CDRL A001 GFI DI-MGMT-82146A.pdf

DATA ITEM DESCRIPTION

Title: NAVAL AVIATION GOVERNMENT FURNISHED PROPERTY (GFP) AND

GOVERNMENT FURNISHED INFORMATION (GFI) CYBER VULNERABILITY REPORT

Number: DI-MGMT-82146A Approval Date: 20200511

AMSC Number: N10176 Limitation: N/A

DTIC Applicable: N/A GIDEP Applicable: N/A

Preparing Activity: AS Project Number: MGMT-2020-013

Applicable Forms: N/A

Use/relationship: This Data Delivery Item contains the format and content for the contractor to report new cybersecurity vulnerabilities identified in GFP/GFI during execution of the contract.

This report also contains a section for contractors to provide recommended hardware/software/firmware changes or methods to remediate found vulnerabilities.

This Data Item Description (DID) contains the format, content, and intended use information for the data product resulting from the work task described in the contract.

Requirements:

1. Referenced Documents. The applicable issue of the documents cited herein, including their approval dates and dates of any applicable amendments, notices, and revisions, shall be as specified in the contract.

2. Format. Contractor format acceptable.

3. Content. The report shall contain the following information:

3.1. Government Furnished Property.

3.1.1. Provide a description of the GFP item and the functions/tasks the item will perform with in the system.

3.1.2. Provide a detailed description of the vulnerabilities and the operating conditions that drive the vulnerabilities. Include in the analysis potential cyber risks to the system.

3.1.2.1. Provide a top-level description of recommended solution to resolve vulnerability.

Include estimated cyber risk after implementation of the proposed solution.

3.1.2.2. Include the pros/cons of the recommendation.

3.1.2.3. Include other options considered but not chosen and reason for exclusion.

Source: http://assist.dla.mil -- Downloaded: 2023-03-09T13:45Z Check the source to verify that this is the current version before use.

DI-MGMT-82146A

3.1.2.4. Include a high/medium/low estimate of time and schedule to implement recommended solution.

3.2. Government Furnished Information.

3.2.1. Provide a description of the GFI item and the systems/functions impacted.

3.2.2. Provide a detailed description of the vulnerabilities and the operating conditions that drive the vulnerabilities. Include in the analysis potential cyber risks to the system.

3.2.2.1. Provide a top-level description of recommended solution to resolve vulnerability.

Include estimated cyber risk after implementation of the proposed solution.

3.2.2.2. Include the pros/cons of the recommendation.

3.2.2.3. Include other options considered but not chosen and reason for exclusion.

3.2.2.4. Include a high/medium/low estimate of time and schedule to implement recommended solution.

End of DI-MGMT-82146A

Source: http://assist.dla.mil -- Downloaded: 2023-03-09T13:45Z Check the source to verify that this is the current version before use.