Application_Request_Worksheet.pdf
PDF 3 MB Posted
- Attached to
- Expeditionary Fluid Analysis System Federal contract opportunity
- Solicitation number
- FA8533-20-R-EFAS
About this file
This document contains an Application Request Worksheet (ARW) and information on a related federal contract opportunity for an Expeditionary Fluid Analysis System (EFAS).
The ARW details a request to certify software on the Air Force network. It requires contact information for the sponsor, software details including name and version, intended use, testing procedures, and digital signature of the Wing Information System Security Manager. The related federal contract opportunity is conducting market research for a rugged, portable EFAS to modernize oil analysis for Air Force aircraft. It will detect larger wear metal particles and analyze hydraulic fluids. The opportunity anticipates a potential ten-year contract with a total of 266 units procured. Respondents are asked to review the draft product description, statement of work, and respond to the attached RFI and ARW.
View the file
Other files for this federal contract opportunity
| File | Type | Posted |
|---|---|---|
| SDC 5.7.1 NIPR Application List.xlsx | XLSX spreadsheet | |
| SOW EFAS (V.5).docx | DOCX document | |
| DRAFT EFAS PD v14.pdf | ||
| Request For Information (EFAS).doc | DOC document |
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Version 7.0.0 4 Jul 2019
Application Request Worksheet (ARW) Please check our SharePoint site for latest ARW versions http://go.usa.gov/xRUUd
*** Please, click the “Enable All Features” button above ***
Always check our SharePoint site (http://go.usa.gov/xRUUd) for the latest version of this document.
This ARW must be completed by an AF sponsor. Once completed and Section 5 is digitally signed e-mail ARW to: afnic.saca@us.af.mil along with any required documentation for processing.
All requests must be submitted through your unit Cyber Security Liaison and endorsed by the Wing ISSM.
Contractors/Vendors may not be sponsors or digital signer of this request.
Please limit the use of acronyms in the product name.
We will only accept one software product per ARW and one ARW per email!
Version:
Once evaluated, low risk software products may receive a certification and be added to the
Air Force (AF) Evaluated Products List (EPL)
It is the sponsor’s responsibility to identify the exact version requested, supply the software product, any licenses and documentation required for evaluation
*** Please, click the “Enable All Features” button above ***
Table Of Contents
PRE-CERTIFICATION CHECKLIST
HUSECTION 1 – AIR FORCE SPONSOR INFORMATION UH
Contact, Organization, Email and Phone Information
HUSECTION 2 –SOFTWARE PRODUCT INFORMATIONU
Name and Version
Software Product Information
Developer Information – Including System for Award Management Information
Testing Background
HUSECTION 3 – SOFTWARE PRODUCT FUNCTIONALITYU
Software Product Category
Functionality/Use/Capabilities
Fielding Information
Type of Data Processed
SECTION 4 –TESTING OF SOFTWARE PRODUCTS
Testing Requirements
Testing Procedure Standards
Testing POC Information
HUSECTION 5 – SOFTWARE PRODUCT REQUEST ENDORSEMENT SIGNATURE U
*Note: This worksheet must be fully completed then digitally signed to be processed; incomplete requests will not be processed and returned to the sponsor. Any requests for additional information not answered within two weeks of request will be voided automatically. Please, only one ARW per email!
4 Jul 2019
Pre-Certification Checklist*
YES NO
1. Is the software product already certified through the Assessment and Authorization process (A&A) as part of a system/enclave that currently has an active Authorization to
Operate (ATO)?
2. Is it an IA/IA-enabled software product?
(Ref. CNSS Policy No 11) (https://www.cnss.gov)
( https://www.niap-ccevs.org/NIAP_Evolution/faqs/nstissp-11/#Question_III_3)
3. Does the software product perform encryption using a cryptographic module as its primary function that has NOT been validated for compliance with Federal Information
Processing Standards (FIPS) 140-2?
(http://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.140-2.pdf)
4. Does the software product use ports, protocols, and services (PPS) that are NOT acceptable, NOT a best practice, or NOT listed in the DoD Category Assurance List
(CAL) and associated Vulnerability Assessment reports (VA)? (Ref. DoDI 8551.01, para
4.5 (http://www.dtic.mil/whs/directives/corres/pdf/855101p.pdf));
PPSM (http://iase.disa.mil/ppsm)
5. Does the software product use prohibited mobile code? (Ref. NIST SP-800-28 v 2 https://www.nist.gov/publications/guidelines-active-content-and-mobile-code-0?pub_id=152039)
6. Is the software product public domain software commonly known as freeware or shareware that is only available in binary format? (Ref. NIST SP 800-53r4
(http://csrc.nist.gov/publications/PubsSPs.html))
7. Is the software product open source software for which there is no Configuration
Management Plan (CMP) and no software support plan? (Ref. NIST SP 800-53r4
(http://csrc.nist.gov/publications/PubsSPs.html)) (Additional Guidance:
Establish Software CM IEEE 1042 – Create Software CM Plans IEEE 828)
8. Does the software product have any CAT I or CAT II vulnerabilities that cannot be satisfactorily mitigated? (NOTE: Immitigable CAT I and CAT II vulnerabilities will preclude certification of a software product)
9. Is the software product itself classified? (Note: This does NOT include the data the software product processes)
10. Is this a pre-production/proof of concept software product? (e.g. beta version)
11. Is this software product NOT IPv6 compatible?
12. Will applying security patches to the underlying supporting infrastructure (i.e., operating system, application server, web server, etc.) hamper functionality of the software product?
13. Is this software product considered assessed IAW the Software Products Approval
Process AO memo (https://go.usa.gov/xN5KS)? Note: this does not include products previously certified and are currently on the AF EPL.
* NOTE: Questions contact our Help Desk at (618) 229-6862, DSN (779) or email: afnic.saca@us.af.mil
Explain ‘Yes’ answers here:
4 Jul 2019
SECTION 1 – AIR FORCE SPONSOR INFORMATION
Sponsor POC*
AF Official Required
Organization, Proponent Agency, or
Direct Reporting Unit Address:
Sponsor’s MAJCOM
Email (must provide af.mil address):
Phone (commercial): Phone (DSN):
Technical POC**
Technical POC’s MAJCOM
Email:
Phone (commercial): Phone (DSN):
Unit Cyber Security Liaison**
Unit CSL’s MAJCOM
Email (must provide af.mil address):
Phone (commercial): Phone (DSN):
* Note: Sponsor must be AF Official Only (AF Military or AF Civilian Personnel)
** Note: All three POC’s are required and there must be at least two different POC’s for each submission.
PRIORITY PROCESSING: If you require priority processing please submit a Mission Impact
Statement signed by a SQ Flight Commander or higher as a separate document.
4 Jul 2019
SECTION 2 –SOFTWARE PRODUCT INFORMATION
2.1 Full Name/Acronym
2.2 Version
2.3 Is this request for an older version? Provide justification for older versions as a separate attachment. Versions with no developer support cannot be certified.
2.4 What is the type of the software product? For Web Applications, PMs/sponsors must provide additional information and documentation. Complete and include
ARW Addendum located at: http://go.usa.gov/xRUUd
2.5 On what environment will it be installed?
If other, please specify environment (e.g. Windows, Linux, UNIX…)
2.6 Is this a commercial off-the-shelf (COTS) or government off-the-shelf (GOTS) software product? GOTS software requires a
Configuration Management Plan (CMP.)
COTS: GOTS:
2.7 Developer Name (not reseller) or GOTS Agency
responsible for developing the software product. Provide a CMP as a separate attachment for all GOTS products.
2.7.1 Developer (address, and phone) - Note: developer
information must match the www.sam.gov website record.
2.7.2 Software product information website - Note: must
be link to software product information page, NOT the developer’s home page or a software download page.
This helps us identify the software product.
2.8 Is the developer listed as an exclusion on System for Award Management
(SAM)? (Go to https://www.sam.gov/), If YES, then STOP, this request will not be processed.
Yes: No:
2.9 COTS Developer/Manufacturer SAM validation information must be provided DUNS No:
Per FAR 4.11 prospective contractors must be registered prior to award/purchase.
For further information visit https://www.sam.gov/
CAGE Code:
4 Jul 2019
SECTION 3 – SOFTWARE PRODUCT FUNCTIONALITY
3.1 Software Product
Category
(help others by selecting the most appropriate category – marking “Other” should be the last option)
508 Accommodation Aircraft Audio/Visual
Business Finance Communications CAD/CAM
Database Desktop Enhancements Education
Geospatial Internet IT Utilities/Security
Law Enforcement Logistics Medical
Model/Simulation Multimedia Program Development
Training Weather Other
3.2 Provide a concise (non-sales pitch) description of the functionality of this software product, to include capabilities not available to similar products currently on the AF EPL.
3.3 Is this a client-server software product where both require certification? Note: If yes, then two ARW’s must be submitted, one for the client and one for the server.
One ARW cannot be used for both.
Yes: No:
3.4 Does the software product use any peripheral hardware? If yes, please specify. Yes: No:
3.5 Besides the software product being requested for certification, does the software product require any additional software not provided by the
SDC/DSCC? If yes, please specify. Yes: No:
3.6 Does this software product use cloud services? Yes: No:
3.7 On what AF network will this software product be used?
(we can only certify for NIPR, SIPR or both)
3.8 Where will the application be hosted?
3.9 Type of data this software product will process (Unclassified, Classified, NATO, Coalition, FOUO, HIPAA, PII etc.)
(Ref DoDD 5400.11, para E2.2) (http://www.dtic.mil/whs/directives/index.html)
4 Jul 2019
SECTION 5 – SOFTWARE PRODUCT REQUEST ENDORSEMENT SIGNATURE
Wing Information Systems
Security Manager:
Wing ISSM MAJCOM / Base
Email:
Phone (commercial): Phone (DSN):
Wing ISSM Signature:
(Must be AF Official Only
[AF Military or AF Civilian Personnel])
Always check our SharePoint site (http://go.usa.gov/xRUUd) for the latest version of this document.
Once Section 5 is digitally signed e-mail ARW to:
afnic.saca@us.af.mil along with any required documentation for processing.
SECTION 4 –TESTING OF SOFTWARE PRODUCTS
4.1 Yes: No:
4.2
4.3 POC Organization/Unit/Office Symbol:
4.4 POC’s MAJCOM
4.5 Email:
4.6 Phone (commercial): Phone (DSN):
9.0.0.2.20120627.2.874785
| Please select if the type of application is a desktop, server, or web application: - SELECT - |
| If you filled out the top of the ARW and you've enabled features - this should already be populated with the name of the application: Full Application Name |
| If you filled out the top of the ARW and you've enabled features - this should already be populated with the requested version: Requested Version |
| arw_version: 7.0.0 |
| No: |
| No: |
| No: |
| No: |
| No: |
| No: |
| No: |
| No: |
| No: |
| No: |
| No: |
| No: |
| No: |
| Please explain any 'Yes' answers in the Pre-Certification Checklist. Use an additional document if necessary.: Please explain any Yes answers from the questions above |
| Enter the Sponsor' name for this application. Please note it must be an AF Official (military or civilian): Name |
| Enter the Sponsor organization: Organization |
| Enter the Sponsor's MAJCOM: Enter Sponsor's MAJCOM |
| Enter the Sponsor's e-mail address: E-mail Address |
| Enter the Sponsor commercial phone number: 123-123-1234 |
| Enter the Sponsor DSN phone number: 123-4567 |
| Enter the Technical POC for this application - who can we call with technical issues?: Name |
| Enter the Technical POC's organization: Organization |
| Enter the Technical POC's MAJCOM: Enter Technical POC's MAJCOM |
| Enter the Technical POC's e-mail address: E-mail Address |
| Enter the Technical POC's commercial phone number: 123-123-1234 |
| Enter the Technical POC's DSN phone number: 123-4567 |
| Enter the Unit CSL name for this application - who can we call with application use questions?: Name |
| Enter the Unit CLS's organization: Organization |
| Enter the Unit CLS's MAJCOM: Enter Unit CSL's MAJCOM |
| Enter the Unit CLS's e-mail address: E-mail Address |
| Enter the Unit CSL's commercial phone number: 123-123-1234 |
| Enter the Unit CSL's DSN phone number: 123-4567 |
| If this is a request for an older version we must have a justification attached: - SELECT - |
| Select SDC or DSCC - we don't certify on UNIX or Linux: - SELECT - |
| Enter the Operating System: Enter if not SDC |
| Click here for GOTS applications. DUNS No and CAGE Code not required. A CMP must be provided as a separate attachment.: |
| Enter the vendors name (Company) if GOTS enter the agency developing or in charge of developing the application: Enter Vendors Name |
| Enter the vendor (Company) mailing address or GOTS agency mailing address: Enter Vendor's Mailing Address |
| Enter the application/product information website. This must be specific and NOT the vendor's home page: Required to be Application Information Page |
| No: |
| For COTS you are required to enter the vendors DUNS Number see https://www.sam.gov for more information: DUNS# |
| For COTS you are required to enter the vendors CAGE Code see https://www.sam.gov for more information: CAGE# |
| accommodation: |
| Software related to the operation, maintenance, or sustainment of aircraft: |
| CD & DVD tools, converters, encoders, music creation, music management, players, rippers, audio utilities, plug-ins, burning software, video editing, video code: |
| Project management, financial tracking tools, taxes, regulatory compliance, accounting, logistics, supply chain management, traffic control (air, land, sea), architecture, business planning and continuity, construction and contractor management, facility management, human resources, personnel, legal, purchasing, marketing, transportation: |
| E-mail, instant messaging, VoIP, calendars, contact managers, speech/text/handwriting recognition, language translation and study, telephone management systems: |
| cad: |
| Database, database manipulation tools : |
| Cursors, icons, icon tools, screen savers, themes, wallpapers: |
| Health, nutrition, hobby, teaching tools, training, library/libraries: |
| Geo-spatial applications: |
| Ad blockers, anti-Spam, browsers, file sharing, FTP, synchronization: |
| Network administration tools, firewalls, backups, disk utilities, security tools, encryption tools, cryptography tools, password mangers/creators, file compression, registry tools, test and document editors, data mining, decision support systems, asset and inventory management, peripheral utilities, (scanners, printers, etc), hand-held software, optical character recognition: |
| law: |
| Software products designed for logistics: |
| Application supports the medical community: |
| Software related to modeling or simulation: |
| 3D drawing, computer aided dispatch (CAD), digital photography applications, animation creation, flash design, illustration, image editing, font tools, authoring tools, desktop publishing, graphics, label makers (CD & paper): |
| Editors, compilers, parsers, interpreters, linkers, loaders, components & programming libraries, documentation tools, testing environments, web-page/application creation, HTML editors, web design, software design: |
| Software to create or operate training materials.: |
| Software to forecast, model, or document the weather: |
| Doesn't fit any of the listed categories. Use only as a last resort!: |
| Help others who may be looking for software with this functionality. Enter a concise description of what this application does. Please do not just give the vendors sales pitch...what will this application do for you?: - Enter a description of what this application does |
| No this software is not part of a client-server software: |
| No: |
| If the application uses or interfaces to any peripheral hardware please include make and model here: If yes specify |
| No: |
| Enter the additional software this application requires that is not supplied by the SDC/DSCC. Please be specific with name and version!: Additional Software |
| No this software does not use cloud services: |
| Where will this software product be used? NIPR/SIPR/Both?: - Select - |
| hosted: - Select - |
| Is the application going to process classified information, PII, sensitive but unclassified? Be specific: Enter what type of data this application will process/store |
| Section_4: |
| Question_41: |
| No, this software will not be sponsor tested and is not a Web Application: |
| q_poc: |
| Enter person who did the testing.: Enter person we can contact |
| Enter the unit who did the testing.: Enter Unit |
| Enter the tester's MAJCOM: Enter Tester's MAJCOM |
| Enter testers e-mail address: Enter testers e-mail address |
| Enter the testers commercial phone number who performed the testing should we have any questions: 123-123-1234 |
| Enter the testers DSN phone number who performed the testing should we have any questions: 123-1234 |
| Enter the name of the Wing ISSM responsible for this application. Please note it must be an AF Official (military or civilian): Name |
| Enter the Wing ISSM's organization: Organization |
| Enter the ISSM's MAJCOM: Enter ISSM's MAJCOM |
| issm_base: Base |
| Enter the Wing ISSM's e-mail address: E-mail Address |
| Enter the Wing ISSM's commercial phone number: 123-123-1234 |
| Enter the Wing ISSM's DSN phone number: 123-4567 |
| A signature is required for processing. If the ARW is not completely filled out and signed it will not be processed. The authorized signature is the Wing ISSM and it must be an AF Official Only: |
File details come from the government source that posted it. Updated .