DRAFT - PWS Attachment 2 - DD FORM 1423-1 -System Security Plan.pdf
PDF 653 KB Posted
- Attached to
- Clinical Reference Laboratory Testing Services
- Solicitation number
- HT001526RE001DRAFT
- Issued by
-
Defense Health Agency
About this file
This is a DD Form 1423-1, Contract Data Requirements List (CDRL), dated February 2001, documenting a single data item requirement for a federal contract.
The required data item (P170) is a System Security Plan and Associated Plans of Action for a Contractor's Internal Unclassified Information System, with an initial subtitle designation. The requiring office is THP/HPOSS, and submission must be made to the Contracting Officer via the DOD Safe website. The first submission is due within 30 calendar days after contract award, with subsequent annual submissions due 30 calendar days before each option period anniversary date. No specific file format is mandated, and DD Form 250 reporting is not required. The content must include a description of system boundaries, system environments of operation, NIST SP 800-171 security requirements implementation details, and plans to correct deficiencies and reduce vulnerabilities in the contractor's information system. The contractor may reference the CUI SSP template available at https://doi.org/10.6028/NIST.SP.800-171r3 and utilize NIST SP 800-171A for assessment objectives to demonstrate depth and rigor of security requirement compliance. The authority for this requirement is cited in the Performance Work Statement paragraph of the contract.
View the file
Other files
Show all 16
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
DD FORM 1423-1, FEB 2001
CONTRACT DATA REQUIREMENTS LIST
(1 Data Item)
PREVIOUS EDITION MAY BE USED.
Form Approved OMB No. 0704-0188
The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services and Communications Directorate (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.
A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:
TDP ________ TM _______ OTHER
D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR
1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE
4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE
7. DD 250 REQ
8. APP CODE
9. DIST STATEMENT
REQUIRED
10. FREQUENCY
11. AS OF DATE
12. DATE OF FIRST SUBMISSION
13. DATE OF SUBSEQUENT
SUBMISSION
14. DISTRIBUTION
a. ADDRESSEE
b. COPIES
Draft Final
Reg Repro
15. TOTAL
16. REMARKS
17. PRICE GROUP
18. ESTIMATED
TOTAL PRICE
G. PREPARED BY H. DATE I. APPROVED BY J. DATE
Page of Pages
| 1_DATA_ITEM_NO: P170 |
| 2_TITLE_OF_DATA_ITEM: System Security Plan and Associated Plans of Action for a Contractor’s Internal Unclassified Information System |
| 3_SUBTITLE: Initial |
| 4_AUTHORITY_Data_Acquisit: |
| 5_CONTRACT_REFERENCE: See PWS paragraph |
| 6_REQUIRING_OFFICE: THP/HPOSS |
| 7_DID_250_REQ: |
| 8_APP_CODE: |
| DIST_STATEMENT: B |
| 10_FREQUENCY: See Block 16 |
| 11_AS_OF_DATE: See Block 16 |
| 12_DATE_OF_FIRST_SUBMISSI: See Block 16 |
| 13_DATE_OF_SUBSEQUENT_SUB: See Block 16 |
| addressee1: Submit to the KO |
| draft1: |
| reg1: |
| repro1: |
| addressee2: via the DOD Safe |
| draft2: |
| reg2: |
| repro2: |
| addressee3: website. |
| draft3: |
| reg3: |
| repro3: |
| addressee4: |
| draft4: |
| reg4: |
| repro4: |
| addressee5: |
| draft5: |
| reg5: |
| repro5: |
| addressee6: |
| draft6: |
| reg6: |
| repro6: |
| addressee7: |
| draft7: |
| reg7: |
| repro7: |
| addressee8: |
| draft8: |
| reg8: |
| repro8: |
| addressee9: |
| draft9: |
| reg9: |
| repro9: |
| addressee10: |
| draft10: |
| reg10: |
| repro10: |
| addressee11: |
| draft11: |
| reg11: |
| repro11: |
| addressee12: |
| draft12: |
| reg12: |
| repro12: |
| addressee13: |
| draft13: |
| reg13: |
| repro13: |
| addressee14: |
| draft14: |
| reg14: |
| repro14: |
| addressee15: |
| draft15: |
| reg15: |
| repro15: |
| addressee16: |
| draft16: |
| reg16: |
| repro16: |
| addressee17: |
| draft17: |
| reg17: |
| repro17: |
| addressee18: |
| draft18: |
| reg18: |
| repro18: |
| addressee19: |
| draft19: |
| reg19: |
| repro19: |
| addressee20: |
| draft20: |
| reg20: |
| repro20: |
| addressee21: |
| draft21: |
| reg21: |
| repro21: |
| addressee22: |
| draft22: |
| reg22: |
| repro22: |
| addressee23: |
| draft23: |
| reg23: |
| repro23: |
| addressee24: |
| draft24: |
| reg24: |
| repro24: |
| addressee25: |
| draft25: |
| reg25: |
| repro25: |
| addressee26: |
| draft26: |
| reg26: |
| repro26: |
| addressee27: |
| draft27: |
| reg27: |
| repro27: |
| addressee28: |
| draft28: |
| reg28: |
| repro28: |
| addressee29: |
| draft29: |
| reg29: |
| repro29: |
| addressee30: |
| draft30: |
| reg30: |
| repro30: |
| addressee31: |
| draft31: |
| reg31: |
| repro31: |
| addressee32: |
| draft32: |
| reg32: |
| repro32: |
| addressee33: |
| draft33: |
| reg33: |
| repro33: |
| addressee34: |
| draft34: |
| reg34: |
| repro34: |
| addressee35: |
| draft35: |
| reg35: |
| repro35: |
| addressee36: |
| draft36: |
| reg36: |
| repro36: |
| addressee37: |
| draft37: |
| reg37: |
| repro37: |
| addressee38: |
| draft38: |
| reg38x: |
| repro38: |
| total_draft: |
| total_repro: |
| 16_REMARKS: FIRST SUBMISSION: |
Frequency: One Time Reporting Period Start Date: Contract Award Due Date: Within 30 calendar days after contract award
SUBSEQUENT SUBMISSION:
Frequency: Annual (Option Period) Reporting Period Start Date: Continue from first submission Due Date: 30 calendar days before the anniversary date during each option period.
PII/PHI: No FILE FORMAT: No specific file format required.
CONTENT DETAILS:
The system security plan (SSP) shall include a description of system boundaries, system environments of operation, how the NIST SP 800-171 security requirements are implemented or how Contractor plans to meet the security requirements, and the relationships with or connections to other systems. Any associated plans of action shall include a description how the Contractor will correct deficiencies and reduce or eliminate vulnerabilities in the Contractor’s information system related to the contract. Recommend using CUI SSP template available at https://doi.org/10.6028/NIST.SP.800-171r3.
Contract Reference: See PWS paragraph
Assessment Objectives: The Contractor may utilize the NIST SP 800-171A to display the depth and rigor of their assessment of each of the NIST SP 800-171 security requirements.
| 17_PRICE_GROUP: |
| ESTIMATED_TOTAL_PRICE: |
| G_PREPARED_BY: |
| H_DATE: |
| 1_APPROVED_BY: |
| J_DATE: |
| reg38t: |
| A_CONTRACT_LINE_ITEM_NO: |
| B_EXHIBIT: |
| DSYSTEMITEM: |
| E_CONTRACTPR_NO: |
| FCONTRACTOR: |
| of_pages: 1 |
| Reset: |
| TDP: |
| OTHER: |
| A: |
| Contract Line: |
| B: |
| Exhibit: |
| D: |
| System: |
| E: |
| Contract/PR: |
| Contractor: |
| 16: |
| Remarks: |
| Page number of this page: 1 |
| Page number: |
| TD: |
| TM: |
| Other: |
| Remarks-2nd Pg (2): |
| Page number-2nd Pg (2): |
| Pages: |
| Remarks-2nd Pg (3): |
| Page number-2nd Pg (3): |
| Remarks-2nd Pg (5): |
| Page number-2nd Pg (5): |
File details come from the government source that posted it. Updated .