DLA Expot Ctrl Tech Data Mgmt Questionnaire.pdf

PDF 201 KB Posted

Attached to
JPACE, LJPACE, and Repair Kits Federal contract opportunity
Solicitation number
SPE1C1-21-R-0072
Issued by
Defense Logistics Agency Troop Support Clothing and Textiles

About this file

This document contains a questionnaire for firms interested in receiving export-controlled technical data for the Defense Logistics Agency's solicitation for JPACE, LJPACE, and repair kits. The questionnaire requires firms to verify their compliance with DFARS clauses regarding protected data and their documentation of a NIST SP 800-171 cybersecurity assessment. It also requires the data custodian to confirm reviewing training on properly handling export-controlled technical data. Firms must provide the physical address and MAC address of the computer storing the technical data, which for American and Canadian firms must be located in the United States and Canada, respectively. Authorized representatives for both the company and its data custodian must sign the questionnaire prior to it being returned to the Defense Logistics Agency.

View the file

Other files for this federal contract opportunity

Show all 12

On GovTribe

Work with this file on GovTribe

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

DEFENSE LOGISTICS AGENCY

HEADQUARTERS

8725 JOHN J. KINGMAN ROAD

FORT BELVOIR, VIRGINIA 22060-6221

DLA EXPORT CONTROL TECHNICAL DATA MANAGEMENT QUESTIONNAIRE

Please complete the questionnaire, sign/date and return to JCP-ADMIN@DLA.MIL

CAGE Code: Company's Physical Address:

(1) Export-controlled technical data furnished in cFolders is both “controlled technical information” and “covered defense information” as those terms are defined in DFARS clauses 252.204-7008, 252.204-7009, and 252.204-7012. All three of these DFARS clauses are included in DLA's Master Solicitation for Automated Simplified Acquisitions. Is your company in full compliance with the terms of these clauses?

[☐] Our company is in compliance. [☐] Our company is not incompliance.

(2) Does your company have a National Institute of Standards and Technology (NIST) Special Publication (SP) 800- 171 cybersecurity assessment documented on the Supplier Performance Risk System (SPRS) at https://www.sprs.csd.disa.mil/ in accordance with DFARS Case 2019-D041 “Assessing Contractor Implementation of Cybersecurity Requirements” and DLA's Master Solicitation for Automated Simplified Acquisitions? Additional information on safeguarding covered defense information is located at https://dodprocurementtoolbox.com/.

[☐] Our company’s NIST SP 800-171 assessment is documented on SPRS.

[☐] Our company’s NIST SP 800-171 assessment is not documented on SPRS.

(3) Is your company's data custodian, (i.e. the person responsible for downloading export-controlled data from cFolders and protecting it from unauthorized dissemination) also the individual who signed your company's Joint Certification Program (JCP) certificate (i.e. DD Form 2345)?

[☐] Our data custodian is our JCP signatory. [☐] Our data custodian is not our JCP signatory.

(4) Has your company's data custodian reviewed the training titled “Proper Handling of DoD Export Controlled Technical Data” and does he or she understand the company's obligations to protect export-controlled data from unauthorized distribution?

[☐] Our company's data custodian has reviewed and understands the training titled “Proper Handling of DoD Export Controlled Technical Data.”

[☐] Our company's data custodian either has not reviewed and/or does not understand the training titled “Proper Handling of DoD Export Controlled Technical Data.”

(5) Please provide the physical address of the personal computer or server where the export-controlled data will be stored. Also, please provide the Media Access Control (MAC) address of the personal computer or server. For American firms, the personal computer or server must be physically located in the United States. Individuals with access to the designated personal computer or server must be United States citizens or lawful permanent residents of the United States. For Canadian firms, the personal computer or server must be physically located in Canada. Individuals with access to the designated personal computer or server must be Canadian citizens or lawful permanent residents of Canada.

Physical Address of Personal Computer or Server

MAC Address of Personal Computer or Server

(6) Required Signatures:

(a) Authorized Company Representative (As it appears on your DD Form 2345, Block 6):

(Print)

(Signature) Date:

(b) Company Data Custodian (As it appears on your DD Form 2345, Block 3):

(Print) (Signature) Date:

mailto:JCP-ADMIN@DLA.MIL https://www.sprs.csd.disa.mil/ https://www.sprs.csd.disa.mil/ https://dodprocurementtoolbox.com/

Please complete the questionnaire, sign/date and return to JCP-ADMIN@DLA.MIL CAGE Code: Company's Physical Address:
[☐] Our company is in compliance. [☐] Our company is not incompliance.

File details come from the government source that posted it. Updated .