AB_Application_RFI_Questions_and_Answers_050313.docx
DOCX document 21 KB Posted
- Solicitation number
- RFI-XB-13-002G
About this file
Questions and Answers
View the file
Other files
| File | Type | Posted |
|---|---|---|
| FedRAMP_Accreditation_Body_Application.docx | DOCX document |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
May 3, 2013 FedBizOpps Announcement # RFI-XB-13-002G Questions and Answers
1. If you would, please clarify if RFI - FedRAMP 3PAO Accreditation Body Application (RFI-XB-13-002G) is the current process for applying to become a 3PAO, or is (RFI-XB-13-002G) for the “FedRAMP 3PAO Accreditation Body Application” something different?
a. The FedRAMP 3PAO Accreditation Body Application is the application for organizations to become the Accrediting Body that will review 3PAO applicants’ conformance with the FedRAMP 3PAO requirements.
2. Regarding the request for the Accreditation Body to provide, “A detailed description of the accreditation body’s conformance to ISO/IEC 17011:2004,” can you please provide clarification regarding how much detail is being requested. Specifically, should the Accreditation Body specify how they meet each clause of ISO/IEC 17011:2004, or would a less specific approach be preferred.
a. A less specific approach to demonstrating conformance to ISO/IEC 17011:2004 would be satisfactory. Additionally, providing proof of status as signatory to an international mutual recognition agreement whose scope includes ISO/IEC 17020:1998 is sufficient evidence that your organization is conformant to ISO/IEC17011:2004.
3. Is the Accreditation Body Application to determine who a 3PAO is?
a. The Accreditation Body Application is to determine what organization(s) will review 3PAO applicants’ conformance with the FedRAMP 3PAO requirements.
4. Would an Accreditation Body Application prohibit a company from doing other cloud computing work?
a. Accrediting bodies must be able to conform to the independence requirements as set forth in the ISO 17011:2004 standard.
5. Would being a 3PAO prohibit you from bidding to become the FedRAMP 3PAO Accreditation Body? Is being a 3PAO a conflict of interest or can a company be both, hypothetically?
a. Yes, being a FedRAMP accredited 3PAO is a conflict of interest and will prevent an organization from becoming the FedRAMP 3PAO Accreditation Body.
File details come from the government source that posted it. Updated .