Appendix (A) - Draft DID for CDRL A004.pdf
PDF 479 KB Posted
- Solicitation number
- M67854-21-R-2053
- Issued by
-
United States Marine Corps
About this file
This data item description outlines the cyber incident reporting requirements for contractors processing controlled unclassified information under Defense Federal Acquisition Regulation Supplement Clause 252.204-7012. Contractors must report cyber incidents affecting internal unclassified information systems to the Defense Cyber Crime Center via the DIBNet portal. Report submissions must follow the format prescribed on the portal and include general company information, points of contact, contract details, incident details, and ancillary information. Upon receiving a report of a DFARS clause cyber incident, the Defense Cyber Crime Center will send an encrypted email with the submitted report to the contracting officer for inclusion in the contract file and provide courtesy copies to defense cyber officials.
The related federal contract opportunity is a solicitation from the United States Marine Corps to manufacture and deliver the Wired in the Defense Marine Analog Tactical Telephone. This wired command and control communication device will provide redundant capability able to operate in point-to-point or point-to-multipoint configurations for use when radio frequency is denied or degraded, separate from all data and internet protocol networks.
View the file
Other files
Show all 24
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
DI-MGMT-XXXXX
DISTRIBUTION STATEMENT A. Approved for public release; distribution is unlimited.
DATA ITEM DESCRIPTION Title: Cyber Incident Reporting for a Contractor’s Internal Unclassified
Information System(s)
Number: DI-MGMT-XXXXX Approval Date: TBD AMSC Number: YYYY Limitation: TBD DTIC Applicable: No GIDEP Applicable: No Preparing Activity: TBD Project Number: MGMT-2018-XXX Applicable Forms: None
Use/relationship: When DFARS Clause 252.204-7012 is included in a contract for which Controlled
Unclassified Information (CUI) – as defined in DFARS Clause 252.204-7012 – will be processed, stored, or transmitted during the course of executing the terms a Department of Defense (DoD) contract, cyber incidents shall be reported to the Defense Cyber Crime Center (DC3) via the DIBNet portal.
This Data Item Description (DID) contains the information that is required of the Contractor submitting the incident report to DC3.
This information, once reported, will be shared by DC3 as threat information between the DoD and DIB companies. When DC3 receives a DFARS cyber incident report, DC3 will send an unclassified encrypted email containing the submitted incident report to the government Contracting Officer point of contact identified in the submitted report to have the report placed in the contract file to document the action, with a courtesy copy to the following:
Director, DC3/DCISE
Director, OSD DAMO
Director, DIB CS/IA Program Office
Contract Program Management Office
Requirements:
1. Format: Use the format prescribed through the DIBNet Portal at http://dibnet.dod.mil.
Under “DoD’s DIB Cybersecurity (CS) Program” on the right side of the page, select
“Voluntary Report”.
Since this is reporting is to satisfy a contractual requirement, select “Mandatory
Incident Report”.
Follow the “Mandatory Incident Report” wizard for the following:
o General Information
I. Company Identification
II. Company POC Information
III. Contract or other Agreement
IV. Incident Information
V. Ancillary Information
End of DI-MGMT-XXXX http://dibnet.dod.mil/
File details come from the government source that posted it. Updated .