N/A Contractor’s Attachment H Contractor’s Report of for RMF Services GSA CO Quarterly Report of Sales for (Excel RMF Services Spreadsheet) 3.1.1 FIPS 199 Security NIST In accordance with the FISMA, Federal Information Reference Task TBD by Categorization NIST SP Processing Standard (FIPS) Publication 199 provides NIST site Order Task (Volume I and the standard for categorizing Federal information and for best COR Order II) Federal information systems. System categorization is practices based on the potential impact of a disruption to an information system. The disruption could have a limited (low), serious (moderate), or catastrophic (high) adverse effect on the ability to continue daily operations, safeguard assets, protect individuals, and/or accomplish the organization and Federal mission requirements. 3.1.1 Threat Assessment NIST SP The threat assessment is tailored to the individual Reference Task TBD by organization and its processing environment (e.g., NIST site Order Task computing habits). In general, information on for best COR Order natural threats (e.g., floods, earthquakes, storms) is practices readily available. A threat assessment lists potential threats that are applicable to the IT system being evaluated. 3.1.2 System Definition This document records a description of the system, Reference Task TBD by Document boundaries, type of information, system type, PIA and NIST site Order Task e-Authentication requirements, etc. This is usually for best COR Order done prior to the development of a security plan. practices
N/A Contractor’s Report of Sales for RMF Services Attachment H (Excel Spreadsheet) Contractor’s Report of for RMF Services GSA CO Quarterly 3.1.1 FIPS 199 Security Categorization NIST NIST SP (Volume I and II) In accordance with the FISMA, Federal Information Processing Standard (FIPS) Publication 199 provides the standard for categorizing Federal information and Federal information systems. System categorization is based on the potential impact of a disruption to an information system. The disruption could have a limited (low), serious (moderate), or catastrophic (high) adverse effect on the ability to continue daily operations, safeguard assets, protect individuals, and/or accomplish the organization and Federal mission requirements. Reference NIST site for best practices Task Order COR TBD by Task Order 3.1.1 Threat Assessment NIST SP The threat assessment is tailored to the individual organization and its processing environment (e.g., computing habits). In general, information on natural threats (e.g., floods, earthquakes, storms) is readily available. A threat assessment lists potential threats that are applicable to the IT system being evaluated. Reference NIST site for best practices Task Order COR TBD by Task Order 3.1.2 System Definition Document This document records a description of the system, boundaries, type of information, system type, PIA and e-Authentication requirements, etc. This is usually done prior to the development of a security plan. Reference NIST site for best practices Task Order COR TBD by Task Order
Appendix_C_-_Table_of_Deliverables_and_References.docx