Attachment C - Applicable Documents

Attachment C

80TECH27QA003

Applicable Documents
* Federal Information Security Management Act of 2002 (44 U.S.C. 3541 - 3549) * Homeland Security Presidential Directive (HSPD)-12: Policy for a Common Identification Standard for Federal Employees and Contractors
* Americans with Disabilities Act - Section 508 (29 U.S.C 794d) * NPD 2800.1, Managing Information Technology
* NPR 2800.2, Information and Communication Technology Accessibility * NPR 2841.1, Identity, Credential, and Access Management * NPD 1382.17, NASA Privacy Policy
* NPD 2810.1, NASA Information Security Policy
* NPD 1420.1, NASA Forms Management
* NPD 1440.6, NASA Records Management
* NPD 1490.1, NASA Printing, Duplicating, and Copying Management * NPR 1382.1, NASA Privacy Procedural Requirements
* NPR 1441.1, NASA Records Management Program Requirements * NPD 2540.1, Acceptable Use of Government Office Property Including Information Technology
* NPD 2830.1, NASA Enterprise Architecture
* NPR 1040.1, NASA Continuity of Operations (COOP) Planning Procedural Requirements * NPR 2810.1, Security of Information and Information Systems * NPR 2810.7, Controlled Unclassified Information
* NPR 2830.1, NASA Enterprise Architecture Procedures
* NPR 7120.7, NASA Information Technology and Institutional Infrastructure Program and Project Management Requirements
* The following handbooks relevant to the development, authorization, and maintenance of NASA information systems. (Current versions as posted on https://cset.nasa.gov/ascs/cspdhandbooks/) i. ITS-HBK-AASTEP0.v1.0.0 Step 0: Prepare Policy
ii. ITS-HBK-AASTEP1.v1.0.0 Step 1: Categorize Policy

Attachment C

80TECH27QA003

iii. ITS-HBK-AASTEP2.v1.0.0 Step 2: Select Policy
iv. ITS-HBK-AASTEP3.v1.0.0 Step 3: Implement Policy
v. ITS-HBK-AASTEP4.v1.0.0 Step 4: Assess Policy
vi. ITS-HBK-AASTEP5.v1.0.0 Step 5: Authorize Policy
vii. ITS-HBK-AASTEP6.v1.0.0 Step 6: Monitor Policy
Note: Cybersecurity Handbooks, and standards that apply to specific tasks or requirements are accessible internal only at https://cset.nasa.gov/ascs/cspd-handbooks/ and must be obtained from the Contracting Officer.