Attachment_J_-_IT_Security_Applicable_Doc_List.doc.pdf
PDF 301 KB Posted
- Solicitation number
- NNG17591526R
About this file
Attachment J - IT Security Applicable Document List
View the file
Other files
Show 40 more
Latest 50 of 60 listed here. See the rest on GovTribe.
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
5/2017
ATTACHMENT J
INFORMATION TECHNOLOGY (IT)
SECURITY APPLICABLE DOCUMENTS
LIST
RFP NNG17591526R
Attachment J
Information Technology (IT) Security Applicable Documents List
MAY 2017
NASA Policy Directives (NPD) and NASA Procedural Requirements (NPR)
Document Subject Effective Date
NPR 1382.1A NASA Privacy Procedural Requirements July 10, 2013
NPD 1382.17J NASA Privacy Policy June 29, 2016
NPD 1440.6I NASA Records Management September 10, 2014
NPR 1441.1E NASA Records Retention Schedules January 29, 2015
NPD 2540.1H
Personal Use of Government Office Equipment Including
Information Technology February 24, 2016
NPD 2800.1B Managing Information Technology March 21, 2008
NPR 2800.1B Managing Information Technology March 20, 2009
NPD 2810.1E NASA Information Security Policy July 14, 2015
NPR 2810.1A
Security of Information Technology w/ Change 1, May
19, 2011) May 16, 2006
NPD 2830.1A NASA Enterprise Architecture November 2, 2011
NPR 2830.1A NASA Enterprise Architecture Procedures December 19, 2013
NPR 7120.7
NASA Information Technology and Institutional
Infrastructure Program and Project Management
Requirements
November 3, 2008
NPR 2841.1 Identity, Credential, and Access Management January 6, 2011
NASA Interim Directive (NID)
NM2810-64
NASA Interim Directive: Information Technology
Security and Efficiency Requirements May 22, 2008
NID 7120.99
NASA Information Technology and Institutional
Infrastructure Program and Project Management
Requirements
December 22, 2011
NASA Interim Technical Requirements (NITR)
NITR 2800_2 Email Services and Email Forwarding September 18, 2009
NITR 2800_1 NASA Information Technology Waiver Requirements and Procedures
August 13, 2009
SOPs (ITS-SOP) and Handbooks (ITS-HBK)
ITS-HBK-2810.0002-A Roles and Responsabilities Crosswalk &
Definitions
May 2, 2013
ITS-HBK-2810.02-01 Security Assessment and Authorization May 6, 2011
ITS-HBK-2810.03-01 Planning May 6, 2011
ITS-HBK-2810.04-01A Risk Assessment: Security Categorization, Risk
Assessment, Vulnerability Scanning, Expedited
Patching & Organizationally Defined Values
October 12, 2012
ITS-HBK-2810.05-01 Systems and Service Acquisition November 21, 2011
ITS-HBK-2810.06a-01 Awareness and Training May 5, 2011
ITS-HBK-2810.07-01 Configuration Management May 6, 2011
ITS-HBK-2810.08-01 Contingency Planning May 6, 2011
ITS-HBK-2810.09-01A Incident Response and Management December 30, 2014
ITS-HBK-2810.10-01 Maintenance May 6, 2011
ITS-HBK-2810.11-01-A Media Protection July 13, 2012
ITS-HBK-2810.12-01 Physical and Environmental Protection May 5, 2011
ITS-HBK-2810.13-01 Personnel Security May 6, 2011
ITS-HBK-2810.14-01 System and Information Integrity May 6, 2011
ITS-HBK-2810.15-01 Access Control September 4, 2012
ITS-HBK-2810.16-01 Audit and Accountability May 6, 2011
ITS-HBK-2810.17-01 Identification and Authentication January 17, 2011
ITS-HBK-2810.18-01 System and Communications Protection April 6, 2011
ITS-HBK-2810.02-05 Security Assessment and Authorization: External
Information Systems
October 24, 2012
ITS-HBK-2810.02-06 Security Assessment and Authorization:
Extending and Information Systems Authorization to Operate Process and Templates
October 24, 2012
ITS-HBK-2810.0001-B Format and Procedures for an IT Security
Handbook
June 19, 2014
ITS-HBK-2810.15-2A Access Control: Elevated Privileges (EP) September 20, 2012
ITS-HBK-2810.02-04-A Security Assessment and Authorization:
Continuous Monitoring—Annual Security Control
Assessments
March 18, 2014
ITS-HBK-2810.03-01 Planning May 6, 2011
ITS-HBK-2810.04-02-A Risk Assessment: Procedures for Information
System Security Penetration Testing and Rules of
Engagement
April 30, 2013
ITS-HBK-2810.02-02D Information System Security Assessment and
Authorization Process
February 1, 2015
ITS-HBK 2810.11-02 Digital Media Sanitization September 15, 2008
ITS-HBK-2810.08-02 Contingency Planning: Guidance and Templates for Plan Development, Maintenance and Test
July 12, 2012
ITS-HBK-2810.09-01A Incident Response and Management December 30, 2014
Standards
EA-STD 0001.0 Standard for Integrating Applications into the NASA
Access Management, Authentication, and
Authorization Infrastructure
August 1, 2008
EA-SOP 0003.0 Procedures for Submitting a NASA Agency Forest
(NAF) Deviation Request and Transition Plan
August 1, 2008
EA-SOP 0004.0 Procedures for Submitting an Application Integration
Deviation Request and Transition Plan
August 1, 2008
NASA-STD-2804-P Minimum Interoperability Software Suite September 22, 2014
NASA-STD-2805-P Minimum Hardware Configurations September 22, 2014
Within 30 days after contract award, the Contractor shall develop and deliver an IT Security
Management Plan to the Contracting Officer for approval.
File details come from the government source that posted it. Updated .