25 - List of References.pdf

CONTRACT REFERENCES

Attachment 25

All references contained herein which are not specifically invoked within the PWS are considered to be generally applicable to this Military OneSource requirement. Nothing in these documents, however, supersedes applicable laws and regulations unless a specific exemption has been obtained.

DOCUMENT

NUMBER

DOCUMENT DESCRIPTION

Reference 1

OMB M-10-22 - Guidance for Online Use of Web Measurement and

Customization Technologies -https://obamawhitehouse.archives.gov/sites/default/files/omb/assets/memorand a_2010/m10-22.pdf

Reference 2

DoD Manual 5400.07 - Freedom Of Information Act (FOIA) Program -http://www.esd.whs.mil/Directives/issuances/dodm/

Reference 3

OMB M-05-04 - Policies for Federal Agency Public Websites -https://www.whitehouse.gov/sites/whitehouse.gov/files/omb/memoranda/2005/ m05-04.pdf

Reference 4

DoDI 5400.16p - DoD Privacy Impact Assessment (PIA) Guidance -www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/540016p.pdf

Reference 5

OMB M-10-23 - Guidance for Agency Use of Third-Party Websites and

Applications -https://obamawhitehouse.archives.gov/sites/default/files/omb/assets/memorand a_2010/m10-23.pdf

Reference 6

DoDI 1100.13 - DoD Surveys -www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/110013p.pdf

Reference 7

OMB M-06-15 - Safeguarding Personally Identifiable Information -https://georgewbush-whitehouse.archives.gov/omb/memoranda/fy2006/m-06-

15.pdf

Reference 8

OMB M-A-130 revised - Management of Federal Information Resources -https://obamawhitehouse.archives.gov/sites/default/files/omb/assets/OMB/circu lars/a130/a130revised.pdf

Reference 9

OMB M-06-16 - Protection of Sensitive Agency Information -https://www.whitehouse.gov/sites/whitehouse.gov/files/omb/memoranda/2006/ m06-16.pdf

Reference 10

Appendix A - PWS Technical References

1.1. Department of Defense Directives.

1.1.1. DoDD 8500.01E Information Assurance (IA) ASD(NII)/DoD CIO http://www.dtic.mil/whs/directives/corres/pdf/850001p.pdf

1.1.2. DoDD 8570.01 Information Assurance Training, Certification, and

Workforce Management ASD(NII)/DoD CIO 15 August 2004 http://www.dtic.mil/whs/directives/corres/pdf/857001p.pdf

1.1.3. DoDD 5230.9, Clearance of DoD Information for Public Release www.dtic.mil/whs/directives/corres/pdf/523009p.pdf

1.1.4. DoDD 5230.25 Withholding of Unclassified Technical Data from Public Disclosure http://jitc.fhu.disa.mil/jitc_dri/pdfs/d523025p.pdf

1.1.5. DoDD 5200.2, " DoD Personnel Security Program" April 9, 1999 www.dtic.mil/whs/directives/corres/pdf/520002p.pdf

1.1.6. DoDD 5500.7-R, Joint Ethics Regulation (JER), Change 6 Incorporated, http://www.dtic.mil/whs/directives/corres/html/55007r.htm

1.1.7. DoDD 5400.11-R, "Department of Defense Privacy Program", October 29, 2014;

http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodd/54001 1p.pdf

1.1.8. DoDD O-8530.1, "Computer Network Defense (CND)", January 8, 2001 http://www.dtic.mil/whs/directives/corres/html/853001.htm (will be provided to vendor upon award)

1.1.9. DoDD 6025.18-R, “DoD Health Information Privacy Regulation,” January 24, 2003

1.2. Department of Defense Instructions

1.2.1. DoDI 8500.2 Information Assurance Implementation

http://www.dtic.mil/whs/directives/corres/pdf/850002p.pdf

1.2.2. DoDI 8510. DoD Information Assurance Certification and Accreditation

Process (DIACAP) http://www.dtic.mil/whs/directives/corres/pdf/851001p.pdf http://iase.disa.mil/diacap/

1.2.3. DoDI 8570.01-M Information Assurance Workforce Improvement Program (Incorporating Change 2, April 20, 2010) http://www.dtic.mil/whs/directives/corres/pdf/857001m.pdf

1.2.4. DoDI 5400.7-R DoD Freedom of Information Act Program

http://www.dtic.mil/whs/directives/corres/pdf/540007p.pdf

1.2.5. DoDI 8910.01,“Information Collection and Reporting”, March 6, 2007 http://www.dtic.mil/whs/directives/corres/pdf/891001p.pdf

1.2.6. DoDI 3001.02, May 3, 2010, Personnel Accountability in Conjunction with Natural or Manmade Disasters.

http://www.dtic.mil/whs/directives/corres/pdf/300102p.pdf

1.2.7. DoDI 5400.16 DoD Privacy Impact Assessment (PIA) Guidance http://www.dtic.mil/whs/directives/corres/pdf/540016p.pdf

1.2.8. DoDI 1100.13 Surveys of DoD Personnel

http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/11

0013p.pdf

1.3. OMB Memos and Circulars

1.3.1. OMB M-10-22 Guidance for Online Use of Web Measurement and Customization Technologies http://www.whitehouse.gov/sites/default/files/omb/assets/memoranda_20 10/m10-22.pdf http://www.dtic.mil/whs/directives/corres/pdf/850001p.pdf http://www.dtic.mil/whs/directives/corres/pdf/857001p.pdf file:///C:/Documents%20and%20Settings/AQD%20Guest/Local%20Settings/Temp/Temporary%20Directory%2012%20for%20Attachments%5b1%5d.zip/www.dtic.mil/whs/directives/corres/pdf/523009p.pdf http://jitc.fhu.disa.mil/jitc_dri/pdfs/d523025p.pdf file:///C:/Documents%20and%20Settings/AQD%20Guest/Local%20Settings/Temp/Temporary%20Directory%2012%20for%20Attachments%5b1%5d.zip/www.dtic.mil/whs/directives/corres/pdf/520002p.pdf http://www.dtic.mil/whs/directives/corres/html/853001.htm http://www.dtic.mil/whs/directives/corres/pdf/850002p.pdf http://www.dtic.mil/whs/directives/corres/pdf/851001p.pdf http://iase.disa.mil/diacap/ http://www.dtic.mil/whs/directives/corres/pdf/857001m.pdf http://www.dtic.mil/whs/directives/corres/pdf/540007p.pdf http://www.dtic.mil/whs/directives/corres/pdf/891001p.pdf http://www.dtic.mil/whs/directives/corres/pdf/300102p.pdf http://www.dtic.mil/whs/directives/corres/pdf/540016p.pdf http://www.whitehouse.gov/sites/default/files/omb/assets/memoranda_2010/m10-22.pdf http://www.whitehouse.gov/sites/default/files/omb/assets/memoranda_2010/m10-22.pdf

1.3.2. OMB M-05-04 Policies for Federal Agency Public Websites, December

17, 2004 http://www.whitehouse.gov/sites/default/files/omb/memoranda/fy2005/m0 5-04.pdf

1.3.3. OMB M-10-23 Guidance for Agency Use of Third-Party Websites and Applications, June 25, 2010 http://www.whitehouse.gov/sites/default/files/omb/assets/memoranda_20 10/m10-23.pdf

1.3.4. OMB M-06-15 Safeguarding Personally Identifiable Information, May 22, http://www.whitehouse.gov/sites/default/files/omb/memoranda/fy2006/m- 06-15.pdf

1.3.5. OMB M-06-16 Protection of Sensitive Agency Information http://www.whitehouse.gov/sites/default/files/omb/assets/omb/memorand a/fy2006/m06-16.pdf

1.3.6. OMB Circular A-130, "Managing Federal Information as a Strategic Resource” July 28, 2016 http://www.whitehouse.gov/omb/circulars_a130_a130trans4

1.3.7. FPC 65, Federal Executive Branch Continuity of Operations (COOP) http://www.fema.gov/pdf/library/fpc65_0604.pdf

1.4. Public Law

1.4.1. Public Law 105-277-OCT. 21, 1998 Children's Online Protection Act of http://uscode.house.gov/download/pls/15C91.txt

1.4.2. Public Law 100-235 Computer Security Act of 1987

http://www.nist.gov/cfo/legislation/Public%20Law%20100-235.pdf

1.4.3. Public Law 107-347 E-Government Act of 2002

http://frwebgate.access.gpo.gov/cgi-bin/getdoc.cgi?dbname=107_cong_public_laws&docid=f:publ347.107.pd f

1.4.4. Public Law 104-13-MAY 22, 1995 Paperwork Reduction Act http://archive.sba.gov/advo/laws/pap.pdf

1.4.5. Public Law 105-220, Section 508 of the Rehabilitation Act (29 U.S.C.

794d, as amended by the Workforce Investment Act of 1998 http://www.section508.gov/

1.4.6. Public Law 110-289, Housing and Economic Recovery Act of 2008, July 30, 2008 http://www.gpo.gov/fdsys/pkg/PLAW-110publ289/html/PLAW- 110publ289.htm

1.5. U.S. Code

1.5.1. Section 2224 of title 10, United States Code, "Defense Information

Assurance Program" http://uscode.house.gov/uscode-cgi/fastweb.exe?getdoc+uscview+t09t12+1376+0++

1.5.2. Sections 1423 and 1451 of title 40, United States Code, "Division E of the Clinger-Cohen Act of 1996" http://uscode.house.gov/uscode-cgi/fastweb.exe?getdoc+uscview+t13t16+7319+0++

1.5.3. Section 278g-3 of title 15, United States Code, "Computer Security Act of 1987" http://uscode.house.gov/uscode-cgi/fastweb.exe?getdoc+uscview+t13t16+1100+0++ http://www.whitehouse.gov/sites/default/files/omb/memoranda/fy2005/m05-04.pdf http://www.whitehouse.gov/sites/default/files/omb/memoranda/fy2005/m05-04.pdf http://www.whitehouse.gov/sites/default/files/omb/assets/memoranda_2010/m10-23.pdf http://www.whitehouse.gov/sites/default/files/omb/assets/memoranda_2010/m10-23.pdf http://www.whitehouse.gov/sites/default/files/omb/memoranda/fy2006/m-06-15.pdf http://www.whitehouse.gov/sites/default/files/omb/memoranda/fy2006/m-06-15.pdf http://www.whitehouse.gov/sites/default/files/omb/assets/omb/memoranda/fy2006/m06-16.pdf http://www.whitehouse.gov/sites/default/files/omb/assets/omb/memoranda/fy2006/m06-16.pdf http://www.whitehouse.gov/omb/circulars_a130_a130trans4 http://www.fema.gov/pdf/library/fpc65_0604.pdf http://uscode.house.gov/download/pls/15C91.txt http://www.nist.gov/cfo/legislation/Public%20Law%20100-235.pdf http://frwebgate.access.gpo.gov/cgi-bin/getdoc.cgi?dbname=107_cong_public_laws&docid=f:publ347.107.pdf http://frwebgate.access.gpo.gov/cgi-bin/getdoc.cgi?dbname=107_cong_public_laws&docid=f:publ347.107.pdf http://frwebgate.access.gpo.gov/cgi-bin/getdoc.cgi?dbname=107_cong_public_laws&docid=f:publ347.107.pdf http://archive.sba.gov/advo/laws/pap.pdf http://www.section508.gov/ http://uscode.house.gov/uscode-cgi/fastweb.exe?getdoc+uscview+t09t12+1376+0++ http://uscode.house.gov/uscode-cgi/fastweb.exe?getdoc+uscview+t09t12+1376+0++ http://uscode.house.gov/uscode-cgi/fastweb.exe?getdoc+uscview+t13t16+7319+0++ http://uscode.house.gov/uscode-cgi/fastweb.exe?getdoc+uscview+t13t16+7319+0++ http://uscode.house.gov/uscode-cgi/fastweb.exe?getdoc+uscview+t13t16+1100+0++ http://uscode.house.gov/uscode-cgi/fastweb.exe?getdoc+uscview+t13t16+1100+0++

1.5.4. Section 552 of title 5, United States Code, "Freedom of Information Act" http://uscode.house.gov/uscode-cgi/fastweb.exe?getdoc+uscview+t05t08+26+0++

1.5.5. Section 3101 of Title 44, United States Code, "Records Management by Federal Agencies" http://uscode.house.gov/uscode-cgi/fastweb.exe?getdoc+uscview+t43t44+1828+0++

1.6. DEFENSE INFORMATION SYSTEMS AGENCY STIG GUIDANCE,

http://iase.disa.mil/stigs

1.6.1. DOD DISA Database Security Technical Implementation Guide (STIG)

1.6.2. DoD DISA Application Security And Development Security Technical

Implementation Guide (STIG)

1.6.3. DoD DISA Enclave Security Technical Implementation Guide (STIG)

1.7. OSD

1.7.1. OSD Memo 13798-10 Social Security Numbers (SSN) Exposed on

Public Facing and Open Government Websites http://www.chinfo.navy.mil/socialmedia/OSD_memo_13798-10.pdf

1.7.2. Privacy Policy Example

http://www.defense.gov/landing/privacy.aspx

1.7.3. DoD Privacy Office (Home page)

http://privacy.defense.gov/

1.8 Other links

1.8.1 http://www.coastandards.org/

1.8.2 https://www.urac.org/

1.8.3 https://www.naccrra.org/

1.8.4 https://www.asymca.org/2010/ymca-military-outreach-initiative

Reference 11

Federal Preparedness Circular 65 (FPC 65) -https://www.fema.gov/pdf/about/org/ncp/fcd1.pdf

Reference 12

Database STIG V2R8 - https://iase.disa.mil/stigs/app-security/database/pages/index.aspx

Reference 13

Public Law 105-227 - https://www.congress.gov/105/plaws/publ227/PLAW-

105publ227.pdf

Reference 14

Public Law 100-235 (Computer Security Act of 1988) -https://www.govtrack.us/congress/bills/100/hr145/text

Reference 15

SSNs Exposed on Public Facing and Open Gov Websites -http://dpcld.defense.gov/Portals/49/Documents/Privacy/OSD%2013798-10.pdf

Reference 16

Public Law 107–347 - https://www.gpo.gov/fdsys/pkg/PLAW-

107publ347/pdf/PLAW-107publ347.pdf

Reference 17 Defense Information Assurance Program - Sec 2224 Title 10 -http://uscode.house.gov/uscode-cgi/fastweb.exe?getdoc+uscview+t05t08+26+0++ http://uscode.house.gov/uscode-cgi/fastweb.exe?getdoc+uscview+t05t08+26+0++ http://uscode.house.gov/uscode-cgi/fastweb.exe?getdoc+uscview+t43t44+1828+0++ http://uscode.house.gov/uscode-cgi/fastweb.exe?getdoc+uscview+t43t44+1828+0++ http://iase.disa.mil/stigs http://www.chinfo.navy.mil/socialmedia/OSD_memo_13798-10.pdf http://www.defense.gov/landing/privacy.aspx http://privacy.defense.gov/ http://www.coastandards.org/ https://www.urac.org/ https://www.naccrra.org/ https://www.asymca.org/2010/ymca-military-outreach-initiative https://www.gpo.gov/fdsys/search/pagedetails.action?packageId=USCODE-

2010-title10&granuleId=USCODE-2010-title10-subtitleA-partIV-chap131-sec2224

Reference 18

Clinger Cohen Act of 1996 -http://dodcio.defense.gov/Portals/0/Documents/ciodesrefvolone.pdf

Reference 19

Commerce and Trade - Sec 278g-3 Title 15 - https://codes.findlaw.com/us/title-

15-commerce-and-trade/15-usc-sect-278g-3.html

Reference 20

Records Management - Sec 3101 Title 44 -https://www.gpo.gov/fdsys/granule/USCODE-2008-title44/USCODE-2008-title44-chap31-sec3101/content-detail.html

Reference 21

Health Benefits - Sec 1145 Title 10 -https://www.gpo.gov/fdsys/granule/USCODE-2011-title10/USCODE-2011-title10-subtitleA-partII-chap58-sec1145

Reference 22

DoD - Instruction -www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/850001_2014.pdf

Reference 23

DoDD 8140.01 - Cyberspace Workforce Management -www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodd/814001_2015_do dd.pdf

Reference 24

DoDD 5230.09 - Clearance of DoD Information for Public Release -www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodd/523009p.pdf

Reference 25

DoDD 5230.25 - Withholding of Unclassified Technical Data From Public

Disclosure - http://quicksearch.dla.mil/qsPdfs/DoD5230_25ph.pdf

Reference 26

DoD 5500.07R - Join Ethics Regulation -www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodm/550007r.pdf

Reference 27

DoD 5400.11R - DoD Privacy Program -www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodd/540011p.pdf

Reference 28

DoD 6025.18R - Health Information Privacy Regulation -http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodm/602518r.pd f

Reference 29 DoD - Instruction (Information Assurance) -https://fas.org/irp/doddir/dod/d8500_2.pdf

Reference 30

DoD Health Information Privacy Regulation -http://www.esd.whs.mil/Directives/issuances/dodm/

Reference 31 Reserved

Reference 32

Risk Management Framework (RMF) - https://iase.disa.mil/policy-guidance/Lists/Department%20of%20Defense%20DoD%20Level%20Policy%

20References/DispForm.aspx?ID=65

Reference 33

Information Assurance Workforce Improvement Program -https://fas.org/irp/doddir/dod/m8570_01.pdf

Reference 34

DoDD 5200.2 - Procedures For The DoD Personnel Security Program (PSP) -http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodm/520002_do dm_2017.pdf

Reference 35

DoDI 8910.01 - Information Collection and Reporting -http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/891001p.pdf

Reference 36

DoDI 1344.07 - Personal Commercial Solicitation on DoD Installations -http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/134407p.pdf

Reference 37

Personnel Accountability in Conjunction With Natural or Manmade Disasters -http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/300102p.pdf

Reference 38

Counseling Services for DoD Military, Guard and Reserve, Certain Affiliated

Personnel, and Their Family Members -http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/649006p.pdf

Reference 39

Family Advocacy Program (FAP) -http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/640001p.pdf

?ver=2018-03-16-080152-873

Reference 40

Domestic Abuse Involving DoD Military and Certain Affiliated Personnel -http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/640006p.pdf

Reference 41

Sexual Assault Prevention and Response (SAPR) Program -http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodd/649501p.pd f

Reference 42

Sexual Assault Prevention and Response (SAPR) Program Procedures -http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/649502p.pdf

Reference 43

Military Family Readiness -http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/134222p.pdf

Reference 44

Background Checks on Individuals in DoD Child Care Services Programs -http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/140205p.pdf

Reference 45

DTM-17-004 - DoD Expeditionary Civilian Workforce -https://www.cpms.osd.mil/expeditionary/pdf/DTM-17-004.pdf

Reference 46

10-248 Air Force Instruction - http://www.au.af.mil/au/awc/awcgate/af/afi10-

248.pdf

Reference 47

34-266 Air Force Instruction - http://static.e-publishing.af.mil/production/1/af_a1/publication/afi34-266/afi34-266.pdf

Reference 48

36-2905 Air Force Instruction - http://static.e-publishing.af.mil/production/1/af_a1/publication/afi36-2905/afi36-2905.pdf

Reference 49

Army Physical Fitness Training PFT 21-20 - http://www.apft-standards.com/files/fm21_20.pdf

Reference 50

Marine Corps Physical Fitness Program -http://www.marines.mil/Portals/59/Publications/MCO%206100.13%20W_CH

%201.pdf

Reference 51

Navy Physical Readiness Program -http://www.jag.navy.mil/distrib/instructions/OPNAV6110.1JPRTprogram.pdf

Reference 52

National Defense Authorization Act - https://www.gpo.gov/fdsys/pkg/CRPT-

110hrpt477/pdf/CRPT-110hrpt477.pdf

Reference 53

DoDI 1315.19 - The Exceptional Family Member Program (EFMP) -http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/131519p.pdf

Reference 54

DoDI 1010.04 - Problematic Substance Use by DoD Personnel -http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/dodi/101004p.pdf

Reference 55 AI 108 - OSD and Joint Staff (JS) Freedom of Information Act (FOIA)

Program -http://www.esd.whs.mil/Portals/54/Documents/DD/issuances/ai/a108p.pdf