ISSO as a Service

FEMA requires Contractor support in order to satisfy the requirement for Information System Security Officer (ISSO) as a service to support the security requirements for the agency information systems. FEMA requires contractor support to ensure the security measures are maintained on all agency systems. A short term contract will ensure required resources are in place to execute critical cybersecurity activities without having a catastrophic impact to FEMA. The requirements for an Information System Security Officer (ISSO) are outlined with the current DHS Sensitive Systems Policy Directive 4300A and DHS National Security Systems Policy Directive 4300B. These individuals serve as the primary point of contact (POC) for all security matters related to their assigned system(s). Responsibilities may include, but not limited to: ? Working with everyone, from users (developers, system administrators, etc.) to the CISO to aid, maintain and continuously improve our security posture; ? Implementing the information systems security program; ? Advising the FEMA Chief Information Security Officer (CISO) on information systems security issues and works closely with the system manager to implement DHS information systems security standards; ? Responding to CIRT (Computer Incident Response Team) alerts ? Reviewing users files and folders ? Ensuring users are trained ? Enforcing access control policy. This acquisition will allow FEMA Programs and Regional Offices to procure ISSO services. Given the foregoing, FEMA requires immediate award of a contract action to procure Information Technology (IT) Professional Services.