IMPORTANT! This guide defines security and privacy requirements for GSA IT acquisition contracts involving externally hosted contractor information systems that do not connect to the GSA network; information systems hosted in GSA facilities that directly connect to the GSA network; cloud information systems; or mobile applications. The security and privacy requirements are appropriately formatted to allow the respective security and privacy contract requirements to be placed in-line within a statement of work for each system type. Alternatively, this entire document can be incorporated into the statement of work or contract. NOTE: Throughout this guide there are highlighted SELECT statements. The requirements office, in coordination with the contracting officer, will complete the selections prior to their incorporation into a contract or statement of work.
IMPORTANT! This guide defines security and privacy requirements for GSA IT acquisition contracts involving externally hosted contractor information systems that do not connect to the GSA network; information systems hosted in GSA facilities that directly connect to the GSA network; cloud information systems; or mobile applications. The security and privacy requirements are appropriately formatted to allow the respective security and privacy contract requirements to be placed in-line within a statement of work for each system type. Alternatively, this entire document can be incorporated into the statement of work or contract. NOTE: Throughout this guide there are highlighted SELECT statements. The requirements office, in coordination with the contracting officer, will complete the selections prior to their incorporation into a contract or statement of work.