Implement the security controls and describe how the controls are employed within the information system and its environment of operation. Assess the security controls using appropriate assessment procedures to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system. Authorize information system operation on a determination of the risk to organizational operations and assets, individuals, other organizations, and the Nation resulting from the operation of the information system and the decision that this risk is acceptable. Monitor the security controls in the information system on an ongoing basis including assessing control effectiveness, documenting changes to the system or its environment of operation, conducting security impact analyses of the associated changes, and reporting the security state of the system to designated organizational officials. The Contractor will develop a Risk Management Framework Plan that includes processes and procedures to accomplish all of the above steps except Authorize. The Authorize step will be completed for each Task Order by the Ordering Activity. The Risk Management Framework Plan will be a post-award contract deliverable (see Section F.6). C.2.1.5 Climate Change Risk and Mitigation GSA has a leading role in ensuring that the Federal Government is better prepared to cope with the consequences of climate change that present many serious for government operations. These risks include damage to facilities and equipment and disruptions to communications networks. Climate change risk and mitigation shall be considered in the design and operations of services to be provided under this contract. The Contractor shall incorporate climate change adaptation strategies into programs to reduce property, infrastructure, and supply chain vulnerabilities. This includes identifying mission critical facilities, products and services, evaluating business operations and supply chains that may be vulnerable and anticipating needs that may arise from climate change.
Implement the security controls and describe how the controls are employed within the information system and its environment of operation. Assess the security controls using appropriate assessment procedures to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for the system. Authorize information system operation on a determination of the risk to organizational operations and assets, individuals, other organizations, and the Nation resulting from the operation of the information system and the decision that this risk is acceptable. Monitor the security controls in the information system on an ongoing basis including assessing control effectiveness, documenting changes to the system or its environment of operation, conducting security impact analyses of the associated changes, and reporting the security state of the system to designated organizational officials. The Contractor will develop a Risk Management Framework Plan that includes processes and procedures to accomplish all of the above steps except Authorize. The Authorize step will be completed for each Task Order by the Ordering Activity. The Risk Management Framework Plan will be a post-award contract deliverable (see Section F.6). C.2.1.5 Climate Change Risk and Mitigation GSA has a leading role in ensuring that the Federal Government is better prepared to cope with the consequences of climate change that present many serious for government operations. These risks include damage to facilities and equipment and disruptions to communications networks. Climate change risk and mitigation shall be considered in the design and operations of services to be provided under this contract. The Contractor shall incorporate climate change adaptation strategies into programs to reduce property, infrastructure, and supply chain vulnerabilities. This includes identifying mission critical facilities, products and services, evaluating business operations and supply chains that may be vulnerable and anticipating needs that may arise from climate change.
CS3-Contract_Lepton_Section-C.docx