ATCH 3_Compliance and Reference Documentation List_FINAL.pdf
PDF 75 KB Posted
- Solicitation number
- FA2553-26-R-B001
- Issued by
-
Department of the Air Force
About this file
This document is Attachment 3 of the NITE-STAR Capability Development IDIQ solicitation (FA255326RB001), listing publicly available compliance and reference documents that contractors must consult during contract performance. The attachment does not specify products, services, response dates, pricing, or award information; instead, it serves as a reference guide for regulatory and technical compliance requirements.
The document identifies 41 compliance and reference standards spanning supply chain risk management, cybersecurity, information security, systems engineering, and space operations. Key regulatory frameworks include DoD directives and instructions (DoDI 5000.02, DoDI 8500.01, DoDI 8510.01), NIST standards for system security and risk management (SP 800-160, SP 800-171, SP 800-53), and space-specific requirements (AFSPCMAN 91-710, EWR 127-1, JP 3-14). Additional standards address program protection planning, configuration management, earned value management, software development, reliability programs, and personnel security. Contractors are required to demonstrate compliance with these referenced documents throughout the contract lifecycle, including adherence to the DoD Risk Management Framework, Critical Program Information protection protocols, Special Access Program guidelines, and intelligence community security requirements.
View the file
Other files
Show all 16
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
NITE-STAR Capability Development IDIQ Solicitation # FA255326RB001
Attachment 3 Compliance Reference Documents
Reference Number Title/Description CNSSD 505 Supply Chain Risk Management (SCRM)
AFPAM 63-113
Program Protection Planning for Life Cycle Management
AFSPCMAN 91-710 Range Safety User Requirements Manual Vols 1-7
CNSSI 1253
Security Categorization and Control Selection For National Security Systems
DISR
DOD Information Technology Standards Registry
(DISR)
DoD 5200.2R Personnel Security
DoD 5220.22-M National Industrial Security Program (NISP) Operating Manual (NISPOM)
DoD Arch V2.02 and Vol 1-3 DoD Architecture Framework
DoD CC SRG Department of Defense (DoD) Cloud Computing Security Requirements Guide (SRG)
DoDD 5205.07 SAP Policy DoDD 8140.01 Cyberforce Workforce Management DoDI 5000.02 Operation of the Adaptive Acquisition Framework
DODI 5200.39
Critical Program Information (CPI) Protection within the Department of Defense
DoDI 8500.01 Cybersecurity
DoDI 8510.01 Risk Management Framework (RMF) for DoD Information Technology (IT)
DoDM 5105.21-Volumes 1-3 SCI Administrative Security Manual DoDM 5200.01 Vol 1-4 Information Security Program
DoDM 8140.03 Cyberspace Workforce Qualification and Management Program
EWR 127-1 Eastern and Western Range Safety Requirements
ICD-503
Intelligence Community Information Technology Systems security Risk Management
ICD-705 Sensitive Compartmented Information Facilities
IEEE 15288.1
Application of Systems Engineering on Defense Programs
ISO EIA 15288
Systems and Software Engineering- System Life Cycle Processes
JP 3-14 Space Operations
JSIG
DoD Joint Special Access Program (SAP) Implementation Guide
NIST Interagency Report 7622 Notional Supply Chain Risk Management Practices for Federal Information Systems
Compliance and Reference Documentation (Publicly Available Documents)
NITE-STAR Capability Development IDIQ Solicitation # FA255326RB001
Attachment 3 Compliance Reference Documents
NIST SP 800-160
System Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems
NIST SP 800-171
Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations
NIST SP 800-30 Guide for Conduction Risk Assessment
NIST SP 800-37
Guide for Applying Risk Management Framework to Federal Information Systems
NIST SP 800-53
Security and Privacy Controls for Federal Information Systems and Organizations
SAE EIA 649-1
Configuration Management Requirements for Defense Contracts
SAE/EIA 748 Earned Value Management Systems SMC-S-012 Software Development SMC-S-019 Rev A Program and Subcontractor Management SMC-S-013 Reliability Program for Space Systems SMC-S-014 Survivability Program for Space Systems
TO 00-5-3
Technical Order Life Cycle Management Plan
(TOLCMP)
File details come from the government source that posted it. Updated .