21R2007_CDRLs_Final.pdf

Adobe Professional 8.0

DD FORM 1423-1, FEB 2001 PREVIOUS EDITION MAY BE USED. Page of Pages

CONTRACT DATA REQUIREMENTS LIST

(1 Data Item)

Form Approved

OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services Directorate (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO.

CLIN 1002, CLIN 2002, CLIN 3002,

CLIN 4002, CLIN 5002

B. EXHIBIT

A

C. CATEGORY:

TDP TM OTHER X

D. SYSTEM/ITEM

Camera Support Services

E. CONTRACT/PR NO.

M67854-21-R-2007

F. CONTRACTOR

1. DATA ITEM

NO.

A001

2. TITLE OF DATA ITEM

Contractor’s Systems Security Plan And Associated Plans Of Action to Implement NIST SP 800-171 on a Contractor's Internal Unclassified Information System

2. SUBTITLE

N/A

4. AUTHORITY (Data Acquisition Document No.)

DI-MGMT-82247

5. CONTRACT REFERENCE

SOW, Section 5.1

6. REQUIRING OFFICE

USMC, MCSC

7. DD 250 REQ

XX

9. DIST STATEMENT

REQUIRED

SEE BLK 16

10. FREQUENCY

As Required

12. DATE OF FIRST SUBMISSION

As Required

14. DISTRIBUTION

a. ADDRESSEE

b. COPIES

8. APP CODE

N/A

11. AS OF DATE

N/A

13. DATE OF SUBSEQUENT

SUBMISSION

Draft Final

Reg Repro

16. REMARKS

Block 5: Contractor shall provide an SSP in accordance with NIST SP 800-171, indicating whether the Contractor has implemented the security requirements, plans to implement the security requirements, or that the requirement is not applicable. Attached to the SSP shall be a populated POA&M with all outstanding findings discovered during the self-audit describing compliance or non-compliance and plan of action(s) of the total list of security controls. This submission shall be upon award, on a quarterly basis or upon request.

Block 7: Inspection/acceptance requirements specified elsewhere in the contract.

Block 9: The Contractor shall consider the contents of the deliverable and include

Controlled Unclassified Information (CUI) markings as appropriate in compliance with

DoDI 5200.48 “Basic” CUI markings. See RFP Attachment 5 for further CUI guidance.

Blocks 10-13: The Contractor shall deliver the initial SSP and POA&M (and appropriate extracts thereof) quarterly, or upon Program Management Offices request. The SSP will be reviewed for acceptance by the Government Program Management Office (PMO). The

PMO shall be granted full access to validate the information in the Contractor's submission on an ad hoc basis without notice or upon replacement or rotation of the Government PM.

Block 14: Notification of delivery shall be made to CWO3 Wade Spradlin, COR. Any further distribution beyond what's listed will be authorized by the Program Management Office

(PMO). Email addresses for Distribution list POCs:

wade.spradlin@usmc.mil lisa.burns@usmc.mil allen.tiedemann@usmc.mil

COR 0 1 0

Note: The Government Procuring Contracting Officer (PCO) does not require the formal deliverable, however the Letter of Transmittal should be sent to the PCO to document delivery notification and compliance with this CDRL. Deliver all copies via electronic media where feasible, otherwise deliver in hard copy.

15. TOTAL 0 0 0

G. PREPARED BY H. DATE I. APPROVED BY J. DATE

17. PRICE GROUP

18. ESTIMATED

TOTAL PRICE

mailto:wade.spradlin@usmc.mil mailto:lisa.burns@usmc.mil mailto:allen.tiedemann@usmc.mil

(1 Data Item)

Form Approved

OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services Directorate (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO.

CLIN 1002, CLIN 2002, CLIN 3002,

CLIN 4002, CLIN 5002

B. EXHIBIT

A

C. CATEGORY:

TDP TM OTHER X

D. SYSTEM/ITEM

Camera Support Services

E. CONTRACT/PR NO.

M67854-21-R-2007

F. CONTRACTOR

1. DATA ITEM

NO.

A002

2. TITLE OF DATA ITEM

Contractor's Record Of Tier 1 Level Suppliers Receiving/Developing Covered Defense Information

DI-SCRE-82258

5. CONTRACT REFERENCE

SOW, Section 5.2

6. REQUIRING OFFICE

USMC, MCSC

7. DD 250 REQ

XX

As Required

12. DATE OF FIRST SUBMISSION

8. APP CODE

N/A

11. AS OF DATE

N/A

Reg Repro

16. REMARKS

Block 5: The Contractor shall submit a list of all its supporting Tier 1 Level Suppliers

Receiving or Developing Covered Defense Information, otherwise known as Controlled

Unclassified Information (CUI). In addition, the Contractor shall provide its plan to track flow down of covered defense information and to assess DFARS Clause 252.204-7012 compliance of known Tier 1 Level suppliers.

Block 7: Letter of Transmittal only

DoDI 5200.48 “Basic” CUI markings. See RFP Attachment 5 for further CUI guidance.

Block 10-13: Initial submission shall be delivered during pre-award, all subsequent submissions, shall be submitted in accordance with IMS and/or upon

Program Management Office (PMO) request.

(PMO). Email addresses for Distribution list POCs:

wade.spradlin@usmc.mil

(1 Data Item)

Form Approved

OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services Directorate (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO.

CLIN 1002, CLIN 2002, CLIN 3002,

CLIN 4002, CLIN 5002

B. EXHIBIT

A

C. CATEGORY:

TDP TM OTHER X

D. SYSTEM/ITEM

Camera Support Services

E. CONTRACT/PR NO.

M67854-21-R-2007

F. CONTRACTOR

1. DATA ITEM

NO.

A003

2. TITLE OF DATA ITEM

Cyber Incident Reporting for a Contractor’s Internal Unclassified Information System

DI-MGMT-XXXXX (see Appendix 1)

5. CONTRACT REFERENCE

SOW, Section 5.3

6. REQUIRING OFFICE

USMC, MCSC

7. DD 250 REQ

XX

As Required

12. DATE OF FIRST SUBMISSION

8. APP CODE

N/A

11. AS OF DATE

Upon Award

Reg Repro

16. REMARKS

Block 4: Formatting should be in accordance with Appendix 1.

Block 5: The Contractor shall report all Cyber Incidents or Compromises related to

Controlled Unclassified Information (CUI) on the contractor’s system/network in accordance to DFARS clause 252.204-7012 to the Damage Assessment Office (DAMO) via the DIB-Net website (http://dibnet.dod.mil) within 72 hours.

Block 7: Inspection/acceptance requirements specified elsewhere in the contract.

Block 9: The Contractor shall consider the contents of the deliverable and include Controlled

Unclassified Information (CUI) markings as appropriate in compliance with DoDI 5200.48

“Basic” CUI markings. See RFP Attachment 5 for further CUI guidance.

Block10-13: In addition to reporting all Cyber Incidents or Compromises as stated above, the

Contractor shall also submit a Cyber Incident Damage Assessment within 72 hours of event in accordance with paragraph (d)(4) of DFARS clause 252.204-7012. All information related to Cyber Incidents or Compromises, as defined in DFARS clause 252.204-7012, shall also be relayed to the Defense Cyber Crime Center [dc3.mil] within 15 calendar days of the event. Upon incident, when feasible, the hardware shall not be powered down, but segregated from the network and any Department of the Navy (DoN) CUI separated from contractor-owned information pending investigation.

(PMO). Email addresses for Distribution list POCs:

wade.spradlin@usmc.mil

(1 Data Item)

Form

OMB

Approved No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services Directorate (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO.

CLIN 1002, CLIN 2002, CLIN 3002,

CLIN 4002, CLIN 5002

B. EXHIBIT

B

C. CATEGORY:

TDP TM OTHER

X

D. SYSTEM/ITEM

Camera Support Services

E. CONTRACT/PR NO.

M67854-21-R-2007

F. CONTRACTOR

1. DATA ITEM NO.

B001

2. TITLE OF DATA ITEM

Contractor's Progress and Status Report

3. SUBTITLE

Contract Status Report

4. AUTHORITY (Data Acquisition Document No.)

DI-MGMT-81928

5. CONTRACT REFERENCE

Section C Paragraph 3.0

6. REQUIRING OFFICE

IRC (PMM 161.4)

7. DD 250 REQ

LT

MTHLY

12. DATE OF FIRST SUBMISSION

30 days after contract award

8. APP CODE

A

11. AS OF DATE

13. DATE OF SUBSEQUENT

SUBMISSION

NLT 10 Days After Government Review

Reg Repro

16. REMARKS

16. REMARKS:

COR 1

Block 4: Delete paragraphs 1, 2.3a(1)(2) and 2.4 through 2.9 of DI-MGMT-81928.

Additionally, reports shall provide information required by PWS paragraphs 3.1.1(e) and

3.1.3.

Contract Status Reports shall be contractor format after Government approval. Reports shall be provided and submitted electronically in Microsoft ® Office Word.

DoDI 5200.48 “Basic” CUI markings. See RFP Attachment for further CUI guidance.

Block 14: Name and electronic address of Contracting Officer Representative will be specified in Task Order.

*Each submission.

15. TOTAL 0 0 1