FISMA Annual Independent Audit Services

Added: Jul 15, 2016 11:50 am

The Contractor shall perform an independent evaluation of the information security program and practices of the Agency to determine the effectiveness of such program and practices.

The Contractor shall populate the FISMA IG Reporting Metrics (https://www.dhs.gov/fisma) in the U.S. Department of Homeland Security (DHS) Cyberscope FISMA Reporting System accessed through the OMB Max Portal. The Contractor staff will be required to obtain (at CSOSA's expense) a CSOSA-issued HSPD-12 PIV Smart Card.

The Contractor shall perform an independent assessment of CSOSA and PSA information security program and practices, using the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53A (As Amended) "Examine" and "Interview" assessment procedures. No technical testing will be performed under this contract. The vendor should leverage existing technical test results provided by other independent assessments. This assessment will cover the annual independent evaluation requirements under 44 U.S.C. 3553 (Annual independent evaluation) , which includes the Annual FISMA IG Reporting Metrics and populating in the DHS CyberScope FISMA Reporting system for CSOSA and PSA.