NNG12CR31C

Attachment L

1

Information Technology (IT) Security Applicable Documents List

JANUARY 2012

NASA Policy Directives (NPD) and NASA Procedural Requirements (NPR)

Document Subject Effective Date

NPR 1382.1 NASA Privacy Procedural Requirements August 10, 2007

NPD 1382.17H NASA Privacy Policy June 24, 2009

NPD 1440.6H NASA Records Management March 24, 2008

NPR 1441.1D NASA Records Retention Schedules (w/Change 5, 

6/29/09) February 24, 2003

NPD 2540.1G

Personal Use of Government Office Equipment 

Including Information Technology June 08, 2010

NPD 2800.1B Managing Information Technology March 21, 2008

NPR 2800.1B Managing Information Technology March 20, 2009

NPD 2810.1D NASA Information Security Policy May 9, 2009

NPR 2810.1A Security of Information Technology w/ Change 1, 

May 19, 2011) May 16, 2006

NPD 2830.1 NASA Enterprise Architecture December 16, 2005

NPR 2830.1 NASA Enterprise Architecture Procedures February 9, 2006

NPR 7120.7

NASA Information Technology and Institutional 

Infrastructure Program and Project Management 

Requirements

November 3, 2008

NPR 2841.1 Identity, Credential, and Access Management January 6, 2011

NASA Interim Directive

Document Subject Effective Date

NM2810-64 NASA Interim Directive: Information Technology 

Security and Efficiency Requirements May 22, 2008
NNG12CR31C

Attachment L

2

NASA Interim Technical Requirements (NITR)

Document Subject Effective Date

NITR 2800_2 Email Services and Email Forwarding September 18, 2009

NITR 2800_1 NASA Information Technology Waiver 

Requirements and Procedures

August 13, 2009

NITR 2830-1B Networks in NASA Internet Protocol (IP) Space or 

NASA Physical Space

February 12, 2009

NITR 1382_2 NASA Rules and Consequences to Safeguarding 

PII, with Change 1, dated 02/04/2008

January 28, 2008

SOPs (ITS-SOP) and Handbooks (ITS-HBK)

Document Subject Effective Date

ITS-HBK-0002 Roles and Responsibilities Crosswalk January 3, 2012

ITS-HBK-0201 Security Assessment and Authorization May 6, 2011

ITS-HBK-0301 Planning May 6, 2011

ITS-HBK-0401 Risk Assessment May 6, 2011

ITS-HBK2810.05-01Systems and Service Acquisition November 21, 2011

ITS-HBK-0601 Awareness and Training May 6, 2011

ITS-HBK-0701 Configuration Management May 6, 2011

ITS-HBK-0801 Contingency Planning May 6, 2011

ITS-HBK-0901 Incident Response and Management May 6, 2011

ITS-HBK-1001 Maintenance May 6, 2011

ITS-HBK-1101 Media Protection May 6, 2011

ITS-HBK-1201 Physical and Environmental Protection May 6, 2011

ITS-HBK-1301 Personnel Security May 6, 2011
NNG12CR31C

Attachment L

3

SOPs (ITS-SOP) and Handbooks (ITS-HBK)

Document Subject Effective Date

ITS-HBK-1401 System and Information Integrity May 6, 2011

ITS-HBK-1501 Access Control December 21, 2011

ITS-HBK-1502 Access Control: Elevated Privileges (EP) January 3, 2012

ITS-HBK-1601 Audit and Accountability May 6, 2011

ITS-HBK-1701 Identification and Authentication May 6, 2011

ITS-HBK-1801 System and Communications Protection May 6, 2011

ITS-HBK 0205 Security Assessment and Authorization: External 

Information Systems 

November 8, 2010

ITS-HBK 0206 Security Assessment and Authorization: Extending 

and Information Systems Authorization to Operate 

Process and Templates 

November 10, 2010

ITS-HB 0001A Format and Procedures for an IT Security 

Handbook

March 29, 2011

ITS-HBK-1502 Access Control: Elevated Privileges (EP) November 8, 2010

ITS-HBK 0207 Security Assessment and Authorization: 

Information System Security Plan Numbering 

Schema

November 10, 2010

ITS-HBK 0204 Security Assessment and Authorization: 

Continuous Monitoring—Annual Security Control 

Assessments

November 8, 2010

ITS-HBK 0302 Planning: Information System Security Plan 

Template, Requirements, Guidance and Examples

February 9, 2011

ITS-HBK 0402 Risk Assessment: Procedures for Information 

System Security Penetration Testing and Rules of 

Engagement

February 11, 2011

ITS-HBK 0202 Security Assessment and Authorization: FIPS 199 

Moderate & High Systems

November 10, 2010
NNG12CR31C

Attachment L

4

SOPs (ITS-SOP) and Handbooks (ITS-HBK)

Document Subject Effective Date

ITS-HBK 0203 Security Assessment and Authorization: FIPS 199 

Low Systems

November 10, 2010

ITS-HB 0035 Digital Media Sanitization September 15, 2008

ITS-HBK 0802 Contingency Planning: Guidance and Templates 

for Plan Development, Maintenance and Test

February 11, 2011

ITS-HBK 0902 NASA Information Security Incident Management August 24, 2011

ITS-HBK 0903 Targeted Collection of Electronic Data August 24, 2011

Standards

Document Subject Effective Date

EA-STD 0001.0 Standard for Integrating Applications into the 

NASA Access Management, Authentication, and 

Authorization Infrastructure

August 1, 2008

EA-SOP 0003.0 Procedures for Submitting a NASA Agency Forest 

(NAF) Deviation Request and Transition Plan

August 1, 2008

EA-SOP 0004.0 Procedures for Submitting an Application 

Integration Deviation Request and Transition Plan

August 1, 2008

NASA-STD-2804-

O

Minimum Interoperability Software Suite August 9, 2011

NASA-STD-2805-

O

Minimum Hardware Configurations August 9, 2011

Within 30 days after contract award, the Contractor shall develop and deliver an IT 

Security Management Plan to the Contracting Officer for approval.