Exhibit B - CDRLs B001 B002 B003 B004.pdf

CONTRACT DATA REQUIREMENTS LIST

(1 Data Item)

Form Approved OMB No. 0704-0188

Public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to Department of Defense, Washington Headquarters Services, Directorate for Information Operations and Reports (0701-0188), 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 22202-4302. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information it does not display a currently valid OMB control number. Please DO NOT RETURN your form to the above address. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

9999 B TDP TM OTHER SESS

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

Project Manager, –Intelligence Systems & Analytics (PM IS&A) Cybersecurity Support Services

TBD TBD

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE 17. PRICE GROUP

B001 Engineering Change Proposal

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE 18. ESTIMATED

TOTAL PRICE

DI-SESS-80639E PWS 1.8.7 and 4.2.4 SFAE-IEW-IA

7. DD 250 REQ 9.DIST STATEMENT

REQUIRED

10. FREQUENCY 12. DATE OF FIRST

SUBMISSION

14. DISTRIBUTION

LT SEE BLOCK 16 SEE BLOCK 16 b. COPIES

8. APP CODE D 11. AS OF DATE 13. DATE OF SUBSEQUENT

SUBMISSION

a. ADDRESSEE

Draft Final

A SEE BLOCK 16 SEE BLOCK 16

Reg

Repr o

16. REMARKS:

BLOCK 4: In addition to the requirement of DI-SESS-80639E, the contractor shall include all the information required by the SOW. Contractor format acceptable, unless there is a required enclave or governance process format.

BLOCK 9: Distribution Statement D. Distribution authorized to the DoD and DoD contractors only. Reason: To protect technical/operational data or information. Other requests shall be referred to SFAE-IEW-IA.

BLOCK 10: Frequency of ECP submittals is dependent on the required number of changes to the system or baseline architecture(s).

BLOCKS 11, 12, AND 13: Engineering Change Proposal(s) will be submitted as required so that the Government can review and approve changes that impact(s) the configuration baseline(s). Reports shall be submitted within (7) working days of determining that an engineering change is required.

BLOCK 14: Reports shall be disseminated via electronic mail. Address to be provided by government.

SFAE-IEW-IA

* ELECTRONIC

SUBMITTAL

15. TOTAL 2

G. PREPARED BY

Lisa Kash

H. DATE

I. APPROVED BY

J. DATE

Form Approved OMB No. 0704-0188

Public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to Department of Defense, Washington Headquarters Services, Directorate for Information Operations and Reports (0701-0188), 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 22202-4302. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information it does not display a currently valid OMB control number. Please DO NOT RETURN your form to the above address. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

9999 B TDP TM OTHER MGMT

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

Project Manager, –Intelligence Systems & Analytics (PM IS&A) Cybersecurity Support Services

TBD TBD

B002 Risk Management Framework (RMF) Package Deliverables

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE 18. ESTIMATED

DI-MGMT-82001A PWS Para 1.8.8, 4.2.4, 4.3.3, and 4.4.1 SFAE-IEW-IA

7. DD 250 REQ 9.DIST STATEMENT

REQUIRED

10. FREQUENCY 12. DATE OF FIRST

SUBMISSION

14. DISTRIBUTION

LT ASREQ SEE BLOCK 16 b. COPIES

8. APP CODE D 11. AS OF DATE 13. DATE OF SUBSEQUENT

SUBMISSION

a. ADDRESSEE

Draft Final

SEE BLOCK

N/A SEE BLOCK 16

16. REMARKS:

BLOCK 8: Format. The RMF artifacts shall be delivered in a format approved by the enclave specific authorization system(s) and/or governance processes.

Submissions shall consist of a draft and final.

BLOCK 9: Distribution Statement D. Distribution authorized to the DoD and DoD contractors only. Reason: To protect technical/operational data or information. Other requests shall be referred to SFAE-IEW-IA.

BLOCKS 12 and 13: Continuous monitoring and assessment is required for all security controls for the system, with POA&M updates to be completed at least monthly. The contractor shall deliver the documents within timeframes to be established in order to achieve Authorization To Operate with conditions (ATO w/CON) (formerly Interim Authority to Test (IATT)) or Authorization to Operate (ATO). Delivery of the documents within timeframes to be established in order achieve ATO w/conditions and/or ATO by program need date(s).

SFAE-IEW-IA

ACC-APG (CCAP-CCC)

*ELECTRONIC SUBMITTAL

15. TOTAL 3

Form Approved OMB No. 0704-0188

Public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to Department of Defense, Washington Headquarters Services, Directorate for Information Operations and Reports (0701-0188), 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 22202-4302. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information it does not display a currently valid OMB control number. Please DO NOT RETURN your form to the above address. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

9999 B TDP TM OTHER MISC

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

Project Manager, –Intelligence Systems & Analytics (PM IS&A) Cybersecurity Support Services

TBD TBD

B003 Software/Firmware Change Request

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE 18. ESTIMATED

DI-MISC-81807 PWS 1.8.9 and 4.2.4 SFAE-IEW-IA

7. DD 250 REQ 9.DIST STATEMENT

REQUIRED

10. FREQUENCY 12. DATE OF FIRST

SUBMISSION

14. DISTRIBUTION

LT SEE BLOCK 16 SEE BLOCK 16 b. COPIES

8. APP CODE D 11. AS OF DATE 13. DATE OF SUBSEQUENT

SUBMISSION

a. ADDRESSEE

Draft Final

16. REMARKS:

Contractor format acceptable, unless there is a required enclave or governance process format.

BLOCK 9: Distribution Statement D. Distribution authorized to the DoD and DoD contractors only. Reason: To protect technical/operational data or information. Other requests shall be referred to SFAE-IEW-IA.

BLOCK 10: Frequency of Software/Firmware Change Requests submittals is dependent on the required number of changes to the system or baseline architecture(s).

BLOCKS 11, 12, AND 13: Software/Firmware Change Request(s) will be submitted as required so that the Government can review and approve changes that impact(s) the configuration baseline(s). Reports shall be submitted within

(7) working days of determining that a software/firmware change is required.

BLOCK 14: Reports shall be disseminated via electronic mail. Address to be provided by government.

SFAE-IEW-IA

* ELECTRONIC

Form Approved OMB No. 0704-0188

Public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to Department of Defense, Washington Headquarters Services, Directorate for Information Operations and Reports (0701-0188), 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 22202-4302. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information it does not display a currently valid OMB control number. Please DO NOT RETURN your form to the above address. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

9999 B TDP TM OTHER MISC

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

Project Manager, –Intelligence Systems & Analytics (PM IS&A) Cybersecurity Support Services

TBD TBD

B004 TECHNICAL REPORT – STUDY/SERVICES AFTER ACTION REPORT

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE 18. ESTIMATED

DI-MISC-80508B PWS 1.8.10, 4.2.4, 4.3.3, and 4.4.1 SFAE-IEW-DC

7. DD 250 REQ 9.DIST STATEMENT

REQUIRED

10. FREQUENCY 12. DATE OF FIRST

SUBMISSION

14. DISTRIBUTION

LT SEE BLOCK 16 SEE BLOCK 16 b. COPIES

8. APP CODE D 11. AS OF DATE 13. DATE OF SUBSEQUENT

SUBMISSION

a. ADDRESSEE

Draft Final

16. REMARKS:

BLOCK 4: In addition to the requirement of DI-MISC 80508B, the contractor shall include all the information required by the PWS. Contractor format acceptable.

BLOCK 9: Distribution Statement D. Distribution authorized to the DoD and DoD contractors only. Reason: To protect technical/operational data or information. Other requests shall be referred to SFAE-IEW-IA.

BLOCK 10: Frequency of submittals is dependent on identified issues and follow-up actions, as needed.

BLOCKS 11, 12, AND 13: After Action Report shall be submitted to the government within 10 business days of event or trip where issue(s) were identified.

BLOCK 14: Reports shall be disseminated via electronic mail. Address to be provided by government.

SFAE-IEW-DC

* ELECTRONIC