9
Shared Docs
9
Same-Page
9 / 9
Mentions
tractor may not utilize the Cloud system of any CSP unless: I. The Cloud system and CSP have been evaluated and approved by a 31'AO certified under FedRAMP and Contractor has provided the most current Security Assessment Report ("SAR") to the Dal CO for consideration as part of Contractor's overall Sys-
actor to minimize, remedy, and/or investigate the Security Incident, (3) any and all other information as required by the US-CERT Federal In- cident Notification Guidelines, including the functional impact, information impact, impact to recoverability, threat vector, mitigation details, and all available incident detail
ntractor may not utilize the Cloud system of any CSP unless: 1. The Cloud system and CSP have been evaluated and approved by a 3PAO certified under FedRAMP and Contractor has provided the most current Security Assessment Report ("SAR") to the DOJ CO for consideration as part of Contractor's overall Sys-
actor to minimize, remedy, and/or investigate the Security Incident, (3) any and all other information as required by the US-CERT Federal In- cident Notification Guidelines, including the functional impact, information impact, impact to recoverability, threat vector, mitigation details, and all available incident detail
tractor may not utilize the Cloud system of any CSP unless: I. The Cloud system and CSP have been evaluated and approved by a 31'AO certified under FedRAMP and Contractor has provided the most current Security Assessment Report ("SAR") to the Dal CO for consideration as part of Contractor's overall Sys-
actor to minimize, remedy, and/or investigate the Security Incident, (3) any and all other information as required by the US-CERT Federal In- cident Notification Guidelines, including the functional impact, information impact, impact to recoverability, threat vector, mitigation details, and all available incident detail
ntractor may not utilize the Cloud system of any CSP unless: 1. The Cloud system and CSP have been evaluated and approved by a 3PAO certified under FedRAMP and Contractor has provided the most current Security Assessment Report ("SAR") to the DOJ CO for consideration as part of Contractor's overall Sys-
actor to minimize, remedy, and/or investigate the Security Incident, (3) any and all other information as required by the US-CERT Federal In- cident Notification Guidelines, including the functional impact, information impact, impact to recoverability, threat vector, mitigation details, and all available incident detail
ntractor may not utilize the Cloud system of any CSP unless: 1. The Cloud system and CSP have been evaluated and approved by a 3PAO certified under FedRAMP and Contractor has provided the most current Security Assessment Report ("SAR") to the DOJ CO for consideration as part of Contractor's overall Sys-
actor to minimize, remedy, and/or investigate the Security Incident, (3) any and all other information as required by the US-CERT Federal In- cident Notification Guidelines, including the functional impact, information impact, impact to recoverability, threat vector, mitigation details, and all available incident detail
ntractor may not utilize the Cloud system of any CSP unless: 1. The Cloud system and CSP have been evaluated and approved by a 3PAO certified under FedRAMP and Contractor has provided the most current Security Assessment Report ("SAR") to the DOJ CO for consideration as part of Contractor's overall Sys-
actor to minimize, remedy, and/or investigate the Security Incident, (3) any and all other information as required by the US-CERT Federal In- cident Notification Guidelines, including the functional impact, information impact, impact to recoverability, threat vector, mitigation details, and all available incident detail
ntractor may not utilize the Cloud system of any CSP unless: 1. The Cloud system and CSP have been evaluated and approved by a 3PAO certified under FedRAMP and Contractor has provided the most current Security Assessment Report ("SAR") to the DOJ CO for consideration as part of Contractor's overall Sys-
actor to minimize, remedy, and/or investigate the Security Incident, (3) any and all other information as required by the US-CERT Federal In- cident Notification Guidelines, including the functional impact, information impact, impact to recoverability, threat vector, mitigation details, and all available incident detail
ntractor may not utilize the Cloud system of any CSP unless: 1. The Cloud system and CSP have been evaluated and approved by a 3PAO certified under FedRAMP and Contractor has provided the most current Security Assessment Report ("SAR") to the DOJ CO for consideration as part of Contractor's overall Sys-
actor to minimize, remedy, and/or investigate the Security Incident, (3) any and all other information as required by the US-CERT Federal In- cident Notification Guidelines, including the functional impact, information impact, impact to recoverability, threat vector, mitigation details, and all available incident detail
ntractor may not utilize the Cloud system of any CSP unless: 1. The Cloud system and CSP have been evaluated and approved by a 3PAO certified under FedRAMP and Contractor has provided the most current Security Assessment Report ("SAR") to the DOS CO for consideration as part of Contractor's overall Sys-
actor to minimize, remedy, and/or investigate the Security Incident, (3) any and all other information as required by the US-CERT Federal In- cident Notification Guidelines, including the functional impact, information impact, impact to recoverability, threat vector, mitigation details, and all available incident detail
Entities connected to both FedRAMP and Notification Guidelines

Samantha Power
PERSONDepartment Security
ORGANIZATIONthe Contracting Staff/Focal Point
ORGANIZATIONFocal Point
ORGANIZATIONthe Contacting Officer's Representative
ORGANIZATION
the Office of Inspector General
ORGANIZATIONthe Potential Breach
ORGANIZATIONthe Confirmed Breach
ORGANIZATIONBreach
ORGANIZATIONPotential Covered Information System Security Breach
ORGANIZATIONPotential Security Breach
ORGANIZATIONthe Cloud System
ORGANIZATIONInfrastructure as a Service
ORGANIZATIONCloud Computing includes Software
ORGANIZATIONUnpaid Delinquent Tax Liability - Award
ORGANIZATIONFISMA
ORGANIZATION
Homeland Security
ORGANIZATION
the United States Government
ORGANIZATIONProtecting Covered Information System
ORGANIZATIONthe Information System Development Lifecycle
ORGANIZATION