A099_DID_DI-ADMN-80239_Information_Sys_Accreditation_Doc.pdf
Data Item Description PDF 142 KB Posted
- Attached to
- Bidders Library for Open Skies OC-135 DVIS
- Solicitation number
- CMP3-OC-0018
About this file
DI-ADMN-80239 Info Sys Accred Doc
View the file
Other versions and copies of DI-ADMN-80239
| File | Revision | Posted | Attached to |
|---|---|---|---|
| DI-ADMN-80239__Information_Systems_Accreditation_Documentation.docx | Revision not stated | IA Support | |
| DI-ADMN-80239__Information_Systems_Accreditation_Documentation.docx | Revision not stated | Information Assurance and Certification and Accreditation |
Who attaches DI-ADMN-80239
Other files
Show all 32
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
DATA ITEM DESCRIPTION
Form AEWOVWJ
OMB No. 0704 -018C
EW 0.31s: 4“” 30, 1
TITLE 2. IDENTIFICATION NUMBER
InformationSystemsAccreditationDm2umantation
DI-ADMN-80239
DESCRIPTIONI.PURPOSE
3.1. ThE Data IterIDescription(DID)identifiesthe formatand contentrequirem coveredby the swcific and discretetaskfor the contractorto preparethisdata prcductidentifiedin the contractStatementof Work (SOW).
(continuadon page 2)
APPROVAL DATE 5. oFFICE OF PRIMARY RESPONSIBILITY (OPR) 6., DTIC REQUIRED 8b. G!DEP REOUll
:YYMMOO)
860915 A/ASSH-RMT
APPLICATION/ lNTERRELATlONSHIP
7.1. This DID cortati the fomt and content preparationinstructionfor the da productqeneratedby the specificand discretetaskrequirematfor thisdata includedin the contract.
7.2. This DID is applicableto all informationsystemsas SIXXified in AR 380-38C
7.3. ThisDID supersedesDI-s-1831.
APPROVAL LIMITATION 9.. APPLICABLE FORMS 9b, AIJSC NUMBER
A3963
PREPARATION INSTRUCTIONS
10.1 Contract. Thisdata is aeneratedby the contractwhichcontainsa q=ecific discretev.wk tasktm developthisdata mxxluct.
10.2 Contentand Format. Contentand Formatshal1 ke as describedbelow:
10.2.1 SectionI - ExecutiveSumrary.
a. Key Vulnerabilities.A summaryof key vulnerabilitiesidemtified during riskanalvsisprocessand exceptionalcircumstancespsrt.ainingto operatingthe system(s)in the facilityat the statedlevel. A discussionof actiOnsMen to minimizetheserisksmustte includd alongwitha descriptionof the exceptional circumstances,if any, justifyingoperationin thisenvironmsmt.
b. Male of Greration. De$cribsoptionsand proceduresin use at the facilit as follows:
(1) Icg-onattemots.
‘(2) Procedures,if processingin a lowersensitivitylevel.
(3) Majorsoftwaresystems,executive,and applications.
(4) Use of dataencryptionif any.
(5) Securityfeatuxes.
(6) Use of localnatiomls.
Form 18S4, FEB 85 .,.”,0”. e.. mo. !. “..”!
PAc3E~ —P~G=OF 3 Source: https://assist.dla.mil -- Downloaded: 2015-01-29T15:54Z
Check the source to verify that this is the current version before use.
3.
3.2.
DI-ADMN-80239
DEXRIFTICN/PUPXXE (cent‘d)
This DID definesthe dab requiredto obtaininformationsystemaccreditation in accordancewith AR 380-380,“AutrnnationSecurity.” Regulationcan be obtained from: ccmmnder, USAAGPublicationsCenter,2800-stern Blvd.,~l~re, ~ 21220-2896.
10. PREPARATIONIWSTRUCTTXXS(Cent’d)
10.2.1. (rent‘d)
c. WaiversRequested. Identifytitle,na and dateof any waiversgranted or rquestd for the Xormtion systi.
10.2.2. SectionII - AccreditationObjective.
a. Eackgrcund.Cesmiptionof relevanteventaleadingto and the objectiveof thisaccreditation;tbe essentialnatureof the missionand otherfactorsrrotivating thisaccreditaticm.otheroperationalalternatives(forexample,splitsystem, mcuremnt of separab cxxmuter)conaiderexlpriorto selectingthis courseofP action. Rationalefor rejectingotheropxational alternatives.
b: proposedsystem@sration. Detailedinformationconcerningfeaturesof operatloml and securitymalesto be i@em.nted, ti includedescriptionof syst~ (S) hardwareand software,significantapplications,and systeminterfaces.
10.2.3. SectionIII - Risk ManagementReview. Threatidentification(allexternal and internalthreats)will includea detailedvulnerabilityanalysis,risk assessmnt, and countermeasuresasscciatd with each threat.
10.2.4. SectionIV - Inplemmtationof SecurityControlsand Countemeasures.
a. SecurityFeatures. ~ibe h detailthe followingin existence:
(1) Security!4anagemnt.
(2) software.
(3) Hardmre.
(4) Procedural.
(5) Cannunications.
(6) Persoxlw?l.
(7) Dwunlentation.
(8) Physicaland Environwntal.
Page 2 of 3 pages
DI-ADMN-80239
10. PREPARATI~ INSTRUCrICNS(Cent’d)
b. I@emntation Procedures.Describereconmmded countemneasuresand alternatives,cost and tineestimatesto implementthesemwwres, milestones,task interdependenciesand initialand finaloperationalcapabilities.
c. ProblemAreas. Identifyproblemspotentiallydisruptiveof system accreditationtasks,processes,and schedules.
10.2.5. SectionV - System(s)Testand Evaluation(ST&E)Plan.
a. Test Requiremmts. A statementof the purpose,scow, objectivesand requirementsof the test.
b. TestMethodology.Identifythe follcwing:
(1) Test na.hcd to be used.
(2) Investigativeand analyticalapproachesto ke used.
(3) Supportrequirements,if any.
10.2.6. Appendices.The followingappendicesshal1 k included:
a. Glossarycontaininga listof abbreviationsor term.
b. Additionalappmdices shallbe used to furnishexamples,charts,exhibits, flowcharts,and scenario[s)thaturovideadditionalsupportivedata.
Page 3 of 3 Pages
File details come from the government source that posted it. Updated .