7. DI-MGMT-82191 Cybersecurity Vulnerability Report.pdf
Data Item Description PDF 105 KB Posted
- Solicitation number
- N6426723Q5069
About this file
This document is a Data Item Description providing the required format and content for a Cybersecurity Vulnerability Report to be delivered under a federal contract. The Cybersecurity Vulnerability Report must be in the contractor's format and include unmitigated vulnerabilities by category and age, monthly asset discovery results with changes, and explanations for any assets not fully remediated within timelines. It must also identify the office responsible for resolving issues and any additional resources required, such as purchase needs or personnel shifts.
The related solicitation seeks proposals for Electronic Security System Technical and Network Engineering Support services to be provided to the Department of the Navy Naval Sea Systems Command. Offerors should review submission requirements and timing to understand how the Cybersecurity Vulnerability Report and other data items factor into contract performance reporting and continuous monitoring of security posture.
View the file
Who attaches DI-MGMT-82191
| Agency | Files |
|---|---|
| Department of the Navy Naval Sea Systems Command | 1 |
Other files
Show all 12
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
DATA ITEM DESCRIPTION
Title: CYBERSECURITY VULNERABILITY REPORT
Number: DI-MGMT-82191 Approval Date: 20180322
AMSC Number: N9908 Limitation: N/A
DTIC Applicable: N/A GIDEP Applicable: No
Preparing Activity: SH Project Number: MGMT-2018-021
Applicable Forms: N/A
Use/Relationship: The Cybersecurity Vulnerability Report provides information on the current state of the network security infrastructure. It provides information needed to understand and improve the security posture.
This data item description (DID) contains the format and content preparation instructions for the data product generated by the specific and discrete task requirement as delineated in the contract.
Requirements:
Format. The Cybersecurity Vulnerability Report shall be in contractor’s format. 1.
Content. The Cybersecurity Vulnerability Report shall include the following: 2.
a) Unmitigated CAT I (High and Critical) – Total
b) Unmitigated CAT I (High and Critical) – Over 30 days
c) Unmitigated CAT II (Medium) – Total
d) Unmitigated CAT II (Medium) – Over 180 days
e) Raw CAT III (Low) – Total
f) Explanation of why remediation was not applied to 100 percent of affected assets for all outstanding open remediation actions.
g) Monthly Asset Discovery Results w/delta
h) All findings open longer than 30 days will be carried over to quarterly
Information Security POAM.
2.1. POC. Identify Office/Organization responsible for resolving vulnerability.
2.2. Additional Resources Required
a) Purchase requirements
b) Additional or shift of manpower
End of DI-MGMT-82191
Source: http://assist.dla.mil -- Downloaded: 2022-07-02T17:29Z Check the source to verify that this is the current version before use.
File details come from the government source that posted it. Updated .