Common use of IT Security Certification and Accreditation (IT Clause in Contracts

IT Security Certification and Accreditation (IT. SC&A) – due within 3 months after contract award. The Contractor shall submit written proof to the Contracting Officer that an IT-SC&A was performed for applicable information systems – see paragraph (a) of this clause. The Contractor shall perform the IT-SC&A in accordance with the HHS Chief Information Security Officer's Certification and Accreditation Checklist; NIST SP 800-37, Guide for the Security, Certification and Accreditation of Federal Information Systems; and NIST 800-53, Recommended Security Controls for Federal Information Systems. An authorized senior management official shall sign the draft IT-SC&A and provided it to the Contracting Officer for review, comment, and acceptance.

IT Security Certification and Accreditation (IT. SC&A) – - due within 3 months after contract award. The Contractor shall submit written proof to the Contracting Officer that an IT-SC&A was performed for applicable information systems – - see paragraph (a) of this clause. The Contractor shall perform the IT-SC&A in accordance with the HHS Chief Information Security Officer's Certification and Accreditation Checklist; NIST SP 800-37, Guide for the Security, Certification and Accreditation of Federal Information Systems; and NIST 800-53, Recommended Security Controls for Federal Information Systems. An authorized senior management official shall sign the draft IT-SC&A and provided it to the Contracting Officer for review, comment, and acceptance.

IT Security Certification and Accreditation (IT. SC&A) – due SC&A)—due within 3 months after contract award. The Contractor shall submit written proof to the Contracting Officer that an IT-–SC&A was performed for applicable information systems – systems— see paragraph (a) of this clause. The Contractor shall perform the IT-–SC&A in accordance with the HHS Chief Information Security Officer's Certification and Accreditation Checklist; NIST SP 800-37800–37, Guide for the Security, Security Certification and Accreditation of Federal Information Systems; and NIST 800-53SP 800–53, Recommended Security Controls for Federal Information Systems. An authorized senior management official shall sign the draft IT-–SC&A and provided provide it to the Contracting Officer for review, comment, and acceptance.