GSA proposed to clarify the definitions of âenrolleeâ and âimpacted individualâ and eliminate data breach analysis services from SIN 520-20 to address overlap with âbreach forensic servicesâ on the Risk Assessment and Mitigation Services SIN.
The agency said such changes intend to address âambiguity resulting in higher pricing exceeding commercial rates offered for same or similar services,â according to the document.
Other proposed changes to SIN 520-20 include clarifications on system security plan requirements and more examples of additional services under the second section.
The planned changes are scheduled to take effect Aug. 29, according to the report.