Appendix (A) - Draft DID for CDRL A004.docx
DOCX document 18 KB Posted
- Solicitation number
- M67854-21-R-2053
- Issued by
-
United States Marine Corps
About this file
This data item description outlines the cyber incident reporting requirements for contractors processing controlled unclassified information under Defense Federal Acquisition Regulation Supplement Clause 252.204-7012. Contractors must report cyber incidents affecting internal unclassified systems to the Defense Cyber Crime Center via the DIBNet portal, providing general company information, points of contact, details of the relevant contract or agreement, and information about each incident. The Defense Cyber Crime Center will then share reported incidents as threat information with the Department of Defense and defense industrial base companies and notify the contracting officer and other defense officials of each submission.
View the file
Other files
Show all 24
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
DI-MGMT-XXXXX
DATA ITEM DESCRIPTION Title: Cyber Incident Reporting for a Contractor’s Internal Unclassified Information System(s)
| Number: DI-MGMT-XXXXX |
| Approval Date: TBD |
| AMSC Number: YYYY |
| Limitation: TBD |
| DTIC Applicable: No |
| GIDEP Applicable: No |
| Preparing Activity: TBD |
| Project Number: MGMT-2018-XXX |
Applicable Forms: None
Use/relationship: When DFARS Clause 252.204-7012 is included in a contract for which Controlled Unclassified Information (CUI) – as defined in DFARS Clause 252.204-7012 – will be processed, stored, or transmitted during the course of executing the terms a Department of Defense (DoD) contract, cyber incidents shall be reported to the Defense Cyber Crime Center (DC3) via the DIBNet portal.
This Data Item Description (DID) contains the information that is required of the Contractor submitting the incident report to DC3.
This information, once reported, will be shared by DC3 as threat information between the DoD and DIB companies. When DC3 receives a DFARS cyber incident report, DC3 will send an unclassified encrypted email containing the submitted incident report to the government Contracting Officer point of contact identified in the submitted report to have the report placed in the contract file to document the action, with a courtesy copy to the following:
· Director, DC3/DCISE
· Director, OSD DAMO
· Director, DIB CS/IA Program Office
· Contract Program Management Office Requirements:
1. Format: Use the format prescribed through the DIBNet Portal at http://dibnet.dod.mil.
· Under “DoD’s DIB Cybersecurity (CS) Program” on the right side of the page, select “Voluntary Report”.
· Since this is reporting is to satisfy a contractual requirement, select “Mandatory Incident Report”.
· Follow the “Mandatory Incident Report” wizard for the following:
· General Information I. Company Identification II. Company POC Information III. Contract or other Agreement IV. Incident Information V. Ancillary Information
End of DI-MGMT-XXXX DISTRIBUTION STATEMENT A. Approved for public release; distribution is unlimited.
File details come from the government source that posted it. Updated .