DID_Cyber_Defense_Report_OT-14-37500.docx
DOCX document 30 KB Posted
- Attached to
- Information Technology Capabilities Contract (ITCC) II Federal contract opportunity
- Solicitation number
- FA4600-14-R-0017
About this file
This Data Item Description outlines the required format and content for a Cyber Defense Report to be delivered under Air Force contract number FA4600-14-R-0017 for information technology capabilities support services. The report must address the contractor's implementation of the twenty critical security controls from the SANS Institute and any additional details regarding the security posture of systems housing Air Force non-public information. It shall include an introduction, narrative status updates on existing security issues and concerns, as well as new issues identified. The report format and numbering specified in the DID must be followed.
The related federal contract opportunity notice provides details for ITCC II contract support for United States Strategic Command under solicitation number FA4600-14-R-0017. A technical library is available and contractors who previously received a draft version should request an update from the Contracting Officer and Contract Specialist. New contractors must follow instructions in a separate technical library notification document for access. The Air Force Air Combat Command is the contracting agency.
DID
View the file
Other files for this federal contract opportunity
Show all 50
Information Technology Capabilities Contract (ITCC) II has more files on GovTribe.
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
OT-14-37500
DATA ITEM DESCRIPTION
Title: Cyber Defense Report
| Number: OT-14-37500 | Approval Date: 20140721 |
| AMSC Number: N/A | Limitation: FA4600-14-R-0017 |
| DTIC Applicable: N/A | GIDEP Applicable: N/A |
Office of Primary Responsibility: F/ACC Applicable Forms: N/A
Use/relationship: The Cyber Defense Report describes how the contractor's environment safeguards DOD non-public information resident on or transiting the contractor's unclassified information systems from unauthorized access and disclosure. This DID contains the format, content, and intended use information for the data product resulting from the work task described in the contract PWS. This DID is for one-time use for solicitation FA4600-14-R-0017.
Requirements:
1. Reference document. SANS (SysAdmin, Audit, Network, Security) Institute’s Twenty Critical Security Controls for Effective Cyber Defense (http://www.sans.org/critical-security-controls).
2. Format. The Cyber Defense Report shall be in contractor’s format.
2.1 Identification. The data indicated below shall be contained on the title page or on the first page of the report. The pages shall be sequentially numbered. As necessary, graphic material may be one-way fold-outs. All attachments shall be identified and referenced in the text. Each section and paragraph shall be numbered
a. Title of the Report
b. Period covered by the report
c. Date
d. Contract Name and Number
e. Data Item Number listed on the CDRL DD Form 1423-2
f. Version number
g. Title of preparing activity
h. Address of preparing activity
2.2 Page size: The reports shall be on 8 ½ by 11 inch (metric A4) paper. The pages shall be sequentially numbered. As necessary, graphic material may be one-way fold-outs. All attachments shall be identified and referenced in the text. Each section and paragraph shall be numbered.
2.3 Appendices: Appendices where applicable, for table, references, charts, or other descriptive material. Each appendix shall be identified and referenced in the appropriate area of the report.3.
3. Content. The report shall address the following:
a. Introduction
b. Narrative report addressing the SANS Institute’s Twenty Critical Security Controls for Effective Cyber Defense and any additional information above and beyond the SANs guidelines that enhances the government’s understanding of the their information security posture.
c. Narrative report of new issues/areas of concern and the status of outstanding issues/areas of concern from the previous report.
4. End of OT-14-37500
File details come from the government source that posted it. Updated .