OMB: Use of Commercial Independent Risk Analysis Services Blanket Purchase Agreements
Use of Commercial Independent Risk Analysis Services Blanket Purchase Agreements (BPA) (February 4, 2008) (4 pages, PDF)
"The purpose of this memorandum is to alert you to the establishment of government-wide blanket purchase agreements (BPAs) for independent risk analysis services and encourage agency consideration of these vehicles to the maximum extent practicable. In the event of a data breach, the Office of Management and Budget (OMB) Memorandum M-07-16, Safeguarding Against and Responding to the Breach of Personally Identifiable Information, requires agencies to promptly conduct a risk analysis and be prepared to submit a report containing the findings to the Congressional Oversight Committees of the U.S. Senate and House of Representatives, as appropriate."