M6785423R4907_Revised Exhibit A_CDRLs_26May2023.pdf

DD FORM 1423-1, FEB 2001

CONTRACT DATA REQUIREMENTS LIST

(1 Data Item)

PREVIOUS EDITION MAY BE USED.

Form Approved OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE

7. DD 250 REQ

8. APP CODE

9. DIST STATEMENT

REQUIRED

10. FREQUENCY

11. AS OF DATE

12. DATE OF FIRST SUBMISSION

13. DATE OF SUBSEQUENT

SUBMISSION

14. DISTRIBUTION

a. ADDRESSEE

b. COPIES

Draft Final

Reg Repro

15. TOTAL

16. REMARKS

17. PRICE GROUP

18. ESTIMATED

TOTAL PRICE

G. PREPARED BY H. DATE I. APPROVED BY J. DATE

Page of Pages

0005 A

PEO Digital ISTC M67854-23-R-4907

A001 Engineering Change Proposal (ECP) with DD1692 DD1692

N/A SOW Section 5 PEO Digital ISTC Project Office

LT

A D

See Blk 16 See Blk 16

See Blk 16

ENG 1

PO 1

PCO 1

COR 1

0 0 4

Blk 8. Government acceptance of the ECP is required prior to progressing to the Infrastructure Services Transport and Communication (ISTC) Team Service Configuration Control Board (SCCB) in accordance with the Configuration Management Plan. The ECP form DD1692 shall be completed through page two and shall also contain an updated drawing of the new configuration.

Initial document submissions include Government document review and return of a Comments Review Matrix (CRM) to the Contractor for adjudication and resubmittal prior to engineering event for which the document is required (e.g, TRR, NIR, etc). Any additional comments received from the Government during an engineering event will be adjudicated prior to final document submittal.

Blk 9. DISTRIBUTION STATEMENT D: Distribution authorized to the Department of Defense and U.S. DoD contractors only, Export Controlled, Vulnerability Information, 3 Mar 2022. Other requests shall be referred to Marine Corps Systems Command, Attn:

Program Manager, Infrastructure Services, Transport and Communications, 2200 Lester Street, Quantico, VA 22134-5050.

CUI must be marked and distributed in accordance with DODI 5200.48. The deliverable shall be appropriately marked with the applicable CUI markings and the following information:

WARNING – This document contains technical data whose export is restricted by the Arms Export Control Act (Section 2751 of Title 22, United States Code) or the Export Control Reform Act of 2018 (Chapter 58 sections 4801-4852 of Title 50, United States Code).

Violations of these export laws are subject to severe criminal penalties. Disseminate in accordance with provisions of DoD Directive 5230.25 and DoD Instruction 2040.02.

1 2 Adobe Professional 7.0

(1 Data Item)

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

16. REMARKS (Continued)

DD FORM 1423-1, FEB 2001 Page of Pages

0005 A

PEO Digital ISTC M67854-23-R-4907

Controlled by: USMC Controlled by: MCSC, PEO Digital CUI Category: CTI, EXPT Distribution Statement D POC: ISTC Engineering Lead, email: douglas.mount@usmc.mil

Blk 12. Initial: Submit with the Verification Site Survey Report, but NLT twenty-five (25) calendar days prior to the Technical Interchange Meeting.

Blk 13. Revised: NLT twenty-five (25) calendar days prior to the Non-Developmental Item Integration Review.

Blk 13.Final: NLT twenty-five (25) calendar days prior to the Test Readiness Review.

Blk 14. The SAT Plan will be delivered in Microsoft Office 2016 or compatible format.

If delivery cannot be completed through a CAC-encrypted email, delivery shall be made via DoD SAFE at https://safe.apps.mil.

2 2

(1 Data Item)

PREVIOUS EDITION MAY BE USED.

Form Approved OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE

7. DD 250 REQ

8. APP CODE

9. DIST STATEMENT

REQUIRED

10. FREQUENCY

11. AS OF DATE

12. DATE OF FIRST SUBMISSION

13. DATE OF SUBSEQUENT

SUBMISSION

14. DISTRIBUTION

a. ADDRESSEE

b. COPIES

Draft Final

Reg Repro

15. TOTAL

16. REMARKS

17. PRICE GROUP

18. ESTIMATED

TOTAL PRICE

H. DATE J. DATE

Page of Pages

0005 A Engineering Data

PEO Digital ISTC M67854-23-R-4907

A002 Verification Site Survey (VSS) Report

NA SOW Section 5.1 PEO Digital ISTC Project Office

LT

NA D

See Blk 16 See Blk 16

N/A

ENG 1

PO 1

PCO 1

COR 1

0 0 4

Initial document submissions include Government document review and return of a Comments Review Matrix (CRM) to the Contractor for adjudication and resubmittal prior to engineering event for which the document is required (e.g, TRR, NIR, etc). Any additional comments received from the Government during an engineering event will be adjudicated prior to final document submittal.

Blk 9. DISTRIBUTION STATEMENT D: Distribution authorized to the Department of Defense and U.S. DoD contractors only, Export Controlled, Vulnerability Information, 3 Mar 2022. Other requests shall be referred to Marine Corps Systems Command, Attn:

Program Manager, Infrastructure Services, Transport and Communications, 2200 Lester Street, Quantico, VA 22134-5050.

CUI must be marked and distributed in accordance with DODI 5200.48. The deliverable shall be appropriately marked with the applicable CUI markings and the following information:

WARNING – This document contains technical data whose export is restricted by the Arms Export Control Act (Section 2751 of Title 22, United States Code) or the Export Control Reform Act of 2018 (Chapter 58 sections 4801-4852 of Title 50, United States Code).

Violations of these export laws are subject to severe criminal penalties. Disseminate in accordance with provisions of DoD Directive 5230.25 and DoD Instruction 2040.02.

Controlled by: USMC Controlled by: MCSC, PEO Digital CUI Category: CTI, EXPT Distribution Statement D POC: ISTC Engineering Lead, email: douglas.mount@usmc.mil

Blk 10 and 12. NLT 20 calendar days prior to the Technical Interchange Meeting (TIM).

Blk 14. The electronic Verification Site Survey Report will be delivered in Microsoft Office 2016 or compatible format. If delivery cannot be completed through a CAC-encrypted email, delivery shall be made via DoD SAFE at https://safe.apps.mil.

G. PREPARED BY I. APPROVED BY

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

16. REMARKS (Continued)

DD FORM 1423-1, FEB 2001 Page of Pages

0005 A Engineering Data

PEO Digital ISTC M67854-23-R-4907

(1 Data Item)

PREVIOUS EDITION MAY BE USED.

Form Approved OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE

7. DD 250 REQ

8. APP CODE

9. DIST STATEMENT

REQUIRED

10. FREQUENCY

11. AS OF DATE

12. DATE OF FIRST SUBMISSION

13. DATE OF SUBSEQUENT

SUBMISSION

14. DISTRIBUTION

a. ADDRESSEE

b. COPIES

Draft Final

Reg Repro

15. TOTAL

16. REMARKS

17. PRICE GROUP

18. ESTIMATED

TOTAL PRICE

H. DATE J. DATE

Page of Pages

0005 A Engineering Data

PEO Digital ISTC M67854-23-R-4907

A003 Requirement Traceability Matrix (RTM)

DI-MGMT-82133 SOW Section 5.1, 5.14.5 PEO Digital ISTC Project Office

LT

N/A D

See Blk 16 See Blk 16

See Blk 16

ENG 1

PO 1

PCO 1

COR 1

See BLK 16 5

0 5 4

Contractor shall develop and provide a functional baseline Requirements Traceability Matrix (RTM). Contractor-format is acceptable.

Initial document submissions include Government document review and return of a Comments Review Matrix (CRM) to the Contractor for adjudication and resubmittal prior to engineering event for which the document is required (e.g, TRR, NIR, etc). Any additional comments received from the Government during an engineering event will be adjudicated prior to final document submittal.

Blk 9. DISTRIBUTION STATEMENT D: Distribution authorized to the Department of Defense and U.S. DoD contractors only, Export Controlled, Vulnerability Information, 3 Mar 2022. Other requests shall be referred to Marine Corps Systems Command, Attn:

Program Manager, Infrastructure Services, Transport and Communications, 2200 Lester Street, Quantico, VA 22134-5050.

CUI must be marked and distributed in accordance with DODI 5200.48. The deliverable shall be appropriately marked with the applicable CUI markings and the following information:

WARNING – This document contains technical data whose export is restricted by the Arms Export Control Act (Section 2751 of Title 22, United States Code) or the Export Control Reform Act of 2018 (Chapter 58 sections 4801-4852 of Title 50, United States Code).

Violations of these export laws are subject to severe criminal penalties. Disseminate in accordance with provisions of DoD Directive 5230.25 and DoD Instruction 2040.02.

Controlled by: USMC Controlled by: MCSC, PEO Digital CUI Category: CTI, EXPT Distribution Statement D POC: ISTC Engineering Lead, email: douglas.mount@usmc.mil

G. PREPARED BY I. APPROVED BY

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

16. REMARKS (Continued)

DD FORM 1423-1, FEB 2001 Page of Pages

0005 A Engineering Data

PEO Digital ISTC M67854-23-R-4907

Blk 12. Initial RTM will be delivered twenty (20) calendar days prior to the Technical Interchange Meeting (TIM).

Blk 10 and 13. Revised/Final RTM will be delivered twenty (20) calender days prior to the Non-developmental Item Integration Review (NIR).

Blk 14: For the NIR, provide five (5) hard copy binders for Government participants. (insert mailing address) Blk 14. The electronic RTM will be delivered in Microsoft Office 2016 or compatible format. If delivery cannot be completed through a CAC-encrypted email, delivery shall be made via DoD SAFE at https://safe.apps.mil.

(1 Data Item)

PREVIOUS EDITION MAY BE USED.

Form Approved OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE

7. DD 250 REQ

8. APP CODE

9. DIST STATEMENT

REQUIRED

10. FREQUENCY

11. AS OF DATE

12. DATE OF FIRST SUBMISSION

13. DATE OF SUBSEQUENT

SUBMISSION

14. DISTRIBUTION

a. ADDRESSEE

b. COPIES

Draft Final

Reg Repro

15. TOTAL

16. REMARKS

17. PRICE GROUP

18. ESTIMATED

TOTAL PRICE

H. DATE J. DATE

Page of Pages

0005 A Engineering Data

PEO Digital ITSC M67854-23-R-4907

A004 Cutover Plan

N/A SOW Section 5.4, 5.5, 5.14.6 PEO Digital ISTC Project Office

LT

A D

See Blk 16 See Blk 16

See Blk 16

ENG 1

PO 1

PCO 1

COR 1

See Blk 16 10

0 10 4

The Contractor shall develop and provide a detailed Cutover Plan which provides the overall plan including the schedule, required Government resources, system outages, and fall-back plan. Additionally, the plan shall contain the system specific detailed procedures.

Contractor shall develop a detailed Cutover Plan for each system and subsystem. The Cutover Plan shall be system specific and shall include, at a minimum, a sequential list of events, detailed procedures, post-Cutover testing requirements/procedures, scheduled service outages/windows, service priority based cut-sheets, and system recovery/fall back plan.

Blk 8. The Cutover Plan including any modifications must be accepted by the Government prior to commencement of cutover. Cutover shall not begin without a Government acceptance of the adjudicated Cutover Plan.

Initial document submissions include Government document review and return of a Comments Review Matrix (CRM) to the Contractor for adjudication and resubmittal prior to engineering event for which the document is required (e.g, TRR, NIR, etc). Any additional comments received from the Government during an engineering event will be adjudicated prior to final document submittal.

Blk 9. DISTRIBUTION STATEMENT D: Distribution authorized to the Department of Defense and U.S. DoD contractors only, Export Controlled, Vulnerability Information, 3 Mar 2022. Other requests shall be referred to Marine Corps Systems Command, Attn:

Program Manager, Infrastructure Services, Transport and Communications, 2200 Lester Street, Quantico, VA 22134-5050.

CUI must be marked and distributed in accordance with DODI 5200.48. The deliverable shall be appropriately marked with the applicable CUI markings and the following information:

G. PREPARED BY I. APPROVED BY

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

16. REMARKS (Continued)

DD FORM 1423-1, FEB 2001 Page of Pages

0005 A Engineering Data

PEO Digital ITSC M67854-23-R-4907

WARNING – This document contains technical data whose export is restricted by the Arms Export Control Act (Section 2751 of Title 22, United States Code) or the Export Control Reform Act of 2018 (Chapter 58 sections 4801-4852 of Title 50, United States Code). Violations of these export laws are subject to severe criminal penalties. Disseminate in accordance with provisions of DoD Directive 5230.25 and DoD Instruction 2040.02.

Controlled by: USMC Controlled by: MCSC, PEO Digital CUI Category: CTI, EXPT Distribution Statement: D POC: ISTC Engineering Lead, email: douglas.mount@usmc.mil

Blk 12. Initial Cutover Plan: NLT twenty (20) calendar days prior to the Non-Developmental Item Integration Review (NIR).

Blk 10 and 13. Final Cutover Plan: NLT twenty (20) calendar days prior to the Test Readiness Review (TRR).

Blk 14: For the NIR, provide five (5) hard copy binders for Government participants. (insert mailing address) Blk 14: For the TRR, provide five (5) hard copy binders for Government participants.

Blk 14. The electronic Cutover Plan will be delivered in Microsoft Office 2016 or compatible format. If delivery cannot be completed through a CAC-encrypted email, delivery shall be made via DoD SAFE at https://safe.apps.mil.

(1 Data Item)

PREVIOUS EDITION MAY BE USED.

Form Approved OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE

7. DD 250 REQ

8. APP CODE

9. DIST STATEMENT

REQUIRED

10. FREQUENCY

11. AS OF DATE

12. DATE OF FIRST SUBMISSION

13. DATE OF SUBSEQUENT

SUBMISSION

14. DISTRIBUTION

a. ADDRESSEE

b. COPIES

Draft Final

Reg Repro

15. TOTAL

16. REMARKS

17. PRICE GROUP

18. ESTIMATED

TOTAL PRICE

H. DATE J. DATE

Page of Pages

0005 A IA

PEO Digital ITSC M67854-23-R-4907

A005 Ports, Protocol, Services, and Management PPSM Data

N/A SOW Section 5.10 PEO Digital ISTC Project Office

LT

N/A D

See Blk 16 See Blk 16

See Blk 16

ISSM 1

ENG 1

PCO 1

PO 1

COR 1

0 0 5

PPSM data provides important information in securing the system when connecting to the DoDIN.

Initial document submissions include Government document review and return of a Comments Review Matrix (CRM) to the Contractor for adjudication and resubmittal prior to engineering event for which the document is required (e.g, TRR, NIR, etc). Any additional comments received from the Government during an engineering event will be adjudicated prior to final document submittal.

Blk 9. DISTRIBUTION STATEMENT D: Distribution authorized to the Department of Defense and U.S. DoD contractors only, Export Controlled, Vulnerability Information, 3 Mar 2022. Other requests shall be referred to Marine Corps Systems Command, Attn:

Program Manager, Infrastructure Services, Transport and Communications, 2200 Lester Street, Quantico, VA 22134-5050.

CUI must be marked and distributed in accordance with DODI 5200.48. The deliverable shall be appropriately marked with the applicable CUI markings and the following information:

WARNING – This document contains technical data whose export is restricted by the Arms Export Control Act (Section 2751 of Title 22, United States Code) or the Export Control Reform Act of 2018 (Chapter 58 sections 4801-4852 of Title 50, United States Code).

Violations of these export laws are subject to severe criminal penalties. Disseminate in accordance with provisions of DoD Directive 5230.25 and DoD Instruction 2040.02.

Controlled by: USMC Controlled by: MCSC, PEO Digital CUI Category: CTI, EXPT Distribution Statement D POC: ISTC Engineering Lead, email: douglas.mount@usmc.mil

G. PREPARED BY I. APPROVED BY

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

16. REMARKS (Continued)

DD FORM 1423-1, FEB 2001 Page of Pages

0005 A IA

PEO Digital ITSC M67854-23-R-4907

Blk 12. Initial PPSM data NLT twenty (20) calendar days prior to the Non-Developmental Item Integration Review (NIR).

Blk 10 and 13. A Final PPSM data NLT twenty (20) calendar days prior to the Test Readiness Review (TRR).

Blk 14. The PPSM data will be delivered in Microsoft Excel 2016 or compatible format. If delivery cannot be completed through a CAC-encrypted email, delivery shall be made via DoD SAFE at https://safe.apps.mil.

(1 Data Item)

PREVIOUS EDITION MAY BE USED.

Form Approved OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE

7. DD 250 REQ

8. APP CODE

9. DIST STATEMENT

REQUIRED

10. FREQUENCY

11. AS OF DATE

12. DATE OF FIRST SUBMISSION

13. DATE OF SUBSEQUENT

SUBMISSION

14. DISTRIBUTION

a. ADDRESSEE

b. COPIES

Draft Final

Reg Repro

15. TOTAL

16. REMARKS

17. PRICE GROUP

18. ESTIMATED

TOTAL PRICE

H. DATE J. DATE

Page of Pages

0005 A IA

PEO Digital ISTC M67854-23-R-4907

A006 Cybersecurity Plan of Action and Milestones (POA&M) Cyber POA&M

DI-MGMT-82002B SOW Section 5.3.1 PEO Digital ISTC Project Office

LT

N/A D

See Blk 16 See Blk 16

See Blk 16

ISSM 1

PO 1

COR 1

ENG 1

PCO 1

0 0 5

The Contractor must provide a Cybersecurity POA&M that contains the mitigations strategy and the estimated completion dates for all Cybersecurity findings. All Category (CAT) I findings shall be remediated or mitigated to a lower category prior to acceptance.

A remediation or mitigation strategy is also required for all CAT II and CAT III findings.

Additional scans may be required depending on the cyber POA&M and the need of the contractor to demonstrate resolution of vulnerabilities.

Initial document submissions include Government document review and return of a Comments Review Matrix (CRM) to the Contractor for adjudication and resubmittal prior to engineering event for which the document is required (e.g, TRR, NIR, etc). Any additional comments received from the Government during an engineering event will be adjudicated prior to final document submittal.

Blk 9. DISTRIBUTION STATEMENT D: Distribution authorized to the Department of Defense and U.S. DoD contractors only, Export Controlled, Vulnerability Information, 3 Mar 2022. Other requests shall be referred to Marine Corps Systems Command, Attn:

Program Manager, Infrastructure Services, Transport and Communications, 2200 Lester Street, Quantico, VA 22134-5050.

CUI must be marked and distributed in accordance with DODI 5200.48. The deliverable shall be appropriately marked with the applicable CUI markings and the following information:

WARNING – This document contains technical data whose export is restricted by the Arms Export Control Act (Section 2751 of Title 22, United States Code) or the Export Control Reform Act of 2018 (Chapter 58 sections 4801-4852 of Title 50, United States Code).

Violations of these export laws are subject to severe criminal penalties. Disseminate in accordance with provisions of DoD Directive 5230.25 and DoD Instruction 2040.02.

Controlled by: USMC Controlled by: MCSC, PEO Digital CUI Category: CTI, EXPT Distribution Statement D POC: ISTC Engineering Lead, email: douglas.mount@usmc.mil

G. PREPARED BY I. APPROVED BY

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

16. REMARKS (Continued)

DD FORM 1423-1, FEB 2001 Page of Pages

0005 A IA

PEO Digital ISTC M67854-23-R-4907

Blk 12. Initial Cybersecurity POA&M NLT ten (10) calendar days after ACAS scan is completed.

Blk 10 and 13. A Final Cybersecurity POA&M NLT sixty (60) calendar days prior to the Test Readiness Review (TRR).

Blk 14. The Cybersecurity POA&M will be delivered in the Government provided (Microsoft Excel 2016 or compatible) format. If delivery cannot be completed through a CAC-encrypted email, delivery shall be made via DoD SAFE at https://safe.apps.mil.

(1 Data Item)

PREVIOUS EDITION MAY BE USED.

Form Approved OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE

7. DD 250 REQ

8. APP CODE

9. DIST STATEMENT

REQUIRED

10. FREQUENCY

11. AS OF DATE

12. DATE OF FIRST SUBMISSION

13. DATE OF SUBSEQUENT

SUBMISSION

14. DISTRIBUTION

a. ADDRESSEE

b. COPIES

Draft Final

Reg Repro

15. TOTAL

16. REMARKS

17. PRICE GROUP

18. ESTIMATED

TOTAL PRICE

H. DATE J. DATE

Page of Pages

0005 A IA

PEO Digital ISTC M67854-23-R-4907

A007 Marine Corps Certification Accreditation Support Tool (MCCAST) Security Controls

Tech Controls

N/A SOW Section 5.10.2 PEO Digital ISTC Project Office

LT

N/A D

See Blk 16 See Blk 16

See Blk 16

PO 1

PCO 1

ENG 1

ISSM 1

COR 1

0 0 5

The Government will provide a list of security controls to the Contractor, where they will have to reviewed and provide answer to. The Contractor will have to state which security controls are met by the system they are integrating and how they are met. All security controls that are not met by the integrating system must have a comment on how they are not met. This is the same for any not applicable security controls.

Initial document submissions include Government document review and return of a Comments Review Matrix (CRM) to the Contractor for adjudication and resubmittal prior to engineering event for which the document is required (e.g, TRR, NIR, etc). Any additional comments received from the Government during an engineering event will be adjudicated prior to final document submittal.

Blk 9. DISTRIBUTION STATEMENT D: Distribution authorized to the Department of Defense and U.S. DoD contractors only, Export Controlled, Vulnerability Information, 3 Mar 2022. Other requests shall be referred to Marine Corps Systems Command, Attn:

Program Manager, Infrastructure Services, Transport and Communications, 2200 Lester Street, Quantico, VA 22134-5050.

CUI must be marked and distributed in accordance with DODI 5200.48. The deliverable shall be appropriately marked with the applicable CUI markings and the following information:

WARNING – This document contains technical data whose export is restricted by the Arms Export Control Act (Section 2751 of Title 22, United States Code) or the Export Control Reform Act of 2018 (Chapter 58 sections 4801-4852 of Title 50, United States Code).

Violations of these export laws are subject to severe criminal penalties. Disseminate in accordance with provisions of DoD Directive 5230.25 and DoD Instruction 2040.02.

Controlled by: USMC Controlled by: MCSC, PEO Digital CUI Category: CTI, EXPT Distribution Statement D POC: ISTC Engineering Lead, email: douglas.mount@usmc.mil

G. PREPARED BY I. APPROVED BY

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

16. REMARKS (Continued)

DD FORM 1423-1, FEB 2001 Page of Pages

0005 A IA

PEO Digital ISTC M67854-23-R-4907

Blk 12. Initial MCCAST Security Controls NLT twenty (20) calendar days prior to the Technical Integration Meeting (TIM).

Blk 10 and 13. A Final MCCAST Security Controls NLT twenty (20) calendar days prior to the Non-Developmental Item Integration Review (NIR).

Blk 14. The MCCAST Security Controls will be delivered in the Government provided (Microsoft Excel 2016 or compatible) format. If delivery cannot be completed through a CAC-encrypted email, delivery shall be made via DoD SAFE at https://safe.apps.mil.

(1 Data Item)

PREVIOUS EDITION MAY BE USED.

Form Approved OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE

7. DD 250 REQ

8. APP CODE

9. DIST STATEMENT

REQUIRED

10. FREQUENCY

11. AS OF DATE

12. DATE OF FIRST SUBMISSION

13. DATE OF SUBSEQUENT

SUBMISSION

14. DISTRIBUTION

a. ADDRESSEE

b. COPIES

Draft Final

Reg Repro

15. TOTAL

16. REMARKS

17. PRICE GROUP

18. ESTIMATED

TOTAL PRICE

H. DATE J. DATE

Page of Pages

0005 A IA

PEO Digital ISTC M67854-23-R-4907

A008 MCCAST Hardware/Software List

SOW Sections 5.10.2, 5.14.1 PEO Digital ISTC Project Office

LT

N/A D

See Blk 16 See Blk 16

See Blk 16

ISSM 1

PO 1

COR 1

ENG 1

PCO 1

0 0 5

The Contractor shall assist the Government by providing, developing, and submitting any necessary system documentation, settings, specifications, and hardening (application of Security Technical Information Guides (STIG), vulnerability scans, testing and installing patches, MCCAST Hardware/Software List and vulnerability mitigation) required to update the Government Assessment and Authorization (A&A) package and entry into the Marine Corps Compliance and Authorization Support Tool (MCCAST v2.0).

Initial document submissions include Government document review and return of a Comments Review Matrix (CRM) to the Contractor for adjudication and resubmittal prior to engineering event for which the document is required (e.g, TRR, NIR, etc). Any additional comments received from the Government during an engineering event will be adjudicated prior to final document submittal.

Blk 9. DISTRIBUTION STATEMENT D: Distribution authorized to the Department of Defense and U.S. DoD contractors only, Export Controlled, Vulnerability Information, 3 Mar 2022. Other requests shall be referred to Marine Corps Systems Command, Attn:

Program Manager, Infrastructure Services, Transport and Communications, 2200 Lester Street, Quantico, VA 22134-5050.

CUI must be marked and distributed in accordance with DODI 5200.48. The deliverable shall be appropriately marked with the applicable CUI markings and the following information:

WARNING – This document contains technical data whose export is restricted by the Arms Export Control Act (Section 2751 of Title 22, United States Code) or the Export Control Reform Act of 2018 (Chapter 58 sections 4801-4852 of Title 50, United States Code).

Violations of these export laws are subject to severe criminal penalties. Disseminate in accordance with provisions of DoD Directive 5230.25 and DoD Instruction 2040.02.

Controlled by: USMC Controlled by: MCSC, PEO Digital CUI Category: CTI, EXPT Distribution Statement D POC: ISTC Engineering Lead, email: douglas.mount@usmc.mil

G. PREPARED BY I. APPROVED BY

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

16. REMARKS (Continued)

DD FORM 1423-1, FEB 2001 Page of Pages

0005 A IA

PEO Digital ISTC M67854-23-R-4907

Blk 12. Initial MCCAST HW/SW NLT thirty (30) calendar days prior to the Test Readiness Review (TRR).

Blk 13. A Final MCCAST template NLT thirty (30) calendar days prior to the Physical Configuration Audit (PCA).

Blk 14. The MCCAST Hardware/Software list will be delivered in the Government provided (Microsoft Excel 2016 or compatible) format. If delivery cannot be completed through a CAC-encrypted email, delivery shall be made via DoD SAFE at https://safe.apps.mil.

(1 Data Item)

PREVIOUS EDITION MAY BE USED.

Form Approved OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE

7. DD 250 REQ

8. APP CODE

9. DIST STATEMENT

REQUIRED

10. FREQUENCY

11. AS OF DATE

12. DATE OF FIRST SUBMISSION

13. DATE OF SUBSEQUENT

SUBMISSION

14. DISTRIBUTION

a. ADDRESSEE

b. COPIES

Draft Final

Reg Repro

15. TOTAL

16. REMARKS

17. PRICE GROUP

18. ESTIMATED

TOTAL PRICE

H. DATE J. DATE

Page of Pages

0005 A IA

PEO Digital ISTC M67854-23-R-4907

A009 Security Technical Implementation Guide (STIG) Checklist STIG/SRG Checklist

DI-MGMT-82192 SOW Section 5.10.3 PEO Digital ISTC Project Office

LT

N/A D

See Blk 16 See Blk 16

See Blk 16

ISSM 1

PO 1

PCO 1

COR 1

ENG 1

0 0 5

All STIG/SRG checks must be reviewed by the Contractor to include the manual STIG/SRG checks. Any non-applicable check will include an explanation in the comments section of the checklist by the Contractor as to why it is not-applicable. All failed/open checks will include comments and an explanation for why the check failed in the finding details section of the checklist. Please note that DISA release updates to STIG/SRG on a quarterly bases. Contractor must implement the latest release applicable STIG/SRG at the time of implementation. A copy of STIG Viewer and all applicable STIGs/SRGs can be downloaded from the DoD Cyber Exchange website - https://cyber.mil/stigs/.

Initial document submissions include Government document review and return of a Comments Review Matrix (CRM) to the Contractor for adjudication and resubmittal prior to engineering event for which the document is required (e.g, TRR, NIR, etc). Any additional comments received from the Government during an engineering event will be adjudicated prior to final document submittal.

Blk 9. DISTRIBUTION STATEMENT D: Distribution authorized to the Department of Defense and U.S. DoD contractors only, Export Controlled, Vulnerability Information, 3 Mar 2022. Other requests shall be referred to Marine Corps Systems Command, Attn:

Program Manager, Infrastructure Services, Transport and Communications, 2200 Lester Street, Quantico, VA 22134-5050.

CUI must be marked and distributed in accordance with DODI 5200.48. The deliverable shall be appropriately marked with the applicable CUI markings and the following information:

G. PREPARED BY I. APPROVED BY

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

16. REMARKS (Continued)

DD FORM 1423-1, FEB 2001 Page of Pages

0005 A IA

PEO Digital ISTC M67854-23-R-4907

WARNING – This document contains technical data whose export is restricted by the Arms Export Control Act (Section 2751 of Title 22, United States Code) or the Export Control Reform Act of 2018 (Chapter 58 sections 4801-4852 of Title 50, United States Code). Violations of these export laws are subject to severe criminal penalties. Disseminate in accordance with provisions of DoD Directive 5230.25 and DoD Instruction 2040.02.

Controlled by: USMC Controlled by: MCSC, PEO Digital CUI Category: CTI, EXPT Distribution Statement D POC: ISTC Engineering Lead, email: douglas.mount@usmc.mil

Blk 12. Initial STIG/SRG Checklist NLT twenty (20) calendar days prior to the Non-Developmental Item Integration Review (NIR).

Blk 13. A Final STIG/SRG Checklist NLT twenty (20) calendar days prior to the Test Readiness Review (TRR).

Blk 14. The STIG/SRG checklist will be delivered in the native (.ckl) format. If delivery cannot be completed through a CAC-encrypted email, delivery shall be made via DoD SAFE at https://safe.apps.mil.

(1 Data Item)

PREVIOUS EDITION MAY BE USED.

Form Approved OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE

7. DD 250 REQ

8. APP CODE

9. DIST STATEMENT

REQUIRED

10. FREQUENCY

11. AS OF DATE

12. DATE OF FIRST SUBMISSION

13. DATE OF SUBSEQUENT

SUBMISSION

14. DISTRIBUTION

a. ADDRESSEE

b. COPIES

Draft Final

Reg Repro

15. TOTAL

16. REMARKS

17. PRICE GROUP

18. ESTIMATED

TOTAL PRICE

G. PREPARED BY H. DATE I. APPROVED BY J. DATE

Page of Pages

A IA

PEO Digital ISTC Project Office M67854-23-R-4907

A00A Assured Compliance Assessment Solutions (ACAS) Vulnerability Scans with schedule

ACAS scan with schedule

SOW Section 5.10.3 PEO Digital ISTC Project Office

LT

N/A D

See Blk 16 See Blk 16

See Blk 16

ISSM 1

PO 1

COR 1

ENG 1

PCO 1

0 0 5

ACAS will be used to conduct vulnerability scans using the latest ACAS plug-in from the DoD patch repository prior to executing scans. The Contractor will provide the .nessus file from the scan results within five (5) calendar days of the scan. The Government will provide a temporary license key. The ACAS plug-in can be downloaded from the DoD Patch Repository located at https://patches.csd.disa.mil/Default.aspx. Additional scans may be required depending on the cyber POA&M and the need of the contractor to demonstrate resolution of vulnerabilities.

Initial document submissions include Government document review and return of a Comments Review Matrix (CRM) to the Contractor for adjudication and resubmittal prior to engineering event for which the document is required (e.g, TRR, NIR, etc). Any additional comments received from the Government during an engineering event will be adjudicated prior to final document submittal.

Blk 9. DISTRIBUTION STATEMENT D: Distribution authorized to the Department of Defense and U.S. DoD contractors only, Export Controlled, Vulnerability Information, 3 Mar 2022. Other requests shall be referred to Marine Corps Systems Command, Attn:

Program Manager, Infrastructure Services, Transport and Communications, 2200 Lester Street, Quantico, VA 22134-5050.

CUI must be marked and distributed in accordance with DODI 5200.48. The deliverable shall be appropriately marked with the applicable CUI markings and the following information:

WARNING – This document contains technical data whose export is restricted by the Arms Export Control Act (Section 2751 of Title 22, United States Code) or the Export Control Reform Act of 2018 (Chapter 58 sections 4801-4852 of Title 50, United States Code).

Violations of these export laws are subject to severe criminal penalties. Disseminate in accordance with provisions of DoD Directive 5230.25 and DoD Instruction 2040.02.

Controlled by: USMC Controlled by: MCSC, PEO Digital CUI Category: CTI, EXPT Distribution Statement D POC: ISTC Engineering Lead, email: douglas.mount@usmc.mil

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

16. REMARKS (Continued)

DD FORM 1423-1, FEB 2001 Page of Pages

A IA

PEO Digital ISTC Project Office M67854-23-R-4907

Blk 12. Initial ACAS Vulnerability Scans NLT five (5) calendar days after scan completion.

Blk 10 and 13. A Final ACAS Vulnerability Scans NLT twenty (20) calendar days prior to the Test Readiness Review (TRR).

Blk 14. The ACAS scans will be delivered in the .nessus file format. If delivery cannot be completed through a CAC-encrypted email, delivery shall be made via DoD SAFE at https://safe.apps.mil.

(1 Data Item)

PREVIOUS EDITION MAY BE USED.

Form Approved OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE

7. DD 250 REQ

8. APP CODE

9. DIST STATEMENT

REQUIRED

10. FREQUENCY

11. AS OF DATE

12. DATE OF FIRST SUBMISSION

13. DATE OF SUBSEQUENT

SUBMISSION

14. DISTRIBUTION

a. ADDRESSEE

b. COPIES

Draft Final

Reg Repro

15. TOTAL

16. REMARKS

17. PRICE GROUP

18. ESTIMATED

TOTAL PRICE

H. DATE J. DATE

Page of Pages

0005 A IA

PEO Digital ISTC M67854-23-R-4907

A00B Security Content Automation Protocol (SCAP) Scans SCAP scans

SOW Section 5.10.3 PEO Digital ISTC Project Office

LT

N/A D

See Blk 16 See Blk 16

See Blk 16

ISSM 1

PCO 1

PO 1

ENG 1

COR 1

0 0 5

SCAP will be used to create STIG checklist (.ckl) file for any known open security standards of the system (benchmarks). The Contractor will provide the checklist from the SCAP scans along with the STIG/SRG checklist deliverable. The SCAP benchmarks can be found on the DoD Cyber Exchange NIPR site, please note that a DoD CAC is required to download the benchmarks; https://public.cyber.mil/stigs/scap/.

Initial document submissions include Government document review and return of a Comments Review Matrix (CRM) to the Contractor for adjudication and resubmittal prior to engineering event for which the document is required (e.g, TRR, NIR, etc). Any additional comments received from the Government during an engineering event will be adjudicated prior to final document submittal.

Blk 9. DISTRIBUTION STATEMENT D: Distribution authorized to the Department of Defense and U.S. DoD contractors only, Export Controlled, Vulnerability Information, 3 Mar 2022. Other requests shall be referred to Marine Corps Systems Command, Attn:

Program Manager, Infrastructure Services, Transport and Communications, 2200 Lester Street, Quantico, VA 22134-5050.

CUI must be marked and distributed in accordance with DODI 5200.48. The deliverable shall be appropriately marked with the applicable CUI markings and the following information:

WARNING – This document contains technical data whose export is restricted by the Arms Export Control Act (Section 2751 of Title 22, United States Code) or the Export Control Reform Act of 2018 (Chapter 58 sections 4801-4852 of Title 50, United States Code).

Violations of these export laws are subject to severe criminal penalties. Disseminate in accordance with provisions of DoD Directive 5230.25 and DoD Instruction 2040.02.

Controlled by: USMC Controlled by: MCSC, PEO Digital CUI Category: CTI, EXPT Distribution Statement D POC: ISTC Engineering Lead, email: douglas.mount@usmc.mil

G. PREPARED BY I. APPROVED BY

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

16. REMARKS (Continued)

DD FORM 1423-1, FEB 2001 Page of Pages

0005 A IA

PEO Digital ISTC M67854-23-R-4907

Blk 10. Updates every thirty (30) calendar days once hardware and software are installed until the final submittal Blk 12. Initial SCAP Scans NLT twenty (20) calendar days prior to when system is connected to the network.

Blk 13. A Final SCAP Scans NLT twenty (20) calendar days prior to the Test Readiness Review (TRR).

Blk 14. The SCAP scan will be delivered in the native (.ckl) format. If delivery cannot be completed through a CAC-encrypted email, delivery shall be made via DoD SAFE at https://safe.apps.mil.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

16. REMARKS (Continued)

DD FORM 1423-1, FEB 2001 Page of Pages

0005 A Engineering Data

PEO Digital ISTC M67854-23-R-4907

Controlled by: USMC Controlled by: MCSC, PEO Digital CUI Category: CTI, EXPT Distribution Statement D POC: ISTC Engineering Lead, email: douglas.mount@usmc.mil

Blk 10 and 12. NLT thirty (30) calendar days prior to the NIR.

Blk 10 and 13. NLT thirty (30) calendar days prior to the Test Readiness Review (TRR) Blk 10 and 13. NLT thirty(30) calendar days prior to the Project Configuration Audit (PCA).

Blk 14: For the NIR, provide five (5) hard copy binders for Government participants. (insert mailing address) Blk 14: For the TRR, provide five (5) hard copy binders for Government participants. (insert mailing address) Blk 14: For the PCA, provide five (5) hard copy binders for Government participants. (insert mailing address) Blk 14. The electronic documents will be delivered using the Government provided format. If delivery cannot be completed through a CAC-encrypted email, delivery shall be made via DoD SAFE at https://safe.apps.mil.

(1 Data Item)

PREVIOUS EDITION MAY BE USED.

Form Approved OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information.