Description
The Department of the Interior (DOI) has released guidelines for contractors to follow when working with information technology (IT) products or services. The guidelines cover various topics, including information technology and cybersecurity requirements, cybersecurity incident response, privacy requirements, accessibility requirements, records management requirements, and controlled unclassified information requirements. Contractors must comply with these guidelines to ensure the security and integrity of DOI's information systems and data. The guidelines also outline the requirements for contractor personnel security, training, and reporting.
• The guidelines apply to all contractors working with DOI on IT-related projects.
• Contractors must comply with federal regulations and guidance, including FISMA, FedRAMP, and the Privacy Act of 1974.
• Contractors must provide an Assessment and Authorization (A&A) documentation package for each system that complies with Federal Information Processing Standard (FIPS) 199 and NIST Special Publications.
• Contractors must report all information security incidents to the appropriate Bureau or Office Incident Response Team and to the DOI Computer Incident Response Center (DOI CIRC).
• Contractors must comply with the requirements of the Privacy Act of 1974 and ensure the privacy of personally identifiable information (PII).
• Contractors must ensure that all information and communication technology (ICT) products or services conform to the Revised 508 Standards for accessibility.