The successful contractor must comply with Department of Education cyber, privacy, and personnel (i.e., contractor vetting) security policy requirements:

• Security and Privacy Requirements for IT Procurements (February 22, 2022) PDF (525K)
• Contractor Vetting Security Requirements (January 19, 2021) PDF (142K)

The documents referenced within "Security and Privacy Requirements for IT Procurements" are accessible below:

• AC - Access Control Standard
• AT - Awareness and Training Standard
• AU - Audit and Accountability Standard
• CA - Security Assessment and Authorization Standard
• CM - Configuration Management Standard
• CP - Contingency Planning Standard
• IA - Identification and Authentication Standard
• IR - Incident Response Standard
• MA - Maintenance Standard
• MP - Media Protection Standard
• PE - Physical and Environmental Protection Standard
• PL - Planning Standard
• PM - Program Management Standard
• PS - Personnel Security Standard
• PT - PII Processing and Transparency Standard
• RA - Risk Assessment Standard
• SA - System and Services Acquisition
• SC - System and Communications Protection Standard
• SI - System Information and Integrity Standard
• SR - Supply Chain Risk Management

Click here for Legacy documentation