Attachment_D_Draft_Key_Programs_Milestones_Deliverables.xlsx
XLSX spreadsheet 163 KB Posted
- Attached to
- Defense Enterprise Office Solution (DEOS)
- Solicitation number
- 47QTCA-19-Q-0001
- Issued by
-
GSA Federal Acquisition Service
About this file
Attachment D Draft Key Programs Milestones Deliverables
View the file
Other files
| File | Type | Posted |
|---|---|---|
| DEOS_Question_and_Answer_IL6.docx | DOCX document | |
| Attachment_C_Draft_Performance_Work_Statement.docx | DOCX document | |
| Attachment_E_Draft_Price_Discount.xlsx | XLSX spreadsheet | |
| Attachment_B_Draft_DEOS_Statement_of_Objectives.docx | DOCX document | |
| Attachment_F_Draft_Quote_Sheet.xlsx | XLSX spreadsheet | |
| Draft_RFQ_Instructions_to_Quoters.pdf | ||
| Attachment_A_Draft_Functional_Requirements_Document.docx | DOCX document |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Instructions
| SOO/PWS Task # Reference | Milestone ID | Milestone Acronym | Milestone Name | Type | Responsibility | Deliverable / Activity Name | Format | Due Date | |
| (Notional) | Distribution | Classification | Frequency |
| Terms | Definition |
| Limited Deployment Decision Notice | Authorizes the contractor to start onboarding users to the DEOS service. |
| IOC Declaration Notice | IOC will be declared when the DEOS service has been migrated to the initial customer base part of the first NIPR task order execution; the vendor has executed all proposal, design, integration, test & evaluation and deployment milestones up to IOC6; the DEOS COR and PM have accepted all milestones deliverables and activities up to milestone IOC6; and the DEOS service has operated without critical or high incidents for an agreed-to period of 30 consecutive calendar days after completion of milestone IOC6. |
| Full Deployment Decision Notice | Authorizes the contractor to move on to the next phase of the contract and start enabling additional integration points. |
| FOC Declaration Notice | FOC will be declared when the DEOS service has been migrated to all customers part of the first NIPR task order execution; the vendor has executed all proposal, design, integration, test & evaluation and deployment milestones up to milestone FOC2; the DEOS COR and PM have accepted all milestones deliverables and activities up to milestone FOC2; and the DEOS service has operated without critical or high incidents for an agreed-to period of 30 consecutive calendar days after completion of Milestone FOC2. |
Insert the reference # associated with the SOO/PWS.
Insert a unique Milestone ID.
Insert the major milestone Acronym associated with the milestone title (e.g., PDR) Insert the major milestone Name associated with the activities or deliverable (e.g., Preliminary Design Review Insert the type of action (i.e. notice, activity, deliverable , etc.).
Insert the corresponding responsibility category based on the definition outlined below:
B (*) - 50% Government responsibility and 50% contractor responsibility
C (**) - 100% Contractor responsibility
G (***) - 100% Government responsibility
(†) - These artifacts are built upon the packages submitted as part of the vendor's DoD PA Insert the Deliverable/Activities Title/Name (e.g., Testing Report, Cybersecurity Assessment, etc.).
Insert the format that will be used to develop the required deliverable, report, assessment, etc.
Insert the due date/duration in which the activities will occur or the initial deliverable will be provided (e.g., 30 days after PDR, After Task Order execution, etc.).
Insert Distribution Category/Statements based on the DoDI 5230.24 classifications:
Distribution A - Public Release Distribution B - U.S. Govt. Only Distribution C - U.S. Govt & Contractors Distribution D - DoD & US DoD Contractors Distribution E - DoD only Distribution F - Further dissemination only as directed by controlling office
Insert the Deliverable classification in according with DoD procedures for identification marking found in DoDM 5200.01 Vol 4 Insert the frequency in which the deliverable/activities will be performed, provided, or updated (e.g., One time Annually, as required, etc.).
Key Milstones, Act, Deliv.
| SOO/PWS Task # Reference | Milestone ID | Milestone Acronym | Milestone Name | Type | Responsibility | Deliverable / Activity Name | Format | Due Date | ||||
| (Notional) | Distribution | Classification | Frequency | |||||||||
| 4.1, 4.2, 4.3 | DM1 | PDR | Preliminary Design Review | Deliverable | B | Architecture, DoDAF Artifacts/Diagrams (AV, OV, SV, StdV, CV) * | Government Determined Format | 30 days after Task Order Execution | Distribution D | CUI | As Needed | |
| 4.1, 4.2, 4.3 | DM1 | PDR | Preliminary Design Review | Deliverable | C | System Design Document ** | Government Determined Format | 30 days after Task Order Execution | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | DM1 | PDR | Preliminary Design Review | Deliverable | C | Interfaces, Ports & Protocols Baseline ** | Contractor Determined Format | 30 days after Task Order Execution | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | DM1 | PDR | Preliminary Design Review | Deliverable | B | Service Support Functions and Integration Plan * | Contractor Determined / Government Approved Format | 30 days after Task Order Execution | Distribution D | CUI | One Time; updated as required | |
| 4.3 | DM1 | PDR | Preliminary Design Review | Deliverable | B | D-DIL Architecture/ Integration Plan * | Government Determined Format | 30 days after Task Order Execution | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | DM1 | PDR | Preliminary Design Review | Deliverable | B | Performance Monitoring Strategy * | Contractor Determined / Government Approved Format | 30 days after Task Order Execution | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | DM1 | PDR | Preliminary Design Review | Deliverable | B | Security Architecture Analysis * | Contractor Determined / Government Approved Format | 30 days after Task Order Execution | Distribution D | |||
| Distribution F | CUI | One Time; updated as required | ||||||||||
| 4.1, 4.2, 4.3 | DM1 | PDR | Preliminary Design Review | Deliverable | B | Communication Plan * | Contractor Determined / Government Approved Format | 30 days after Task Order Execution | Distribution D | |||
| Distribution F | CUI | One Time; updated as required | ||||||||||
| 4.1, 4.2, 4.3, 4.8 | DM1 | PDR | Preliminary Design Review | Deliverable | B | Migration Schedule * | Contractor Determined Format | 30 days after Task Order Execution | Distribution D | CUI | One Time; updated as required | |
| 4.5 | DM1 | PDR | Preliminary Design Review | Deliverable | B | Licensing & Subscription Structure * | Contractor Determined Format | 30 days after Task Order Execution | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | DM1 | PDR | Preliminary Design Review | Activity | B | Conduct PDR * | Contractor Determined Format | 30 days after Task Order Execution | Distribution D | CUI | One Time; updated as required | |
| 4.4 | DM2 | TENANCY | Tenancy Review | Deliverable | C | Tenancy Execution Plan ** | ||||||
| (Based on submitted Tenancy Plan during proposal submission) | Contractor Determined Format | 30 days after Acceptance of DM1 | Distribution D | CUI | One Time; updated as required | |||||||
| 4.1, 4.2, 4.3 | DM2 | TENANCY | Tenancy Review | Deliverable | C | Service Management Plan ** |
(To Address: Access Management, Event Management, Incident Management, Request Fulfillment, Storefront Integration, Service Desk Support Network Operations (NetOps) Service Desk Integration (i.e., GSD and/or Mission Partner)
| OSS/JMN and Out of Band (OOB) management) | Contractor Determined / Government Approved Format | 30 days after Acceptance of DM1 | Distribution D | CUI | One Time; updated as required | |||||||
| 4.11 | MGMT | MGMT | Management | Deliverable | C | Contractor Project Management Plan (CPMP) ** | Contractor Determined Format | 30 days after Acceptance of DM2 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | DM3 | PRR | Production Readiness Review | Deliverable | B | Change Management Plan * | Contractor Determined / Government Approved Format | 30 days after Acceptance of DM2 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | DM3 | PRR | Production Readiness Review | Deliverable | B | Incident Response Plan and Procedures * | Contractor Determined / Government Approved Format | 30 days after Acceptance of DM2 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | DM3 | PRR | Production Readiness Review | Deliverable | B | Service Desk Strategy * | Contractor Determined Format | 30 days after Acceptance of DM2 | Distribution D | CUI | One Time; updated as required | |
| 4.7 | DM4 | PRR | Production Readiness Review | Deliverable | B | Core Capability Data Readiness Plan ** | Contractor Determined Format | Draft 45 Calendar Days after TO Execution | Distribution D | CUI | One Time, Updated |
monthly as required
4.7 DM5 PRR Production Readiness Review Deliverable B Core Capability Data Readiness ** Contractor Determined Format Draft 45 Calendar Days after TO Execution Distribution D CUI One Time, Updated monthly as required
4.7 DM6 PRR Production Readiness Review Deliverable B Review Checklist ** Contractor Determined Format Draft 45 Calendar Days after TO Execution Distribution D CUI One Time, Updated monthly as required
| 4.1, 4.2, 4.3 | DM4 | CDR | Critical Design Review | Deliverable | C | Provide Document Updates for DM1, DM2 and DM3 ** | Government Determined Format | 30 days after Acceptance of DM3 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | DM4 | CDR | Critical Design Review | Activity | B | Conduct CDR * | Government Determined Format | 30 days after Acceptance of DM3 | Distribution D | CUI | One Time; updated as required | |
| 4.9 | DM5 | TRAINING | Training | Deliverable | B | Training Strategy/Plan * | Contractor Determined / Government Approved Format | 15 days after Acceptance of DM4 | Distribution D | CUI | One Time; updated as required | |
| 4.9 | DM5 | TRAINING | Training | Deliverable | B | End User Fact Sheets/Manuals * | Government Determined Format | 15 days after Acceptance of DM4 | Distribution D | |||
| Distribution F | CUI | One Time; updated as required | ||||||||||
| 4.1, 4.2, 4.3 | DM5 | TRAINING | Training | Deliverable | B | System Administrator Configuration Guides for NIPR, SIPR, and D-DIL Environments* | Contractor Determined / Government Approved Format | 15 days after Acceptance of DM4 | Distribution D | |||
| Distribution F | CUI | One Time; updated as required | ||||||||||
| 4.9 | DM6 | TRAINING | Training | Activity | B | Training for System Administrator for NIPR, SIPR, and D-DIL Environments* | Contractor Determined / Government Approved Format | 15 days after Acceptance of DM4 | Distribution D | |||
| Distribution F | CUI | As Needed | ||||||||||
| 4.9 | DM5 | TRAINING | Training | Deliverable | B | Training Requirements Definition * | Contractor Determined Format | 15 days after Acceptance of DM4 | Distribution D | CUI | One Time; updated as required | |
| 4.9 | DM5 | TRAINING | Training | Deliverable | B | Training Material * | Contractor Determined / Government Approved Format | 15 days after Acceptance of DM4 | Distribution D | CUI | One Time; updated as required | |
| 4.9 | DM5 | TRAINING | Training | Deliverable | B | Training Feedback Forms * | Contractor Determined / Government Approved Format | 15 days after Acceptance of DM4 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | CIM1 | ATC | Authority to Connect | Deliverable | B | Impact Assessment Report * | Government Determined Format | 30 days after Acceptance of DM4 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | CIM1 | ATC | Authority to Connect | Deliverable | B | Implementation Status Report * | Contractor Determined Format | 30 days after Acceptance of DM4 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | CIM1 | ATC | Authority to Connect | Deliverable | B | Implemented Cybersecurity Controls Checklist * | Contractor Determined Format | 30 days after Acceptance of DM4 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | CIM1 | ATC | Authority to Connect | Deliverable | B | Cybersecurity Assessment Report * | Government Determined Format | 30 days after Acceptance of DM4 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | CIM1 | ATC | Authority to Connect | Deliverable | B | Selected Security Control Assessment * | Government Determined Format | 30 days after Acceptance of DM4 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | CIM1 | ATC | Authority to Connect | Deliverable | B | Issue Resolution/Remediation Report * | Contractor Determined / Government Approved Format | 30 days after Acceptance of DM4 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | CIM1 | ATC | Authority to Connect | Deliverable | B | Risk Acceptance Recommendation * | Contractor Determined Format | 30 days after Acceptance of DM4 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | CIM1 | ATC | Authority to Connect | Activity | C | Risk Assessment ** | Government Determined Format | 30 days after Acceptance of DM4 | Distribution D | CUI | As Needed | |
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | C | Identify DNS Names (FQDNs) and structure and notional record types ** | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | B | Determine process to add URLs * | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | G | Request and Obtain IP Addresses from the NIC (For DoD IPs) *** | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | C | Request and Obtain IP Addresses from the CSP (For CSP IPs) ** | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | C | Configure IP Addresses in CSP Routers ** | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | G | Configure IP Addresses in DISA Routers *** | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | C | Configure Secure NAT (If needed) ** | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | B | Configure TTL and other parameters * | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | B | Configure Domain in CSP Portal * | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | B | Configure DNS Whitelist (Vendor's URLs) * | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | B | Configure DNS Resource Records * | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | B | Configure DNS Failover * | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | B | Configure external/internal DNS; Ensure auto discover is working * | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | B | Review external DNS records and SSL certificates * | ||||||
| (T&E Activity) | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||||||||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | B | Connectivity Test * | ||||||
| (T&E Activity) | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||||||||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | B | Test SNAT Translation (If needed) * | ||||||
| (T&E Activity) | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||||||||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | B | Test DNS Queries * | ||||||
| (T&E Activity) | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||||||||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | B | Test FQDN reachability * | ||||||
| (T&E Activity) | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||||||||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | B | Test DNS Routing issues, sink holing, reverse proxy * | ||||||
| (T&E Activity) | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||||||||
| 4.1, 4.2, 4.3 | CIM2 | HOSTING | DNS, Network, Transport, Hosting (FRD section 7.3) | Activity | C | Final Facility Clearance granted from DSS to host IL6 ** | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM3 | PA | Provisional Authorization | Activity | C | Contractor provides FedRAMP PA to DISA for Validation ** | 30 days after Acceptance of CIM1 | Distribution D | ||||
| Distribution F | CUI | As Needed | ||||||||||
| 4.1, 4.2, 4.3 | CIM3 | PA | Provisional Authorization | Activity | C | Coordinate Technical Kick Off meeting with DISA SCA and CSP Representatives; include site visits if applicable ** | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM3 | PA | Provisional Authorization | Activity | C | Validate deltas between CSP inherited controls and required inherited controls ** | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM3 | PA | Provisional Authorization | Activity | C | Validate Implemented inheritable controls deltas ** | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM3 | PA | Provisional Authorization | Activity | G | Approved SAR is submitted to AO office*** | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM3 | PA | Provisional Authorization | Activity | G | Prepare POA&M addressing residual risk *** | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM3 | PA | Provisional Authorization | Activity | C | Submit eMASS Package ** | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM3 | PA | Provisional Authorization | Activity | G | Submit Provisional Authorization (PA) recommendation *** | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM3 | PA | Provisional Authorization | Activity | G | Provisional Authorization Package Review *** | 30 days after Acceptance of CIM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM3 | PA | Provisional Authorization | Activity | C | DSAWG Review and Recommendation for receiving Provisional Authorization** | 30 days after Acceptance of CIM1 | Distribution D | ||||
| Distribution F | CUI | As Needed | ||||||||||
| 4.1, 4.2, 4.3 | CIM4 | IATT | Interim Authority to Test (IATT) | Deliverable | C | Continuous monitoring strategy/plan **/† | Government Determined Format | 30 days after Acceptance of CIM3 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | CIM4 | IATT | Interim Authority to Test (IATT) | Deliverable | C | System Security Plan (SSP) ** | Government Determined Format | 30 days after Acceptance of CIM3 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | CIM4 | IATT | Interim Authority to Test (IATT) | Activity | C | Initiate RMF Security Plan /Update System Security Plan (SSP) ** | 30 days after Acceptance of CIM3 | Distribution D | CUI | Yearly; as required | ||
| 4.1, 4.2, 4.3 | CIM4 | IATT | Interim Authority to Test (IATT) | Activity | C | Conduct Site/ ST&E Visit if applicable ** | ||||||
| (T&E Activity) | 30 days after Acceptance of CIM3 | Distribution D | CUI | One Time; updated as required | ||||||||
| 4.1, 4.2, 4.3 | CIM4 | IATT | Interim Authority to Test (IATT) | Activity | C | Vendor ISSM prepares POA&M addressing residual risk findings ** | 30 days after Acceptance of CIM3 | Distribution D | CUI | Yearly; as required | ||
| 4.1, 4.2, 4.3 | CIM4 | IATT | Interim Authority to Test (IATT) | Activity | G | Complete self-assessment and IA controls, System Implementation Plan (SIP), RMF Implementation Plan (DIP), RMF Scorecard, System POA&Ms *** | 30 days after Acceptance of CIM3 | Distribution D | CUI | Yearly; as required | ||
| 4.1, 4.2, 4.3 | CIM5 | IDAM | Identity & Access Management Integration (FRD Section 7.2) | Deliverable | C | Directory Replication Plan ** | Contractor Determined Format | 45 days after Acceptance of CIM3 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | CIM5 | IDAM | Identity & Access Management Integration (FRD Section 7.2) | Deliverable | B | OCSP/CRL Integration Plan * | Contractor Determined Format | 45 days after Acceptance of CIM3 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | CIM5 | IDAM | Identity & Access Management Integration (FRD Section 7.2) | Activity | C | Remove duplicate attributes from Government Directories ** | 45 days after Acceptance of CIM3 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM5 | IDAM | Identity & Access Management Integration (FRD Section 7.2) | Activity | C | Update blank / invalid attributes with valid attributes ** | 45 days after Acceptance of CIM3 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM5 | IDAM | Identity & Access Management Integration (FRD Section 7.2) | Activity | C | Remove invalid / questionable characters in attributes ** | 45 days after Acceptance of CIM3 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM5 | IDAM | Identity & Access Management Integration (FRD Section 7.2) | Activity | C | Identify Directory attributes to be replicated ** | 45 days after Acceptance of CIM3 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM5 | IDAM | Identity & Access Management Integration (FRD Section 7.2) | Activity | B | Generate Server Side Certificates * | 45 days after Acceptance of CIM3 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM5 | IDAM | Identity & Access Management Integration (FRD Section 7.2) | Activity | B | Identify MILDEP POCs (Local Registration Authority) for CSR submission * | 45 days after Acceptance of CIM3 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM5 | IDAM | Identity & Access Management Integration (FRD Section 7.2) | Activity | B | Facilitate DoD PKI Certificate Generation/Signing * | 45 days after Acceptance of CIM3 | Distribution D | CUI | Yearly; as required | ||
| 4.1, 4.2, 4.3 | CIM5 | IDAM | Identity & Access Management Integration (FRD Section 7.2) | Activity | G | Test Identity assertion redirect to DISA EDS as the IdP *** | ||||||
| (T&E Activity) | 45 days after Acceptance of CIM3 | Distribution D | CUI | As Needed | ||||||||
| 4.1, 4.2, 4.3 | CIM5 | IDAM | Identity & Access Management Integration (FRD Section 7.2) | Activity | G | Test Identity claims access provided by CSP to user based on information provided by DISA EDS as the IdP *** | ||||||
| (T&E Activity) | 45 days after Acceptance of CIM3 | Distribution D | CUI | As Needed | ||||||||
| 4.1, 4.2, 4.3 | CIM5 | IDAM | Identity & Access Management Integration (FRD Section 7.2) | Activity | G | Test client certificate verification/revocation status based on queries to the DoD RCVS OCSP responders *** | ||||||
| (T&E Activity) | 45 days after Acceptance of CIM3 | Distribution D | CUI | As Needed | ||||||||
| 4.1, 4.2, 4.3 | CIM6 | DODIN-CS | DoDIN Protection / Cybersecurity Assessment (FRD Sections 3, 7.4) | Deliverable | B | Provisioning / Authentication Assessment Documentation */† | Government Determined Format | 15 days after Acceptance of CIM5 | Distribution D | CUI | Yearly; as required | |
| 4.1, 4.2, 4.3 | CIM6 | DODIN-CS | DoDIN Protection / Cybersecurity Assessment (FRD Sections 3, 7.4) | Deliverable | B | Privacy Impact Assessment */† | Government Determined Format | 15 days after Acceptance of CIM5 | Distribution D | CUI | Yearly; as required | |
| 4.1, 4.2, 4.3 | CIM6 | DODIN-CS | DoDIN Protection / Cybersecurity Assessment (FRD Sections 3, 7.4) | Deliverable | B | Privacy Threshold Analysis */† | Government Determined Format | 15 days after Acceptance of CIM5 | Distribution D | CUI | Yearly; as required | |
| 4.1, 4.2, 4.3 | CIM6 | DODIN-CS | DoDIN Protection / Cybersecurity Assessment (FRD Sections 3, 7.4) | Deliverable | B | Residual Risk Statement */† | Government Determined Format | 15 days after Acceptance of CIM5 | Distribution D | CUI | Yearly; as required | |
| 4.1, 4.2, 4.3 | CIM6 | DODIN-CS | DoDIN Protection / Cybersecurity Assessment (FRD Sections 3, 7.4) | Deliverable | B | Vulnerability Assessment */† | Government Determined Format | 15 days after Acceptance of CIM5 | Distribution D | CUI | Monthly; as required | |
| 4.1, 4.2, 4.3 | CIM6 | DODIN-CS | DoDIN Protection / Cybersecurity Assessment (FRD Sections 3, 7.4) | Deliverable | B | Business Impact Analysis * | Government Determined Format | 15 days after Acceptance of CIM5 | Distribution D | CUI | Monthly; as required | |
| 4.1, 4.2, 4.3 | CIM6 | DODIN-CS | DoDIN Protection / Cybersecurity Assessment (FRD Sections 3, 7.4) | Deliverable | B | Contingency Plan * | Contractor Determined / Government Approved Format | 15 days after Acceptance of CIM5 | Distribution D | CUI | Monthly; as required | |
| 4.1, 4.2, 4.3 | CIM6 | DODIN-CS | DoDIN Protection / Cybersecurity Assessment (FRD Sections 3, 7.4) | Activity | B | Initial Threat Assessment * | 15 days after Acceptance of CIM5 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | CIM6 | DODIN-CS | DoDIN Protection / Cybersecurity Assessment (FRD Sections 3, 7.4) | Activity | C | Cooperative Vulnerability Penetration Assessment (CVPA) ** | ||||||
| (T&E Activity) | 15 days after Acceptance of CIM5 | Distribution D | CUI | As Needed | ||||||||
| 4.1, 4.2, 4.3 | CIM6 | DODIN-CS | DoDIN Protection / Cybersecurity Assessment (FRD Sections 3, 7.4) | Activity | G | Adversarial Assessment (AA) *** | ||||||
| (T&E Activity) | 15 days after Acceptance of CIM5 | Distribution D | CUI | As Needed | ||||||||
| 4.1, 4.2, 4.3 | CIM6 | DODIN-CS | DoDIN Protection / Cybersecurity Assessment (FRD Sections 3, 7.4) | Activity | G | Persistent Cyber Operations Evaluation *** | ||||||
| (T&E Activity) | 15 days after Acceptance of CIM5 | Distribution D | CUI | As Needed | ||||||||
| 4.1, 4.2, 4.3 | TEM1 | TEP | Test & Evaluation Planning | Deliverable | B | Continuous Monitoring Test Plan */† | Contractor Determined / Government Approved Format | 30 days after Acceptance of CIM6 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | TEM1 | TEP | Test & Evaluation Planning | Activity | C | Configure / Deliver Test Environment(s) ** | 30 days after Acceptance of CIM6 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | TEM1 | TEP | Test & Evaluation Planning | Activity | B | Test Environment Assessment * | 30 days after Acceptance of CIM6 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | TEM2 | CS-TE | Cybersecurity T&E Activities / CSP Interoperability & Integration Testing | Deliverable | B | Cybersecurity Requirements Definition * | Government Determined Format | 30 days after Acceptance of TEM1 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | TEM2 | CS-TE | Cybersecurity T&E Activities / CSP Interoperability & Integration Testing | Deliverable | C | Incident Response Plan and Procedures ** | Contractor Determined / Government Approved Format | 30 days after Acceptance of TEM1 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | TEM2 | CS-TE | Cybersecurity T&E Activities / CSP Interoperability & Integration Testing | Activity | B | Cybersecurity Interoperability & Integration Test * | 30 days after Acceptance of TEM1 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | TEM3 | IAT | Integration & Acceptance Testing (I/AT) | Deliverable + Activity | B | I/AT for FRD Section 2 (Core System Requirements) * | Government Determined Format | 60 days after Acceptance of TEM1 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | TEM3 | IAT | Integration & Acceptance Testing (I/AT) | Deliverable + Activity | B | I/AT for FRD Section 4 (DoDIN Protection) * | Government Determined Format | 60 days after Acceptance of TEM1 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | TEM3 | IAT | Integration & Acceptance Testing (I/AT) | Deliverable + Activity | B | I/AT for FRD Section 7 (Core Service Support Functions & Integration Points) * | Government Determined Format | 60 days after Acceptance of TEM1 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | TEM3 | IAT | Integration & Acceptance Testing (I/AT) | Deliverable + Activity | B | I/AT for FRD Section 9 (Performance Objectives and Environmental Metrics) * | Government Determined Format | 60 days after Acceptance of TEM1 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | TEM4 | IOT&E | Initial Operational Test & Evaluation | Deliverable | C | Recommended Production Configuration Changes ** | Contractor Determined Format | 15 days after Acceptance of TEM3 | Distribution D | |||
| Distribution F | CUI | One Time; updated as required | ||||||||||
| Govt Only | TEM4 | IOT&E | Initial Operational Test & Evaluation | Deliverable | G | IOT&E Report (based on Government conducted IOT&E) *** | Contractor Determined Format | 15 days after Acceptance of TEM3 | Distribution D | |||
| Distribution F | CUI | One Time; updated as required | ||||||||||
| Govt Only | TEM4 | IOT&E | Initial Operational Test & Evaluation | Activity | G | T&E and JITC Operational Evaluation *** | 15 days after Acceptance of TEM3 | Distribution D | ||||
| Distribution F | CUI | As Needed | ||||||||||
| 4.1, 4.2, 4.3 | TEM4 | IOT&E | Initial Operational Test & Evaluation | Activity | C | Cooperative Vulnerability Penetration Assessment (CVPA) ** | 15 days after Acceptance of TEM3 | Distribution D | CUI | As Needed | ||
| Govt Only | TEM4 | IOT&E | Initial Operational Test & Evaluation | Activity | G | Adversarial Assessment (AA) *** | 15 days after Acceptance of TEM3 | Distribution D | CUI | As Needed | ||
| Govt Only | TEM4 | IOT&E | Initial Operational Test & Evaluation | Activity | G | Persistent Cyber Operations Evaluation *** | 15 days after Acceptance of TEM3 | Distribution D | CUI | As Needed | ||
| Govt Only | TEM4 | IOT&E | Initial Operational Test & Evaluation | Activity | G | IOT&E *** | 15 days after Acceptance of TEM3 | Distribution D | ||||
| Distribution F | CUI | As Needed | ||||||||||
| Govt Only | TEM5 | FOT&E | Follow-on Operational Test & Evaluation | Deliverable | G | FOT&E Report (based on Government conducted FOT&E) *** | Government Determined Format | 45 days after Acceptance of TEM4 | Distribution D | CUI | One Time; updated as required | |
| Govt Only | TEM5 | FOT&E | Follow-on Operational Test & Evaluation | Activity | G | T&E and JITC Operational Evaluation *** | 45 days after Acceptance of TEM4 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | TEM5 | FOT&E | Follow-on Operational Test & Evaluation | Activity | C | Cooperative Vulnerability Penetration Assessment (CVPA) ** | 45 days after Acceptance of TEM4 | Distribution D | CUI | As Needed | ||
| Govt Only | TEM5 | FOT&E | Follow-on Operational Test & Evaluation | Activity | G | Adversarial Assessment (AA) *** | 45 days after Acceptance of TEM4 | Distribution D | CUI | As Needed | ||
| Govt Only | TEM5 | FOT&E | Follow-on Operational Test & Evaluation | Activity | G | Persistent Cyber Operations Evaluation *** | 45 days after Acceptance of TEM4 | Distribution D | CUI | As Needed | ||
| Govt Only | TEM5 | FOT&E | Follow-on Operational Test & Evaluation | Activity | G | FOT&E *** | 45 days after Acceptance of TEM4 | Distribution D | CUI | As Needed | ||
| Govt Only | IOC1 | ATO | Authority to Operate (ATO) | Deliverable | G | Security Assessment Report (SAR) *** | Government Determined Format | 10 days after Acceptance of TEM5 | Distribution D | CUI | One Time; updated as required | |
| Govt Only | IOC1 | ATO | Authority to Operate (ATO) | Deliverable | G | Final POA&M *** | Government Determined Format | 10 days after Acceptance of TEM5 | Distribution D | CUI | One Time; updated as required | |
| Govt Only | IOC1 | ATO | Authority to Operate (ATO) | Deliverable | G | Authorization Decision Document *** | Government Determined Format | 10 days after Acceptance of TEM5 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | IOC1 | ATO | Authority to Operate (ATO) | Activity | B | DSAWG Review and Recommendation for receiving Enterprise Reciprocity * | 10 days after Acceptance of TEM5 | Distribution D | CUI | As Needed | ||
| 4.1, 4.2, 4.3 | IOC2 | LUD | Limited User Deployment | Deliverable | B | Limited Fielding Implementation Plan * | Government Determined Format | 45 days after Acceptance of IOC1 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | IOC2 | LUD | Limited User Deployment | Deliverable | B | System & Configuration Definition (i.e. – “As Built”) * | Contractor Determined / Government Approved Format | 45 days after Acceptance of IOC1 | Distribution D | CUI | Monthly; as required | |
| 4.1, 4.2, 4.3 | IOC2 | LUD | Limited User Deployment | Deliverable | B | Defect Tracking List * | Contractor Determined Format | 45 days after Acceptance of IOC1 | Distribution D | CUI | Weekly; as required | |
| Govt Only | IOC2 | LUD | Limited User Deployment | Activity | G | LD User Test *** | ||||||
| (T&E Activity) | Government Determined Format | 45 days after Acceptance of IOC1 | Distribution D | CUI | As Needed | |||||||
| Govt Only | IOC3 | LDD-CC | Core Capabilities Deployment (LDD Decision) | Notice | G | Limited Deployment Decision Notice *** | Government Determined Format | 90 days after Acceptance of IOC2 | Distribution D | CUI | One Time | |
| Govt Only | IOC4 | IOC | Initial Operational Capability | Notice | G | IOC Declaration Notice *** | Government Determined Format | 5 days after Acceptance of IOC3 | Distribution D | CUI | One Time | |
| Govt Only | FOC1 | FDD | Full Deployment Decision | Notice | G | Full Deployment Decision Notice *** | Government Determined Format | 60 days after Acceptance of IOC4 | Distribution D | CUI | One Time | |
| 4.6 | FOC2 | LDD-INT | Optional Integration Points Deployment (LDD Decision) | Deliverable | C | Additional Support Services Integration Plan ** | Contractor Determined / Government Approved Format | 20 days after Acceptance of FOC1 | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | FOC2 | LDD-INT | Optional Integration Points Deployment (LDD Decision) | Deliverable + Activity | B | I/AT for remaining FRD Sections * | ||||||
| (As needed and as executed by individual customers) | Government Determined Format | 20 days after Acceptance of FOC1 | Distribution D | CUI | One Time; updated as required | |||||||
| Govt Only | FOC3 | FOC | Final Operational Capability (DISA Core Capabilities + Integration Points) | Notice | G | FOC Declaration Notice *** | Government Determined Format | 60 days after Acceptance of FOC2 | Distribution D | CUI | One Time | |
| 4.1, 4.2, 4.3 | SM1 | SUS | Sustainment | Deliverable | B | Evergreen Strategy * | Government Determined Format | Ongoing after FOC Declaration until the end of the contract | Distribution D | |||
| Distribution F | CUI | One Time; updated as required | ||||||||||
| 4.1, 4.2, 4.3 | SM1 | SUS | Sustainment | Deliverable | C | Change Management Documentation (including Risk Analysis) ** | Government Determined Format | Ongoing after FOC Declaration until the end of the contract | Distribution D | CUI | One Time; updated as required | |
| 4.1, 4.2, 4.3 | SM1 | SUS | Sustainment | Deliverable | B | Usage Reports (by feature capability) * | Contractor Determined Format | Ongoing after FOC Declaration until the end of the contract | Distribution D | |||
| Distribution F | CUI | Monthly; as required | ||||||||||
| 4.1, 4.2, 4.3 | SM1 | SUS | Sustainment | Deliverable | B | Incident Reports * | Contractor Determined / Government Approved Format | Ongoing after FOC Declaration until the end of the contract | Distribution D | CUI | Weekly; as required | |
| 4.1, 4.2 | SM1 | SUS | Sustainment | Deliverable | B | FISMA Reporting and Updates */† | Government Determined Format | Ongoing after FOC Declaration until the end of the contract | Distribution D | CUI | Yearly; as required | |
| 4.1, 4.2 | SM1 | SUS | Sustainment | Deliverable | B | FEDRAMP Reporting and Updates */† | Government Determined Format | Ongoing after FOC Declaration until the end of the contract | Distribution D | CUI | Yearly; as required | |
| 4.11 | MGMT | MGMT | Management | Deliverable | C | Work Breakdown Schedule (WBS) ** | Contractor Determined Format | Monthly, on 5th workday after TO execution | Distribution D | CUI | Monthly, as required | |
| 4.11 | MGMT | MGMT | Management | Deliverable | B | Integrated Master Schedule (IMS) * | Government Determined Format | 30 Calendar Days after TO Execution | Distribution D | |||
| Distribution F | CUI | Monthly, as required | ||||||||||
| 4.11 | MGMT | MGMT | Management | Deliverable | C | Task Order Status and Progress Report ** | Contractor Determined Format | Monthly | Distribution D | |||
| Distribution F | CUI | Monthly, as required | ||||||||||
| 4.11 | MGMT | MGMT | Management | Deliverable | C | Subcontractor Management Plan ** | Contractor Determined Format | 30 Calendar Days after Contract Award | Distribution D | CUI | One Time; Updated |
annually as required
| 4.11 | MGMT | MGMT | Management | Deliverable | C | Kick-Off Meeting ** | Contractor Determined Format | For each Task Order, or unless otherwise specified in the Task Order. | Distribution D | |||
| Distribution F | CUI | As required based on Task Order execution | ||||||||||
| 4.11 | MGMT | MGMT | Management | Deliverable | C | Quarterly Program Reviews ** | Contractor Determined Format | Annually listing all personnel under each Task Order. | Distribution D | |||
| Distribution F | CUI | Quarterly | ||||||||||
| 4.11 | MGMT | MGMT | Management | Deliverable | C | Personnel Manpower Report ** | Contractor Determined Format | Quarterly; unless otherwise specified by the Procuring Contracting Officer or Contracting Officer Representative. | Distribution D | CUI | Annually, as required | |
| 4.11 | MGMT | MGMT | Management | Deliverable | C | Contract Status Report ** | Contractor Determined Format | Within five business days after conclusion of the meetings/conferences | Distribution D | CUI | Quarterly, as requierd | |
| 4.11 | MGMT | MGMT | Management | Deliverable | C | Post Award Task Order Meetings/Conferences ** | Contractor Determined Format | 30 Calendar Days after TO Execution | Distribution D | CUI | As required | |
| 4.4 | DM2 | TENANCY | Tenancy Review | Deliverable | B | Multiple/Split Domain Management Approach * | Contractor Determined Format | 30 Calendar Days after PDR** | Distribution D | CUI | One Time; updated as required | |
| 4.4 | DM2 | TENANCY | Tenancy Review | Deliverable | C | Briefing Slides ** | Government Determined Format | As required | Distribution D | CUI | As required | |
| 4.5 | LIC | LICENSES | Subscription and Licenses | Deliverable | B | Software License Management Plan * | Contractor Determined Format | 30 Calendar Days after TO Execution | Distribution D | CUI | One Time; Updated annually as required |
4.5 LIC LICENSES Subscription and Licenses Deliverable C Licensing & Subscription Structure ** Contractor Determined Format 30 Calendar Days after TO Execution Distribution D CUI One Time; Updated annually as required
| 4.5 | LIC | LICENSES | Subscription and Licenses | Deliverable | C | Software License Reports ** | Contractor Determined / Government Approved Format | 5th workday after TO Execution |
| Distribution D | CUI | Monthly, or as required |
4.5 LIC LICENSES Subscription and Licenses Deliverable C Briefing Slides ** Government Determined Format 30 Calendar Days after TO Execu-tion Distribution D CUI Weekly, as required
| 4.6 | FOC2 | LDD-INT | Optional Integration Points Deployment (LDD Decision) | Deliverable | C | Infrastructure Review Checklist ** | Contractor Determined / Government Approved Format | 20 days after Acceptance of FOC1 | Distribution D | CUI | One Time; updated as required |
| 4.6 | FOC2 | LDD-INT | Optional Integration Points Deployment (LDD Decision) | Deliverable | C | Infrastructure Analysis/Evaluation Report ** | Contractor Determined / Government Approved Format | 20 days after Acceptance of FOC1 | Distribution D | CUI | One Time; updated as required |
| 4.6 | FOC2 | LDD-INT | Optional Integration Points Deployment (LDD Decision) | Deliverable | C | Engineering Artifacts ** | Contractor Determined / Government Approved Format | 20 days after Acceptance of FOC1 | Distribution D | CUI | One Time; updated as required |
| 4.6 | FOC2 | LDD-INT | Optional Integration Points Deployment (LDD Decision) | Deliverable | C | White Papers ** | Contractor Determined / Government Approved Format | 20 days after Acceptance of FOC1 | Distribution D | CUI | As required |
| 4.6 | FOC2 | LDD-INT | Optional Integration Points Deployment (LDD Decision) | Deliverable | C | Architecture, DoDAF Artifacts/Diagrams (AV, OV, SV, StdV, CV) ** | Contractor Determined / Government Approved Format | 20 days after Acceptance of FOC1 | Distribution D | CUI | One Time; updated as required |
| 4.6 | FOC2 | LDD-INT | Optional Integration Points Deployment (LDD Decision) | Deliverable | C | Interfaces, Ports & Protocols Baseline ** | Contractor Determined / Government Approved Format | 20 days after Acceptance of FOC1 | Distribution D | CUI | One Time; updated as required |
| 4.6 | FOC2 | LDD-INT | Optional Integration Points Deployment (LDD Decision) | Deliverable | C | Cybersecurity Monitoriing Strategy ** | Contractor Determined / Government Approved Format | 20 days after Acceptance of FOC1 | Distribution D | CUI | One Time; updated as required |
| 4.6 | FOC2 | LDD-INT | Optional Integration Points Deployment (LDD Decision) | Deliverable | C | Transition/Decommission Plan ** | Contractor Determined / Government Approved Format | Within 5 business days after request | Distribution D | CUI | One Time; updated as required |
| 4.8 | MIGR | MIGR | User and Data Migration | Deliverable | C | Data Migration & Management Plan/Strategy ** | Contractor Determined / Government Approved Format | Within 5 business days after request | Distribution D | CUI | One Time; Updated |
annually as required
4.8 MIGR MIGR User and Data Migration Deliverable C Monthly User Migration Reports ** Contractor Determined / Government Approved Format Within 5 business days after request Distribution D CUI Monthly, as required
4.8 MIGR MIGR User and Data Migration Deliverable C Migration Schedule ** Contractor Determined / Government Approved Format Within 5 business days after request Distribution D CUI Monthly, as required
| 4.10 | ENG | ENG | Engineering Services | Deliverable | C | Engineering Artifacts (e.g., Network/System Diagrams) ** | Contractor Determined Format | Within 10 business days after assignment | Distribution D | CUI | Monthly, as required |
| 4.10 | ENG | ENG | Engineering Services | Deliverable | C | White Papers, Information Papers and Decision ** | Contractor Determined Format | Within 10 business days after assignment | Distribution D | CUI | Monthly, as required |
File details come from the government source that posted it.