search

ustaxcourt / case-management-rfq

RFQ for Agile Software Development Services
https://ustaxcourt.gov/
16 stars 12 forks source link

Emailed question about ATO #46

Closed JessicaMarine closed 5 years ago

JessicaMarine commented 5 years ago

Regarding “The Contractor will not be responsible for hosting of the system or obtaining an Authority to Operate (ATO).”

Who would be responsible for this? How will they gather information to support the ATO?

JessicaMarine commented 5 years ago

The Court will be responsible for hosting the System and its own ATO. The Court will also determine which security controls are required and when they have been satisfied. The Court expects that the security controls will be provided to the Contractor as either Acceptance Criteria or separate User Stories. The Contractor is expected to use best practices for security in delivering code.