Appendix (A) - Draft DID for CDRL A005.pdf
PDF 479 KB Posted
- Solicitation number
- M67854-21-R-2053
- Issued by
-
United States Marine Corps
About this file
This data item description outlines the cyber incident reporting requirements for contractors processing controlled unclassified information under Defense Federal Acquisition Regulation Supplement Clause 252.204-7012. Contractors must report cyber incidents impacting internal unclassified information systems to the Defense Cyber Crime Center via the DIBNet portal. Report submissions must follow the mandatory incident report format and include general company information, points of contact, contract details, incident details, and ancillary information. Once received, the Defense Cyber Crime Center will share reported threats with the Department of Defense and defense industrial base companies, and send an encrypted email notification of the incident report to the contracting officer and other defense officials for record keeping.
View the file
Other files
Show all 24
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
DI-MGMT-XXXXX
DISTRIBUTION STATEMENT A. Approved for public release; distribution is unlimited.
DATA ITEM DESCRIPTION Title: Cyber Incident Reporting for a Contractor’s Internal Unclassified
Information System(s)
Number: DI-MGMT-XXXXX Approval Date: TBD AMSC Number: YYYY Limitation: TBD DTIC Applicable: No GIDEP Applicable: No Preparing Activity: TBD Project Number: MGMT-2018-XXX Applicable Forms: None
Use/relationship: When DFARS Clause 252.204-7012 is included in a contract for which Controlled
Unclassified Information (CUI) – as defined in DFARS Clause 252.204-7012 – will be processed, stored, or transmitted during the course of executing the terms a Department of Defense (DoD) contract, cyber incidents shall be reported to the Defense Cyber Crime Center (DC3) via the DIBNet portal.
This Data Item Description (DID) contains the information that is required of the Contractor submitting the incident report to DC3.
This information, once reported, will be shared by DC3 as threat information between the DoD and DIB companies. When DC3 receives a DFARS cyber incident report, DC3 will send an unclassified encrypted email containing the submitted incident report to the government Contracting Officer point of contact identified in the submitted report to have the report placed in the contract file to document the action, with a courtesy copy to the following:
Director, DC3/DCISE
Director, OSD DAMO
Director, DIB CS/IA Program Office
Contract Program Management Office
Requirements:
1. Format: Use the format prescribed through the DIBNet Portal at http://dibnet.dod.mil.
Under “DoD’s DIB Cybersecurity (CS) Program” on the right side of the page, select
“Voluntary Report”.
Since this is reporting is to satisfy a contractual requirement, select “Mandatory
Incident Report”.
Follow the “Mandatory Incident Report” wizard for the following:
o General Information
I. Company Identification
II. Company POC Information
III. Contract or other Agreement
IV. Incident Information
V. Ancillary Information
End of DI-MGMT-XXXX http://dibnet.dod.mil/
File details come from the government source that posted it. Updated .