Hotline_Questions_and_Responses_to_items_42,_43,_and_62.pdf
PDF 59 KB Posted
- Attached to
- SEC-Hotline Services
- Solicitation number
- Not on record
- Issued by
-
Securities and Exchange Commission
About this file
Questions/responses 3 of 3
View the file
Other files
Show all 26
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Hotline Questions and Responses
February 21, 2018
Key: Question (Q) Government Response (R)
Q42: Is compliance with NIST 800-171 Controlled Unclassified Information required? If so, how will compliance be validated? Will the compliance matrix in NIST 800-171 be used? (SOW C-5) OIG’s response:
R42: Yes. Compliance will use the matrix
Q43: Will the SEC provide a secure tunnel for the web form from the SEC hosted website to contractor facility (SOW, C-5) OIG Response:
R43: No. SEC will provide a re-direct message that states you are leaving a Federal site.
Q62: Are there specific laws or regulations governing the environment in which complaint data is stored? (SOW, H-10) OIG Response:
R62: Yes. Regulations include but are not limited to the following: NIST 800-171, FIPS PUB 199, NIST 800-144, NIST 800-53 revision 4, FAR, etc.
File details come from the government source that posted it.