W81K00-22-Q-0104 -Exhibit 1_RMF Timelines (3).pdf
PDF 12 KB Posted
- Attached to
- Solicitation – Cost-Per-Test- Immunoassay Testing Federal contract opportunity
- Solicitation number
- W81K00-22-Q-0104
- Issued by
- Department of the Army Medical Command
About this file
This document contains a solicitation for cost-per-test immunoassay testing services and associated Risk Management Framework documentation requirements. The solicitation seeks quotes by May 26th, 2022 for immunoassay testing services to be provided to the Department of the Army Medical Command. Offerors must include a completed SF-1449, SF-30, point of contact information, and confirmation of SAM registration. The solicitation also requires hardware/software/architecture documents, RMF documentation, Nessus scans, STIG checklists, and SCAP results to be provided by the vendor on specified timelines following award. The government aims to provide an Authorization to Operate with Conditions recommendation within 2 weeks of receiving final documentation and technical scans from the vendor.
View the file
Other files for this federal contract opportunity
| File | Type | Posted |
|---|---|---|
| W81K00-22-Q-0104_Attachment 3_DHA Cybersecurity - RMF Requirements.pdf | ||
| W81K00-22-Q-0104-Exhibit 2_Medical Device Risk Assessment Questionnaire.pdf | ||
| Solicitation -- W81K00-22-Q-0104.pdf |
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
EXHIBIT 1
RMF Assessment Timeframes
Required Vendor Timeframes: The Government shall complete its required actions within the following referenced timeframes but no later than one year after order/contract issuance. If the vendor has completed all required actions in a timely manner and acceptable manner while the Government experiences delays, the vendor would be given additional time for future actions corresponding to the amount of Government delay.
Vendor Requirements: Initial Draft Date Due Final Date Due
Vendor to contact Gov POC:
dha.detrick.med-log.mbx.cyberlog@mail.mil
10 business days post award
Hardware/Software/Architecture Documents 15 business days post award
20 business days post
RMF Documentation Production
6 weeks post award
4 months post
Technical Nessus Scans
1 month post award
6 months post
Technical STIG Checklists
Technical SCAP
Required Vendor Timeframes: The Government shall complete its required actions within the following referenced timeframes but no later than one year after order/contract issuance. If the vendor has completed all required actions in a timely manner and acceptable manner while the Government experiences delays, the vendor would be given additional time for future actions corresponding to the amount of Government delay.
Government Requirements Initial Draft Date Due Final Date Due
Kickoff Meeting 15 business days post award -
Security Assessment Plan Generation 20 business days post award 30 days post award
RMF Templates sent to Vendor 5 business days post vendor initial contact
Copies of Applicable STIGs sent to Vendor 17 business days post award
30 days post award
Authorization to Operate with Conditions (ATO-C) Recommendation
ATO-C recommendation submitted to
3rd party validator 2 weeks after final documentation/technical scans received
Independent Verification and Validation (IV&V) Scheduling
Scheduling request to 3rd party validator 3 weeks after final documentation/technical scans received
File details come from the government source that posted it. Updated .