Solutions
By IndustryCloud ServicesFinancial ServicesGovernmentHealthcare
By RoleCIO and CISODevSecOpsIT OperationsSecurity
By NeedCybersecurity TransformationCybersecurity HygieneData Security and PrivacyFedRAMPGovernance, Risk, and ComplianceICAMIncident ResponsePenetration TestingSecurity AutomationSOC-as-a-ServiceVulnerability Management
Services
AssessAssessmentsCyber Hygiene Health CheckCMMC and C3PAOFramework and PolicyFedRAMP and 3PAOThird-Party Risk Management
ProtectCyber HuntingRed TeamingPenetration TestingPhishing and Social EngineeringVulnerability ManagementZero Trust
RespondIncident ResponseSOCaaSManaged SOC
TransformGRC AdvisorySecurity ArchitectureSOC Optimization
AutomateATO AutomationBaseline ModernizationSecurity Automation
Products
MPGSOC
Speed up time to detect threats with MPG's SOC-as-a-Service
Ansible Counselor
Accelerate your automation journey
Lockdown Enterprise
STIG and CIS compliance automation using Ansible
Policy and Procedure Templates for FedRAMP
Guided support to help you achieve FedRAMP authorization
Resources
BlogAutomationPenetration TestingRisk ManagementVulnerability ManagementFedRAMPNews
Datasheets and Whitepapers
Downloadables about our Solutions, Products, and Solutions
Company
About MPGCareersCustomersTeamPartneringContract VehiclesCommunityContact UsCapability Statement
Contact Us
Back to Legal Terms

Appendix 2 - Policy and Procedure Templates for FedRAMP

Updated:
21 Apr
2020
Download as a Word Document
Download as s PDF

APPENDIX 2

FedRAMP Readiness Accelerator Subscription Services

The FedRAMP Readiness Acceleration Subscription Services shall be governed by the terms of the Agreement which includes this Appendix 2, and each Order entered into by Customer and MindPoint Group with respect to the FedRAMP Readiness Acceleration Subscription Services.

1.     OVERVIEW.

MindPoint Group’s FedRAMP Readiness Acceleration Software Subscription consists of MindPoint Group’s proprietary FedRAMP document template content (collectively the “Readiness Accelerator Templates”).

2.     DEFINED TERMS.

2.1.   The following capitalized terms used in this Appendix shall have the respective meanings set forth below. Other capitalized terms used but not defined in this Appendix 2 have the meanings ascribed to them in the Agreement.

2.2.   “Readiness Accelerator Templates” or “Template” or “Templates” means the collection of Microsoft Word and/or Microsoft Excel document files containing MindPoint Group’s proprietary responses and documentation.

2.3.   “FedRAMP” means the Federal Risk and Authorization Management Program (FedRAMP), which is a US government-wide program that provides a standardized approach to security assessment, authorization, and continuous monitoring for cloud products and services.

2.4.   "FedRAMP PMO” means FedRAMP Program Management Office.

2.5.   “FedRAMP Readiness Accelerator Subscription Support Services” means the FedRAMP Readiness Accelerator Subscription and related support services made available by MindPoint Group, as more fully described in Section 1.

2.6.   “FedRAMP Readiness Accelerator Subscription Term” means the subscription term during which Customer shall have access to the FedRAMP Readiness Accelerator Subscription Services, as described in an Order Form and subject to the terms of the Agreement with respect to renewals.

2.7.   “Update” means each new revision of the Readiness Accelerator Templates that includes minor improvements in functionality and an accumulation of Corrections. MindPoint Group will use reasonable efforts to announce the release of a new revision.

3.     LICENSE GRANT.

Subject to Customer’s compliance with the terms and conditions of the Agreement (including this Appendix 2), during the Readiness Acceleration Subscription Term (and subject to Customer’s payment of the applicable Fees), MindPoint Group hereby grants to Customer a non-exclusive, non-transferable, non-sublicensable, non-assignable limited right to download and use the Readiness Assessment Templates in Microsoft Word and/or Microsoft Excel format exclusively for internal business purposes for Customer’s and its approved Affiliates’ own use.

4.     AGREEMENTS.

4.1.   Restrictions. Customer shall not: (i) sublicense, sell, resell, transfer, assign, distribute, share, lease, rent, loan or outsource the Readiness Accelerator Templates or use or offer the Readiness Accelerator Templates on a timeshare or service bureau basis, or use or offer the Readiness Accelerator Templates as an application service provider or managed service provider offering except as provided for in the Order; (ii) copy the Readiness Accelerator Templates onto any public or distributed network, except for an internal and secure cloud computing environment; (iii) modify, adapt, translate or create derivative works, nor allow any of those actions to occur, based on all or any part of the Readiness Accelerator Templates; or (iv) modify any proprietary rights notices which appear in the Readiness Accelerator Templates or components thereof.

4.2.   Customer Responsibilities. Customer covenants and agrees that it shall: (i) perform those tasks and assume those responsibilities required of it by MindPoint Group in order for MindPoint Group to deliver the Readiness Accelerator Templates; (ii) comply with all Applicable Laws when using the Readiness Accelerator Templates; and (iii) ensure that only Authorized Users use the Readiness Accelerator Templates and only as intended and in accordance with the terms of the Agreement and any provided Documentation. In addition to the foregoing, during the Subscription Term, Customer shall:

4.2.1.        Appoint and inform MindPoint Group of one contact person who will serve as the primary point of contact in the use of the Readiness Accelerator Templates.

4.2.2.       Comply with the operational instructions provided by MindPoint Group.

4.2.3.       Promptly notify MindPoint Group following the discovery of any issue with the Readiness Accelerator Templates, and upon MindPoint Group’s request, submit a listing of output and other data that MindPoint Group may reasonably require in order to reproduce the problem and the conditions under which the issue occurred.

4.2.4.       Maintain records regarding the occurrence of i issues and if possible, verify that the issues are reproducible.

5.     NO GUARANTEE OF FEDRAMP AUTHORIZATION.

Customer recognizes and understands that use of the Readiness Accelerator Templates or FedRAMP Readiness Support Services provide a guarantee of achieving ultimate FedRAMP authorization and approval.

6.     AUTHORIZED USERS.

Customer may permit its Authorized Users to access and use the Readiness Accelerator Templates subject to each Authorized User’s acceptance of and compliance with all applicable terms and conditions of the Agreement, including Section 1.7 of the General Terms and Conditions.

7.     TERM OF FEDRAMP READINESS ACCELERATOR SUBSCRIPTION SERVICES.

Readiness Accelerator Subscription Terms shall initially be valid for the dates identified in the associated Order and in accordance with any related payment schedule. Thereafter, the Readiness Accelerator Subscription Term must be manually renewed.

8.     UPDATES.

The release status of the Readiness Accelerator Templates is defined by version. During the term of the Readiness Accelerator Subscription and subject to Customer’s payment of all applicable Fees, MindPoint Group will provide Customer with Updates to the Readiness Accelerator Templates, if and when available.

Customer is fully responsible for integrating all Updates into their working copies of the Templates, and MindPoint Group makes no representations or warranties with respect to the Readiness Accelerator Templates (or non-performance thereof) due to Customer’s failure to integrate any such Updates and. Additionally, Customer acknowledges and agrees that, from time-to-time, portions of, or functionality included in, the Readiness Accelerator Templates may be added to, modified, or deleted by MindPoint Group and that the Readiness Accelerator Templates may change over time. MindPoint Group may (but is not required to) expand or enhance the Readiness Accelerator Templates by providing additional features in the general course of MindPoint Group’s standard development model and offering road map. If any features or functionality are at the request or timing of Customer (or Customer requests any consulting or other services) there may be additional cost and the parties shall enter into an Order therefor.

9.     SUPPORT SERVICES.

Subject to the terms of this Section 9, MindPoint Group support staff will be available during MindPoint Group’s standard business hours Monday through Friday, excluding holidays, to provide FedRAMP Readiness Accelerator Services. Staff will be available through the MindPoint Group online portal or email initially and may determine to schedule a screen share/troubleshooting live session based on evaluation of the question or issue presented.

Readiness Accelerator Services are provided hereunder for single issues or questions. Should Customer request support services to address multiple issues or questions, or if frequency of support ticket engagement shows a greater need for support or consultation, MindPoint Group reserves the right at any time to refer ongoing issues to a services engagement determination. In such case, the parties will be required to enter into a separate Order for Professional Services covering Customer’s need for more intensive support services. For the avoidance of doubt, MindPoint Group reserves the sole right to determine whether a customer request may be deemed as supported or non-supported (outside of the support scope). Questions outside of the support scope may be referred to a Professional Services engagement.

Subject to all of the foregoing, during the term of the Readiness Accelerator Subscription and subject to Customer’s payment of all applicable Fees, MindPoint Group will use commercially reasonable efforts to provide Customer with the following support services with respect to the Readiness Accelerator Templates (the “Readiness Accelerator Subscription Support Service”):

9.1  For Standard Subscriptions:

Basic advice and instructions on how to use the Readiness Accelerator Templates.

  • Supported question example: “Can I change the names of the templates” or “I can’t open a template.”
  • Non-supported question example: “How do I format a privacy overlay document?”

Basic question and answer related to template contents and Customer inputs. 

  • Supported question example: “I don’t understand what this input is supposed to be” or “Is this the right content to include in this section.”
  • Non-supported question example: “Can you read what I put into the template to make sure the FedRAMP PMO will accept it?”

‍

9.2.      For Premium Subscriptions:

Includes “Standard Subscriptions” support as described in Section 9.1.

Basic advice on tool selection to meet FedRAMP PMO requirements.

  • Supported question example: “What are some appropriate tools we could use to meet this control?”
  • Non-supported question example: “Can you help me configure my tool?”

Basic control implementation advice and technical guidance and advice.

  • Supported question example: “What additional detail should we include in this network diagram?”
  • Non-supported question example: “Can you review my diagrams and content to ensure it will be accepted by the FedRAMP PMO?”
  • Occasional Updates to Readiness Accelerator Templates.

Readiness Accelerator Subscription Support Service requests may be submitted via email to support@mindpointgroup.com. MindPoint Group shall use commercially reasonable efforts to respond to all issues and questions within eight (8) business hours.

MindPoint Group reserves the right to alter the Readiness Accelerator Support Services, at any time in its sole discretion, provided MindPoint Group agrees that in no event shall such alterations result in materially diminished obligations for MindPoint Group with respect to the Readiness Accelerator Support Services or materially diminish Customer’s rights with respect to the Readiness Accelerator Support Services. MindPoint Group shall use commercially reasonable efforts to provide thirty (30) days prior written notice (delivered electronically or otherwise) of any material changes to the Readiness Accelerator Support Services.

All Readiness Accelerator Support Services shall be provided in English only.

Out of Scope

Issues and questions that are specific to Customer’s operating environment or relate to the operation of customizations, or training and implementation needs are not included in the Readiness Accelerator Subscription but may be purchased for an additional Fee as part of MindPoint Group’s Professional Services. Without limiting the foregoing, Customer acknowledges and agrees that MindPoint Group may require the payment of additional Fees if Customer’s use or need for Readiness Accelerator Support Services exceeds the levels provided by MindPoint Group via its support services included in the Order Form.

Readiness Accelerator Subscription support described herein do not include support for the (i) correction of problems caused by unauthorized modification of Readiness Accelerator Templates by Customer or any third party; (ii) issues arising as a result of Microsoft Word or Microsoft Excel software bugs or errors; (iii) export of the Readiness Accelerator Templates into a different file format other than what was provided by MindPoint Group; or (iv) other issues that are not solely and specifically related to the Readiness Accelerator Subscription.

Ready to talk all things cybersecurity?

Contact Us

Dynamic Cybersecurity Consulting for Evolving Threats

  • YouTube Icon White
Solutions
  • Government
  • Healthcare
  • Financial Services
  • CISO and CIOs
  • DevSecOps
  • Penetration Testing
  • Security Automation
  • View All
Services
  • Assess
  • Protect
  • Respond
  • Transform
  • Automate
  • View All
Products
  • Ansible Counselor
  • FedRAMP Policy and
    Procedure Templates
  • Lockdown Remediate
Company
  • About
  • Careers
  • Capability Statement
  • Blog
  • Our Team
  • Privacy Statement
  • EEO Statement
© 2023 MindPoint Group
By clicking “Accept All Cookies”, you agree to the storing of cookies on your device to enhance site navigation, analyze site usage, and assist in our marketing efforts. View our Privacy Policy for more information.
PreferencesDenyAccept
Privacy Preference Center
When you visit websites, they may store or retrieve data in your browser. This storage is often necessary for the basic functionality of the website. The storage may be used for marketing, analytics, and personalization of the site, such as storing your preferences. Privacy is important to us, so you have the option of disabling certain types of storage that may not be necessary for the basic functioning of the website. Blocking categories may impact your experience on the website.
Reject all cookiesAllow all cookies
Manage Consent Preferences by Category
Essential
Always Active
These items are required to enable basic website functionality.
Marketing
These items are used to deliver advertising that is more relevant to you and your interests. They may also be used to limit the number of times you see an advertisement and measure the effectiveness of advertising campaigns. Advertising networks usually place them with the website operator’s permission.
Personalization
These items allow the website to remember choices you make (such as your user name, language, or the region you are in) and provide enhanced, more personal features. For example, a website may provide you with local weather reports or traffic news by storing data about your current location.
Analytics
These items help the website operator understand how its website performs, how visitors interact with the site, and whether there may be technical issues. This storage type usually doesn’t collect information that identifies a visitor.
Confirm my preferences and close