIO for IT Security

Center CIOs

Designation of FIPS-199 Impact Level for NASA OAIT Desktop Systems

https://www.nasa.gov/pdf/322738main_07_10_07-Designation-of-FIPS-199-Impact-Level-for-NASA-OAIT-Desktop-Systems.pdf

4/16/06

Chief Information Officer, Chief of Strategic Communications

Official-in-Charge of Headquarters Offices, NASA Center Directors, Center CIOs, Mission Directorate CIOs

Policy Governing NASA's Publicly Accessible Web sites

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1011727main_Policy_Public_accessible_websites.pdf

3/16/2006

Chief Information Officer, Assistant Administrator of Public Affairs

Center CIOs

Update of NASA Web site Linking Policy

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1011729main_website_linking_policy.pdf

12/15/2005

Chief Information Officer

Center CIOs

Update of NASA Web site Privacy Policy

https://inside.nasa.gov/sites/ocio.inside-dev.nasawestprime.com/themes/NASAOCIO/other/1011730main_website_privacy_policy.pdf

11/28/2005

Reminder: Within 30 days after contract effective date, the Contractor shall develop and deliver an IT Security Management Plan to the Contracting Officer for approval.

(06/2016)

File details come from the government source that posted it.