Description
The United States Department of the Interior is seeking a contractor to provide Science Assessments, CAO. The contractor will be responsible for providing information technology products and services to the Department. The contractor must comply with the Department's IT Baseline Compliance Contract Guidelines, which include requirements for information technology and cybersecurity, cybersecurity incident response, privacy, accessibility, records management, and controlled unclassified information. The contractor must also provide an Assessment and Authorization (A&A) documentation package for each system that complies with Federal Information Processing Standard (FIPS) 199, National Institute of Standards and Technology (NIST) Special Publication (SP) 800-34, NIST SP 800-37, NIST SP 800-53, NIST SP 800-60, et al.
• The contractor must manage information in accordance with applicable laws, regulations, executive orders, and policies regarding the marking, safeguarding, and dissemination of Controlled Unclassified Information (CUI).
• The contractor must comply with the requirements of the Privacy Act of 1974 and shall not remove personally identifiable information (PII) or Privacy Act material from government facilities or systems, or facilities or systems operated or maintained on the government’s behalf, without the express written permission of the Head of the Contracting Activity.
• The contractor must provide an annual Information Technology Security Awareness Training course for all contractor employees before accessing federal information systems under the contract.
• The contractor must report all suspected or confirmed information security incidents to the appropriate Bureau or Office Incident Response Team and to the DOI Computer Incident Response Center (DOI CIRC) immediately, no later than 1 hour after “becoming aware of the incident.”