Application_Request_Worksheet.pdf

PDF 3 MB Posted

Attached to
Expeditionary Fluid Analysis System Federal contract opportunity
Solicitation number
FA8533-20-R-EFAS
Issued by
Department of the Air Force Materiel Command Lifecycle Management Center Robins Air Force Base

About this file

This document contains an Application Request Worksheet (ARW) and information on a related federal contract opportunity for an Expeditionary Fluid Analysis System (EFAS).

The ARW details a request to certify software on the Air Force network. It requires contact information for the sponsor, software details including name and version, intended use, testing procedures, and digital signature of the Wing Information System Security Manager. The related federal contract opportunity is conducting market research for a rugged, portable EFAS to modernize oil analysis for Air Force aircraft. It will detect larger wear metal particles and analyze hydraulic fluids. The opportunity anticipates a potential ten-year contract with a total of 266 units procured. Respondents are asked to review the draft product description, statement of work, and respond to the attached RFI and ARW.

View the file

Other files for this federal contract opportunity

Other files attached to Expeditionary Fluid Analysis System, newest first.
File Type Posted
SDC 5.7.1 NIPR Application List.xlsx XLSX spreadsheet
SOW EFAS (V.5).docx DOCX document
DRAFT EFAS PD v14.pdf PDF
Request For Information (EFAS).doc DOC document

On GovTribe

Work with this file on GovTribe

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Version 7.0.0 4 Jul 2019

Application Request Worksheet (ARW) Please check our SharePoint site for latest ARW versions http://go.usa.gov/xRUUd

*** Please, click the “Enable All Features” button above ***

Always check our SharePoint site (http://go.usa.gov/xRUUd) for the latest version of this document.

This ARW must be completed by an AF sponsor. Once completed and Section 5 is digitally signed e-mail ARW to: afnic.saca@us.af.mil along with any required documentation for processing.

All requests must be submitted through your unit Cyber Security Liaison and endorsed by the Wing ISSM.

Contractors/Vendors may not be sponsors or digital signer of this request.

Please limit the use of acronyms in the product name.

We will only accept one software product per ARW and one ARW per email!

Version:

Once evaluated, low risk software products may receive a certification and be added to the

Air Force (AF) Evaluated Products List (EPL)

It is the sponsor’s responsibility to identify the exact version requested, supply the software product, any licenses and documentation required for evaluation

*** Please, click the “Enable All Features” button above ***

Table Of Contents

PRE-CERTIFICATION CHECKLIST

HUSECTION 1 – AIR FORCE SPONSOR INFORMATION UH

Contact, Organization, Email and Phone Information

HUSECTION 2 –SOFTWARE PRODUCT INFORMATIONU

Name and Version

Software Product Information

Developer Information – Including System for Award Management Information

Testing Background

HUSECTION 3 – SOFTWARE PRODUCT FUNCTIONALITYU

Software Product Category

Functionality/Use/Capabilities

Fielding Information

Type of Data Processed

SECTION 4 –TESTING OF SOFTWARE PRODUCTS

Testing Requirements

Testing Procedure Standards

Testing POC Information

HUSECTION 5 – SOFTWARE PRODUCT REQUEST ENDORSEMENT SIGNATURE U

*Note: This worksheet must be fully completed then digitally signed to be processed; incomplete requests will not be processed and returned to the sponsor. Any requests for additional information not answered within two weeks of request will be voided automatically. Please, only one ARW per email!

4 Jul 2019

Pre-Certification Checklist*

YES NO

1. Is the software product already certified through the Assessment and Authorization process (A&A) as part of a system/enclave that currently has an active Authorization to

Operate (ATO)?

2. Is it an IA/IA-enabled software product?

(Ref. CNSS Policy No 11) (https://www.cnss.gov)

( https://www.niap-ccevs.org/NIAP_Evolution/faqs/nstissp-11/#Question_III_3)

3. Does the software product perform encryption using a cryptographic module as its primary function that has NOT been validated for compliance with Federal Information

Processing Standards (FIPS) 140-2?

(http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-2.pdf)

4. Does the software product use ports, protocols, and services (PPS) that are NOT acceptable, NOT a best practice, or NOT listed in the DoD Category Assurance List

(CAL) and associated Vulnerability Assessment reports (VA)? (Ref. DoDI 8551.01, para

4.5 (http://www.dtic.mil/whs/directives/corres/pdf/855101p.pdf));

PPSM (http://iase.disa.mil/ppsm)

5. Does the software product use prohibited mobile code? (Ref. NIST SP-800-28 v 2 https://www.nist.gov/publications/guidelines-active-content-and-mobile-code-0?pub_id=152039)

6. Is the software product public domain software commonly known as freeware or shareware that is only available in binary format? (Ref. NIST SP 800-53r4

(http://csrc.nist.gov/publications/PubsSPs.html))

7. Is the software product open source software for which there is no Configuration

Management Plan (CMP) and no software support plan? (Ref. NIST SP 800-53r4

(http://csrc.nist.gov/publications/PubsSPs.html)) (Additional Guidance:

Establish Software CM IEEE 1042 – Create Software CM Plans IEEE 828)

8. Does the software product have any CAT I or CAT II vulnerabilities that cannot be satisfactorily mitigated? (NOTE: Immitigable CAT I and CAT II vulnerabilities will preclude certification of a software product)

9. Is the software product itself classified? (Note: This does NOT include the data the software product processes)

10. Is this a pre-production/proof of concept software product? (e.g. beta version)

11. Is this software product NOT IPv6 compatible?

12. Will applying security patches to the underlying supporting infrastructure (i.e., operating system, application server, web server, etc.) hamper functionality of the software product?

13. Is this software product considered assessed IAW the Software Products Approval

Process AO memo (https://go.usa.gov/xN5KS)? Note: this does not include products previously certified and are currently on the AF EPL.

* NOTE: Questions contact our Help Desk at (618) 229-6862, DSN (779) or email: afnic.saca@us.af.mil

Explain ‘Yes’ answers here:

4 Jul 2019

SECTION 1 – AIR FORCE SPONSOR INFORMATION

Sponsor POC*

AF Official Required

Organization, Proponent Agency, or

Direct Reporting Unit Address:

Sponsor’s MAJCOM

Email (must provide af.mil address):

Phone (commercial): Phone (DSN):

Technical POC**

Technical POC’s MAJCOM

Email:

Phone (commercial): Phone (DSN):

Unit Cyber Security Liaison**

Unit CSL’s MAJCOM

Email (must provide af.mil address):

Phone (commercial): Phone (DSN):

* Note: Sponsor must be AF Official Only (AF Military or AF Civilian Personnel)

** Note: All three POC’s are required and there must be at least two different POC’s for each submission.

PRIORITY PROCESSING: If you require priority processing please submit a Mission Impact

Statement signed by a SQ Flight Commander or higher as a separate document.

4 Jul 2019

SECTION 2 –SOFTWARE PRODUCT INFORMATION

2.1 Full Name/Acronym

2.2 Version

2.3 Is this request for an older version? Provide justification for older versions as a separate attachment. Versions with no developer support cannot be certified.

2.4 What is the type of the software product? For Web Applications, PMs/sponsors must provide additional information and documentation. Complete and include

ARW Addendum located at: http://go.usa.gov/xRUUd

2.5 On what environment will it be installed?

If other, please specify environment (e.g. Windows, Linux, UNIX…)

2.6 Is this a commercial off-the-shelf (COTS) or government off-the-shelf (GOTS) software product? GOTS software requires a

Configuration Management Plan (CMP.)

COTS: GOTS:

2.7 Developer Name (not reseller) or GOTS Agency

responsible for developing the software product. Provide a CMP as a separate attachment for all GOTS products.

2.7.1 Developer (address, and phone) - Note: developer

information must match the www.sam.gov website record.

2.7.2 Software product information website - Note: must

be link to software product information page, NOT the developer’s home page or a software download page.

This helps us identify the software product.

2.8 Is the developer listed as an exclusion on System for Award Management

(SAM)? (Go to https://www.sam.gov/), If YES, then STOP, this request will not be processed.

Yes: No:

2.9 COTS Developer/Manufacturer SAM validation information must be provided DUNS No:

Per FAR 4.11 prospective contractors must be registered prior to award/purchase.

For further information visit https://www.sam.gov/

CAGE Code:

4 Jul 2019

SECTION 3 – SOFTWARE PRODUCT FUNCTIONALITY

3.1 Software Product

Category

(help others by selecting the most appropriate category – marking “Other” should be the last option)

508 Accommodation Aircraft Audio/Visual

Business Finance Communications CAD/CAM

Database Desktop Enhancements Education

Geospatial Internet IT Utilities/Security

Law Enforcement Logistics Medical

Model/Simulation Multimedia Program Development

Training Weather Other

3.2 Provide a concise (non-sales pitch) description of the functionality of this software product, to include capabilities not available to similar products currently on the AF EPL.

3.3 Is this a client-server software product where both require certification? Note: If yes, then two ARW’s must be submitted, one for the client and one for the server.

One ARW cannot be used for both.

Yes: No:

3.4 Does the software product use any peripheral hardware? If yes, please specify. Yes: No:

3.5 Besides the software product being requested for certification, does the software product require any additional software not provided by the

SDC/DSCC? If yes, please specify. Yes: No:

3.6 Does this software product use cloud services? Yes: No:

3.7 On what AF network will this software product be used?

(we can only certify for NIPR, SIPR or both)

3.8 Where will the application be hosted?

3.9 Type of data this software product will process (Unclassified, Classified, NATO, Coalition, FOUO, HIPAA, PII etc.)

(Ref DoDD 5400.11, para E2.2) (http://www.dtic.mil/whs/directives/index.html)

4 Jul 2019

SECTION 5 – SOFTWARE PRODUCT REQUEST ENDORSEMENT SIGNATURE

Wing Information Systems

Security Manager:

Wing ISSM MAJCOM / Base

Email:

Phone (commercial): Phone (DSN):

Wing ISSM Signature:

(Must be AF Official Only

[AF Military or AF Civilian Personnel])

Always check our SharePoint site (http://go.usa.gov/xRUUd) for the latest version of this document.

Once Section 5 is digitally signed e-mail ARW to:

afnic.saca@us.af.mil along with any required documentation for processing.

SECTION 4 –TESTING OF SOFTWARE PRODUCTS

4.1 Yes: No:

4.2

4.3 POC Organization/Unit/Office Symbol:

4.4 POC’s MAJCOM

4.5 Email:

4.6 Phone (commercial): Phone (DSN):

9.0.0.2.20120627.2.874785

Please select if the type of application is a desktop, server, or web application: - SELECT -
If you filled out the top of the ARW and you've enabled features - this should already be populated with the name of the application: Full Application Name
If you filled out the top of the ARW and you've enabled features - this should already be populated with the requested version: Requested Version
arw_version: 7.0.0
No:
No:
No:
No:
No:
No:
No:
No:
No:
No:
No:
No:
No:
Please explain any 'Yes' answers in the Pre-Certification Checklist. Use an additional document if necessary.: Please explain any Yes answers from the questions above
Enter the Sponsor' name for this application. Please note it must be an AF Official (military or civilian): Name
Enter the Sponsor organization: Organization
Enter the Sponsor's MAJCOM: Enter Sponsor's MAJCOM
Enter the Sponsor's e-mail address: E-mail Address
Enter the Sponsor commercial phone number: 123-123-1234
Enter the Sponsor DSN phone number: 123-4567
Enter the Technical POC for this application - who can we call with technical issues?: Name
Enter the Technical POC's organization: Organization
Enter the Technical POC's MAJCOM: Enter Technical POC's MAJCOM
Enter the Technical POC's e-mail address: E-mail Address
Enter the Technical POC's commercial phone number: 123-123-1234
Enter the Technical POC's DSN phone number: 123-4567
Enter the Unit CSL name for this application - who can we call with application use questions?: Name
Enter the Unit CLS's organization: Organization
Enter the Unit CLS's MAJCOM: Enter Unit CSL's MAJCOM
Enter the Unit CLS's e-mail address: E-mail Address
Enter the Unit CSL's commercial phone number: 123-123-1234
Enter the Unit CSL's DSN phone number: 123-4567
If this is a request for an older version we must have a justification attached: - SELECT -
Select SDC or DSCC - we don't certify on UNIX or Linux: - SELECT -
Enter the Operating System: Enter if not SDC
Click here for GOTS applications. DUNS No and CAGE Code not required. A CMP must be provided as a separate attachment.:
Enter the vendors name (Company) if GOTS enter the agency developing or in charge of developing the application: Enter Vendors Name
Enter the vendor (Company) mailing address or GOTS agency mailing address: Enter Vendor's Mailing Address
Enter the application/product information website. This must be specific and NOT the vendor's home page: Required to be Application Information Page
No:
For COTS you are required to enter the vendors DUNS Number see https://www.sam.gov for more information: DUNS#
For COTS you are required to enter the vendors CAGE Code see https://www.sam.gov for more information: CAGE#
accommodation:
Software related to the operation, maintenance, or sustainment of aircraft:
CD & DVD tools, converters, encoders, music creation, music management, players, rippers, audio utilities, plug-ins, burning software, video editing, video code:
Project management, financial tracking tools, taxes, regulatory compliance, accounting, logistics, supply chain management, traffic control (air, land, sea), architecture, business planning and continuity, construction and contractor management, facility management, human resources, personnel, legal, purchasing, marketing, transportation:
E-mail, instant messaging, VoIP, calendars, contact managers, speech/text/handwriting recognition, language translation and study, telephone management systems:
cad:
Database, database manipulation tools :
Cursors, icons, icon tools, screen savers, themes, wallpapers:
Health, nutrition, hobby, teaching tools, training, library/libraries:
Geo-spatial applications:
Ad blockers, anti-Spam, browsers, file sharing, FTP, synchronization:
Network administration tools, firewalls, backups, disk utilities, security tools, encryption tools, cryptography tools, password mangers/creators, file compression, registry tools, test and document editors, data mining, decision support systems, asset and inventory management, peripheral utilities, (scanners, printers, etc), hand-held software, optical character recognition:
law:
Software products designed for logistics:
Application supports the medical community:
Software related to modeling or simulation:
3D drawing, computer aided dispatch (CAD), digital photography applications, animation creation, flash design, illustration, image editing, font tools, authoring tools, desktop publishing, graphics, label makers (CD & paper):
Editors, compilers, parsers, interpreters, linkers, loaders, components & programming libraries, documentation tools, testing environments, web-page/application creation, HTML editors, web design, software design:
Software to create or operate training materials.:
Software to forecast, model, or document the weather:
Doesn't fit any of the listed categories. Use only as a last resort!:
Help others who may be looking for software with this functionality. Enter a concise description of what this application does. Please do not just give the vendors sales pitch...what will this application do for you?: - Enter a description of what this application does
No this software is not part of a client-server software:
No:
If the application uses or interfaces to any peripheral hardware please include make and model here: If yes specify
No:
Enter the additional software this application requires that is not supplied by the SDC/DSCC. Please be specific with name and version!: Additional Software
No this software does not use cloud services:
Where will this software product be used? NIPR/SIPR/Both?: - Select -
hosted: - Select -
Is the application going to process classified information, PII, sensitive but unclassified? Be specific: Enter what type of data this application will process/store
Section_4:
Question_41:
No, this software will not be sponsor tested and is not a Web Application:
q_poc:
Enter person who did the testing.: Enter person we can contact
Enter the unit who did the testing.: Enter Unit
Enter the tester's MAJCOM: Enter Tester's MAJCOM
Enter testers e-mail address: Enter testers e-mail address
Enter the testers commercial phone number who performed the testing should we have any questions: 123-123-1234
Enter the testers DSN phone number who performed the testing should we have any questions: 123-1234
Enter the name of the Wing ISSM responsible for this application. Please note it must be an AF Official (military or civilian): Name
Enter the Wing ISSM's organization: Organization
Enter the ISSM's MAJCOM: Enter ISSM's MAJCOM
issm_base: Base
Enter the Wing ISSM's e-mail address: E-mail Address
Enter the Wing ISSM's commercial phone number: 123-123-1234
Enter the Wing ISSM's DSN phone number: 123-4567
A signature is required for processing. If the ARW is not completely filled out and signed it will not be processed. The authorized signature is the Wing ISSM and it must be an AF Official Only:

File details come from the government source that posted it. Updated .