BACKGROUND / CURRENT CONTRACT ENVIRONMENT
As the agency moves forward to meet the security mandates required by federal laws, standards, and guidance, a
more advanced conceptual and continuous approach to security will be required to ensure the safeguarding of
information entrusted to the agency. This “Comprehensive and Robust” Information Security Program can be
accomplished: (1) by continuing to implement and update NIST-compliant policies, and procedures, (2) by
engineering and implementing solutions to new requirements that arise both from advances in technology and from
new Federal and regulations and directives and (3) by maintaining IT system resiliency with effective contingency
planning, evaluation, and testing.