DSCI Contract Information
DSCI Contract Number: HSHQDC-13-D-E2002
Award Date: March 28, 2013
End Date: March 27, 2018
EAGLE II FC3 STATEMENT OF WORK
The Contractor shall provide independent test, validation, verification, and evaluation (IV&V) solutions to ensure that all IT products and services meet DHS standards and are performing to defined design, cost, schedule, and performance specifications/capabilities.
The Contractor shall provide best practices, technologies, tools, and support to quality and operational assessments, integration testing, and system test and evaluation, including security certification and accreditation (C&A), for IT systems.
The Contractor shall also provide IV&V through the monitoring and evaluation of projects through activities such as, but not limited to, assessments, process and procedure audits, project and performance management, and systems analysis and design.
The Contractor shall provide independent test, validation, verification, and evaluation solutions to ensure that all IT products and services meet DHS security standards, and are tested and evaluated in accordance with all federal security requirements such as:
- Defense Information Technology Security Certification & Accreditation Process (DITSCAP)
- National Information Assurance Certification and Accreditation Process (NIACAP)
- National Industrial Security Program Operating Manual (NISPOM)
- Department of Justice (DOJ) Directives
- National Institute of Standards and Technology (NIST)
The Contractor shall also provide IV&V for all aspects of systems security as it relates to Government practices, policies, and procedures, such as risk analysis and the development of recommendations and implementations, as well as plans for new procedures and changes to existing systems.
Areas may include development and implementation, transition and verifications, testing plans for installing new security-related products within the existing client organization technology infrastructure, and mitigation strategies and mitigation activities for residual risks identified for specific organizations or systems.