Attachment_6_Software_Vendor_Integrity_Statement_Guidelines_Application_Software.docx
DOCX document 15 KB Posted
- Solicitation number
- ID07180027
- Issued by
-
GSA Federal Acquisition Service
About this file
Software Integrity
View the file
Other files
| File | Type | Posted |
|---|---|---|
| ID07180027_PWS_Rev_1_8.30.18.pdf | ||
| ID07180027_F-16_TSSC_QA_27_Aug_2018.pdf | ||
| ID07180027_Updated_RFP_First_Step_READ_ME_FIRST.08.28.18docx.pdf | ||
| Attachment_1_Pricing_Spreadsheet.xlsx | XLSX spreadsheet | |
| Attachment_5_Consent_To__Purchase_Form.xlsx | XLSX spreadsheet | |
| ID07180027_RFP_First_Step_READ_ME_FIRST.pdf | ||
| Attachment_2_Reference_Document_List.docx | DOCX document | |
| ID07180027_PWS_8.08.18.pdf | ||
| Attachment_9_Past_Experience_Information_Sheet.docx | DOCX document | |
| Attachment_7_Software_Vendor_Integrity_Statement_Guidelines_Website.docx | DOCX document | |
| Attachment_4_CDRLs.PDF | ||
| Attachment_3_Glossary_and_Acronyms.docx | DOCX document | |
| Attachment_10__Quality_Assurance_Surveillance_Plan.rtf | RTF text file | |
| Attachment_11_Financial_Letter_and_Questionnaire.pdf | ||
| Attachment_8_OCI_Certification.docx | DOCX document |
Show all 15
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
SECTION J
Attachment 6 Software Vendor Integrity Statement Guidelines: Application Software
DESCRIPTION
The Vendor Integrity Statement for software shall be a written and signed Contractor certification that assures that each trainer application software delivered to the Government has been examined according to DoD and Air Force policies and procedures. The results of the examinations must indicate that the software has no elements that might be detrimental to the secure operation of the resource operating system. Elements detrimental to the secure operation include:
1. Malicious code
1. Trojans, worms, logic bombs, and other computer viruses
1. Backdoors
1. Ad-ware, Spy-ware, or web bugs that have the ability to track user behavior
1. Code that permits functions that are beyond the actual publicized intent of application capability
1. Software that will not function properly with the operating system configured securely
BACKGROUND
DoDI 8500.01, Cybersecurity, requires that IA-enabled products (such as operating systems) comply with the evaluation and validation requirements of DoDI 8510.01 Risk Management Framework for DoD Information Technology. Paragraph 9.b.11 of DoDI 8500.01 requires that IA-enabled IT products incorporated into DoD information systems be configured in accordance with DoD-approved security configuration guidelines.
CONTENT AND FORMAT
The Vendor Integrity Statements for trainer application software shall consist of the following certification, dated and signed by an authorized representative of the Contractor, on company letterhead. A sample follows:
Software Vendor Integrity Statement: Application Software Sample
TO: USAF GPO
RE: Vendor Integrity Statement for Software for Device XXXXX, under Contract XX-X-XXXX
I certify that for xxxx software, version xx, there are no elements that might be detrimental to the secure operation of the resource operating system. The software runs with the operating system configured according to DODI 8500.01, Cybersecurity, paragraph 9.b.11, and DoDI 8510.01 Risk Management Framework.
Signed
Company Representative
File details come from the government source that posted it.