Vulnerability As described in, and Monthly Contracting Officer’s and Security in accordance with, Representative (COR), Configuration the FCHS IT Security Government system Scan Report and Privacy owner Requirements document. Continuous As described in, and Monthly Contracting Officer’s Monitoring in accordance with, Representative (COR), Report the FCHS IT Security Government system and Privacy owner, Government Requirements Authorizing Official document. (AO) Independent As described in, and Annually Contracting Officer’s Penetration in accordance with, Representative (COR), Testing and the FCHS IT Security Government system Report and Privacy owner, Government Requirements Authorizing Official document. (AO) Documentation As described in, and 30 calendar days after Contracting Officer’s for Audit in accordance with, written request Representative (COR), Requirements the FCHS IT Security Government system and Privacy owner, Government Requirements Authorizing Official document. (AO) Training As described in, and Annually Contracting Officer’s Compliance in accordance with, Representative (COR), Report the FC IT Security Government system and Privacy owner Requirements document. Security As described in, and Per Incident Contracting Officer Incidents in accordance with, (immediately but not (CO), Contracting the FCHS IT Security more than 2 hours) Representative Officer’s and Privacy (COR), Government Requirements system owner, document. Government Authorizing Official (AO), Contractor Report of all Annually on contract Contracting Officer’s Employee contractor employees award anniversary Representative (COR) Report that have access to date and within 3 DOI Data with status business days upon of required written request
Vulnerability and Security Configuration Scan Report As described in, and in accordance with, the FCHS IT Security and Privacy Requirements document. Monthly Contracting Officer’s Representative (COR), Government system owner Continuous Monitoring Report As described in, and in accordance with, the FCHS IT Security and Privacy Requirements document. Monthly Contracting Officer’s Representative (COR), Government system owner, Government Authorizing Official (AO) Independent Penetration Testing and Report As described in, and in accordance with, the FCHS IT Security and Privacy Requirements document. Annually Contracting Officer’s Representative (COR), Government system owner, Government Authorizing Official (AO) Documentation for Audit Requirements As described in, and in accordance with, the FCHS IT Security and Privacy Requirements document. 30 calendar days after written request Contracting Officer’s Representative (COR), Government system owner, Government Authorizing Official (AO) Training Compliance Report As described in, and in accordance with, the FC IT Security and Privacy Requirements document. Annually Contracting Officer’s Representative (COR), Government system owner Security Incidents As described in, and in accordance with, the FCHS IT Security and Privacy Requirements document. Per Incident (immediately but not more than 2 hours) Contracting Officer (CO), Contracting Officer’s Representative (COR), Government system owner, Government Authorizing Official (AO), Contractor Employee Report Report of all contractor employees that have access to DOI Data with status of required Annually on contract award anniversary date and within 3 business days upon written request Contracting Officer’s Representative (COR)
fchs_it_security_and_privacy_requiements_for_us_doi_1.docx