J Attach J003 - CDRLs _FINAL SIR 693KA8-20-R-00017.pdf
PDF 81 KB Posted
- Solicitation number
- 693KA8-20-R-00017
About this file
This document outlines fourteen Contract Data Requirements List (CDRL) items required under a cybersecurity testing contract. The contractor must submit various project management and test plans and reports, including a Program Management Plan within 30 days of award, Monthly Status Reports starting 20 days after award, and System Security Assessment and Penetration Testing Reports within 30 days of completing the relevant tests. Test plans are due two weeks before scheduled testing. The contract will be a single-award Time-and-Materials contract for a one-year base period and four one-year options, issued by the Federal Aviation Administration for sustainment of independent risk assessment, information system security assurance, and penetration testing capabilities. Key dates include the final Screening Information Request posting on September 16th, 2020, with questions due by September 28th and answers by October 6th, and proposals due by October 16th. Award is estimated for January 29th, 2021.
View the file
Other files
Show all 23
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Attachment J003
Contract Data Requirements List
FINAL SIR. 693KA8-20-R-00017
CDRL TITLE SOW
REF
INITIAL
SUBMISSION
FREQUENCY
DATE OF
SUBSEQUENT
REMARKS
001 Program Management Plan C.3.1
30 calendar days after contract award
Once with revisions, as required
15 business days after
Government notification to update the plan
The Government may request updates to the PMP to reflect changes in Program scope or other Program constraints
002a Meeting Agenda C.3.1.3 Five business days before meeting As required N/A
Contractor must address any Government comments at least 1 business day before meeting.
002b Meeting Minutes C.3.1.3 Three business days after meeting As required N/A
002c Program Management Review Presentation
C.3.1.6
Five business days prior to scheduled
Program Management
Review meeting
Quarterly, or as required N/A
Contractor must address any Government comments at least 1 business day before meeting.
003 Quality Control Plan C.3.1.4 30 calendar days after contract award Once N/A
004 Monthly Status Report
C.3.1.5
1st business day of the month, but not before 20 calendar days after contract award.
Monthly 1st business day of the month
005 Phase-In Transition Plan
C.3.1.7.1 30 calendar days after contract award Once N/A
006 Phase-In Inventory Report
C.3.1.7.1 30 calendar days after contract award
Once with weekly updates until all identified inventory is in place
N/A
CDRL TITLE SOW
REF
INITIAL
FREQUENCY
DATE OF
SUBSEQUENT
REMARKS
007 Phase-Out Transition Plan C.3.1.7.2 TBD One Time N/A
008 Phase-Out Inventory Report C.3.1.7.2 TBD One Time N/A
Integrated Master Test Schedule
(IMTS)
C.3.1.2
45 calendar days after receipt of
Government’s test schedule
One Time, with revisions N/A
The Contractor must maintain IMTS currency to align with all testing activities
System Security Assessment Test Plan
C.3.2 2 weeks prior to scheduled test As required N/A
System Security Assessment Report
(SAR)
C.3.2 30 calendar days after completion of testing
As required N/A
Plan of Action and Milestones (POAMs)
C.3.2 1 week after release of the SAR As required N/A
013 Penetration Test Plan C.3.4 2 weeks prior to scheduled test As required N/A
014 Penetration Testing Report C.3.4
30 calendar days after completion of testing As required N/A
File details come from the government source that posted it. Updated .