The file's text, extracted by GovTribe without its formatting.
FA2517-15-R-7001
Appendix A, Publications
NORAD and USNORTHCOM (N-NC) Information Technology Service Management (N2ITSM)
Peterson AFB, CO
Performance Work Statement
(PWS)
Appendix A - Publications
Current as of: 1 February 2015
APPENDIX A - PUBLICATIONS
Department of Defense publications are available at http://www.hafdash1.hq.af.mil Air Force (AF) publications are available at http://www.e-publishing.af.mil AF special security instructions are available at https://www.afca.scott.af.mil/ip AF Space Command publications are available at http://e-publishing.af.mil FOUO publications will be made available through the SQAE.
Federal Regulations
| FAR |
| Federal Acquisition Regulation |
| GISA |
| Government Information Security Act of 2000 |
| Security Act of 2000 |
| U.S. Congress' Cyber Security Act of 2000 |
| H.R. Bill: Cyber Security Information Act of 2000 |
| Introduction of the Cyber Security Information Act of 2000 |
| H.R. 1259 |
| Computer Security Enhancement Act of 2001 |
| H.R. 2281 |
| Digital Millennium Copyright Act (DCMA) |
| H.R. 2458-48 |
| Federal Information Security Management Act of 2002(Title III of E-Gov) |
| OMB M-02-01 |
| Guidance for Preparing and Submitting Security Plans of Action and Milestones |
| FISMA Act of 2002 |
| Federal Information Management Act (FISMA) of 2002 |
| Public Law 93-579 |
| Privacy Act of 1974 |
| Public Law 100-235 |
| Computer Security Act of 1987 |
Department of Defense Directives (DoDD)
| DoDD 3020.26 |
| Defense Continuity Program (DCP) |
| DoDD 5100.1 |
| Functions of the Department of Defense and its Major Components |
| DoDD 5200.1 |
| DoD Information Security Program |
| DoDD 5200.2 |
| Personnel Security Program |
| DoDD 5210.50 |
| Unauthorized Disclosure of Classified Information to the Public. |
| DoDD 5220.22 |
| DoD Industrial Security Program |
| DoDD 5230.9 |
| Clearance of DoD Information for Public Release. |
| DoDD 5400.7-R |
| DoD Freedom of Information Act Program |
| DoDD 8000.01 |
| Global Information Grid Overarching Policy Certified Current June 22, 2009 |
| DoDD 8100.1 |
| Global Information Grid (GIG) Overarching Policy |
| DoDD 8100.02 |
| Use of Commercial Wireless Devices, Services and Technologies in the Department of Defense (DoD) Global Information Grid (GIG) |
| DoDD 8115.1 |
| Information Technology Portfolio Management |
| DoDD 8320.2 |
| Data Sharing in a Net-Centric Department of Defense |
| DoDD 8500.01E |
| Information Assurance (IA) |
| DoDD 8500.2 |
| Information Assurance (IA) Implementation |
| DoDD O 8530.1 |
| Computer Network Defense (CND) Directive |
| DoDD 8570.01 |
| Information Assurance Training, Certification and Workforce Management |
| DoDD 8581.1 |
| Information Assurance (IA) Policy for Space Systems Used by the Department of Defense |
| DoDD 8910.1-M |
| DoD Procedures For Management Of Information Requirements |
Department of Defense Instructions (DoDI)
| DoDI 3020.37 |
| Continuation of Essential DoD Contractor Services During Crisis |
| DoDI 4640.14 |
| Base and Long-Haul Telecommunications Equipment and Services |
DoDI 4660.X DoDI 8523.01 Communications Security (COMSEC)
| DoDI 5120.4 |
| Electronic Newspaper Policy |
| DoDI 5230.29 |
| Security and Policy Review of DoD Information for Public Release. |
| DoDI 7930.2 |
| ADP Software Exchange and Release |
| DoDI 8100.3 |
| Department of Defense (DoD) Voice Networks. This Instruction implements Section 353 of Public Law 107-314 and DoD Directive 8000.01. |
DoDI 8100.X DoDI 8410.02 NetOps for the Global Information Grid (GIG)
| DoDI 8110.1 |
| Multi-National Information Sharing Networks Implementation. This Instruction implements policy under DoD Directive 8000.01. |
| DoDI 8500.2 |
| Information Assurance (IA) Implementation |
| DoDI 8510.01 |
| DoD Information Assurance Certification and Accreditation Process (DIACAP) |
| DoDI 8551.1 |
| Ports, Protocols, and Services Management (PPSM) |
| DoDI 8570.01-M |
| Information Assurance Workforce Improvement Program |
| DoDI 8580.1 |
| Information Assurance (IA) in the Defense Acquisition System |
Department of Defense (DoD) Manuals
| DoD 5220.22-M |
| National Industrial Security Program (NISPOM) |
| DoD O 8530.1-M |
| Computer Network Defense (CND) Service Provider Certification and Accreditation Process |
| DoD 8570.01-M |
| Information Assurance Training, Certification, and Workforce Program Manual |
Department of Defense (DoD) Pamphlets
| DoD 5200.1-PH |
| DoD Guide to Marking Classified Documents |
| DoD 5200.1-PH-1 |
| Classified Information Nondisclosure Agreement (SF-312) |
Department of Defense (DoD) Regulations
| DoD 5200.1-R |
| DoD Information Security Program |
| DoD 5200.2-R |
| Personnel Security Program |
| DoD 5220.22-R |
| Industrial Security Regulation |
Department of Defense (DoD) Supplements
| DoD 5220.22-S |
| COMSEC Supplement to Industrial Security Manual for Safeguarding Classified Information |
NORAD-USNORTHCOM Policy, Instructions and Plans
NORAD-USNORTHCOM CONOPS
NC CAPSTONE
NORAD-USNORTHCOM JMETS
NORAD-USNORTHCOM Strategy Plan
Homeland Security Presidential Directives (HSPD)
| HSPD-7 |
| Critical Infrastructure Identification, Prioritization and Protection |
HSPD-12
Chairman of the Joint Chiefs of Staff Instruction (CJCSI)
| CJCSI 3170.01E |
| Joint Capabilities Integration and Development System |
| CJCSI_6211.02C |
| Defense Information System Network (DISN): Policy and Responsibilities |
| CJCSI 6212.01D |
| Interoperability and Supportability of Information Technology and National Security Systems Certified Current Mar 14, 2007 |
| CJCSI 6215.01B |
| Policy for Department of Defense Voice Networks |
| CJCSI 6510.01 |
| Information Assurance (IA) and Computer Network Defense (CND) |
| CJCSI 6510.01D |
| Information Assurance (IA) and Computer Network Defense (CND) |
| CJCSI_6510.01E |
| Information Assurance (IA) and Computer Network Defense (CND) |
Chairman of the Joint Chiefs of Staff Manual (CJCSM)
| CJCSM 3150.07A |
| Joint Reporting Structure Communications Status |
| CJCSM 5760.01, Vol I |
| Joint Staff And Combatant Command Records Management Manual-Volume 1:Procedures |
| CJCSM 5760.01, Vol II |
| Joint Staff And Combatant Command Records Management Manual-Volume 2:Disposition Schedule |
| CJCSM 6510.01 |
| Information Assurance (IA) and Computer Network Defense (CND) Volume 1 (Incident Handling Program) |
Defense Information Systems Agency Circulars (DISAC)
| DISAC 300-110-3 |
| DISN Long-Haul Security Classification Guide |
| DISAC 310-65-1 |
| Circuit and Trunk File Data Elements and Codes Manual of the Global Information Grid (GIG) |
| DISAC 310-130-1 |
| Submission of Telecommunications Service Requests |
| DISAC 310-130-4 |
| Defense User’s Guide to the Telecommunications Service Priority (TSP) System |
| DISAC 310-130-5 |
| Telecommunications Requirements |
Air Force Special Security Instructions (AFSSI)
AFSSI 3039
(FOUO)
Operational Security Instruction for the Fortezza Card Certification Authority Workstation (CAW)
| AFSSI 5009 (FOUO) |
| Information Protection (IP) Interim Toolset |
| AFSSI 5020 (FOUO) |
| Remanence Security |
| AFSSI 5021 (FOUO) |
| Time Compliance Network Order (TCNO) Management and Vulnerability and Incident Reporting |
| AFSSI 5027 (FOUO) |
| Network Security Policy |
Air Force Instructions (AFI)
| AFI 31-601 |
| Information Security Program Management |
| AFI 33-112 |
| Automatic Data Processing Equipment (ADPE) Management |
| AFI 33-116 |
| Long-Haul Telecommunications Management |
| AFI 33-332 |
| Privacy Act Program |
| AFI 37-131 |
| Freedom of Information Act Program |
| AFI 37-132 |
| Air Force Privacy Act Program |
| AFI 37-138 |
| Records Disposition – Procedures and Responsibilities |
Air Force Manuals (AFMAN)
| AFMAN 23-110 |
| Basic USAF Supply Manual |
| AFMAN 23-220 |
| Report of Survey Process |
| AFMAN 37-123 |
| Management of Records |
| AFMAN 37-139 |
| Records Disposition Schedule |
Military Handbooks (MIL-HDBK)
| MIL-HDBK-61A |
| Configuration Management Guidance |
NORAD Instructions
| NI 10-3 | |
| Mission Integrity, Change Control Management, And Test Control For The Integrated Tactical Warning And Attack Assessment (lTW/AA) System |
NORAD NORTHCOM Headquarters Operating Instructions (NNCHOI)
| NNCHOI 33-146 |
| Computer Systems Management |
NORAD NORTHCOM Headquarters Instructions (NNCI)
| NNCI33-139 |
| Internet Protocol (IP) Address Management |
| NNCI33-140 |
| Passwords w/Administrative Changes |
| NNCI33-141 |
| Information Assurance/Computer Network Defense w/Administrative Changes |
| NNCI33-143 |
| Information Assurance Vulnerability Management, Current and Essential |
| NNCI33-148 |
| Information Operations Condition (INFOCON) |
| NNCI33-152 |
| Limited Personal Use of Government Office Equipment Including Information Technology, Current and Essential |
| NNCI33-157 |
| Wireless Information System Security |
Communication Tasking Orders (CTOs)
| CTO 08-008A |
| JTF-GNO CTO 08-008A, Policy on Use of Department of Defense (DoD) Standard Notice and Consent Banner and User Agreement |
| CTO 08-005 |
| JTF-GNO CTO 08-005, Directive for Automated Scanning, Remediation and Reporting of Network Vulnerabilities throughout the DOD Global Information Grid (GIG) |
| CTO 09-002A Change 1 |
| COMMUNICATION TASKING ORDER (CTO) 09-002A - DIRECTIVE FOR DISABLING AUTORUN THROUGHOUT THE DoD GLOBAL INFORMATION GRID(GIG) |
| CTO 10-008 |
| JTF-GNO CTO 10-008 Responsible and Effective Use of Internet-based Capabilities (U/FOUO) |
| CTO 10-004A |
| JTF-GNO CTO 10-004A, Removable Flash Media device implementation within and between Department of Defense (DoD) networks. |
| CTO 10 - 001 |
| JTF-GNO CTO 10-001, Directing further implementation of the Command Cyber Readiness Inspection (CCRI) as announced in CAM 09-039 (U/FOUO) |
Other
| STRATCOM Directive 527-1 |
| INFOCON |
| DoD Web Policies |
| This web page provides information on DoD Web Policies and Guidelines |
| NSA Certified Products |
| Trusted Product Evaluation Program,Commercial Product Evaluations |
| DISA Security Configuration Guides |
| DISA FSO Security Configuration Guidelines |
| DoD Mobile Code Guides |
| Current List of DoD Mobile Code Guidance |
| Compliance with DoD Web Site Administration Policy |
| Assistant Secretary of Defense Memorandum |
| Correction of DoD Web Site Administration Policy |
| Amendment and Corrections to Web Site Administration Policies & Procedures - Updated 11 January 2002 |
| DISA Web Policy (.gov & .mil only) |
| DISA Web Policy Handbook |
| NSA Security Recommendation Guides |
| NSA Security Configuration Guides Library |
| NSA Certified Products |
| Trusted Product Evaluation Program, Commercial Product Evaluations |
| NIST SP 800-53A |
| Guide for Assessing the Security Controls in Federal Information Systems (replaces NIST SP 800-26) |
A-2 image1.jpeg
