Amendment 1 Q and A.pdf
PDF 136 KB Posted
- Attached to
- Employee Survey Services
- Solicitation number
- RFQ_421203
- Issued by
-
Department of Energy Office of Science
View the file
Other files
| File | Type | Posted |
|---|---|---|
| Enclosure (1) Draft Contract 421203.docx | DOCX document | |
| Attachment (B) BNL-QA-101.pdf | ||
| RFQ Letter 421203.pdf | ||
| Attachment (C) Quotation Pricing Sheet.pdf | ||
| Attachment (A) SOW.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Amendment 1 to RFQ 421203 for Employee Engagement Survey
The purpose of this Amendment is to answer questions & answers submitted. The due date is not extended.
Question 1: The Offeror’s technology platform solution(s) is FedRAMP Authorized or meets all comparable security requirements. What comparable security requirements are acceptable?
Answer: Comparable security requirements are meeting the applicable controls and assessments of ISO (International Organization for Standardization) 27001 and NIST SP (National Institute of Standards and Technology Special Publication) 800-53.
NIST 800-53 is publicly available via https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final.
While ISO27001 is publicly available, there is a cost attached. However, NIST does publish a mapping between ISO27001 and 800-53.
https://csrc.nist.gov/CSRC/media/Publications/sp/800-53/rev-5/final/documents/sp800-53r5-to-iso- 27001-mapping.docx https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final https://csrc.nist.gov/CSRC/media/Publications/sp/800-53/rev-5/final/documents/sp800-53r5-to-iso-27001-mapping.docx https://csrc.nist.gov/CSRC/media/Publications/sp/800-53/rev-5/final/documents/sp800-53r5-to-iso-27001-mapping.docx
File details come from the government source that posted it. Updated .