Att (4A) PMA-273 Cyber Security Plan (CSP).pdf

Controlled Unclassified Information (CUI)

Controlled Unclassified Information (CUI) 1

NAVAIR Patuxent River Naval Air Station Department of the Navy

Request for Proposal (RFP)

Cybersecurity Plan (CSP)

Dated: 26 July 2023

Version 5.0 Rev. 2

Approved by: _____________________________ Joe Sheelar Program Information System Security Manager

AD53200

DISTRIBUTION STATEMENT A: Approved for public release: distribution unlimited.

Controlled Unclassified Information (CUI)

Controlled Unclassified Information (CUI) 2

The contractor shall generate and deliver a Cyber Security Implementation Plan (CSIP) to address the requirements that will be within the PMA-273 CSP and CSIP Contract Data Requirements List (CDRL) by the authority of Data Item Description (DID) - DI-MGMT-82002B that will be provided. This DID contains the format, content, and intended use information for the data product resulting from the work task described by the contract. As such contractors shall consider reviewing to ensure all possible sections within the DID can be addressed. Post award, sections in the DID will be tailored out based on what is being delivered. For example, if the system being delivered is unclassified, then the classified sections in the DID will be tailored out post award before the contractor starts answering the CSP.

If any Government Off-the-Shelf (GOTS) software is to be delivered to the Government, the contractor shall adhere to the following requirements contained within the final PMA-273 CSP and System-Software CDRL by the authority of DID - DI-MISC-80508B. This DID contains format and content preparation instructions for the data product generated by the specific and discrete task requirement as delineated in the contract.

NOTE: This document will be replaced with the final CSP for the contractor to answer following the CDRL guidelines post award.