S6. Ex.A_CDRL_10-24-19.pdf

Exhibit A

CONTRACT DATA REQUIREMENTS LIST

(CDRL)

Information Assurance and Cyber Security Program Office

PMW 130

Integrated Tool Suite (ITS) Software and Hardware

Acronym List

ASREQ As Required

COR Contracting Officer’s Representative

DAC Days After Contract Award

DARP Days After Reporting Period

LT Letter of Transmittal

MTHLY Monthly

NA Not Applicable

O As of Date for data is the end of the month

PWS Performance Work Statement

CDRL Reference Table

CDRL Name PWS Reference A001 Trip/Travel Report 5.1; 11.0 A002 System Security Plan and Associated Plans of

Action for a Contractor’s Internal Unclassified Information System

5.1; 8.0

A003 Contractor’s Record of Tier 1 Level Suppliers Receiving/Developing Covered Defense Information

5.1; 9.2

A004 Training Documentation 4.0; 5.1 A005 Commercial off-the-shelf (COTS) Equipment

Manual Requirements 4.0; 5.1

A006 Contractor’s Progress, Status, and Management Report

4.0; 5.1

CONTRACT DATA REQUIREMENTS LIST Form Approved OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding thus burden estimate or any other aspect of this collection of information, including suggestions for reducing this burden, to Department of Defense, Executive Services Directorate (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

All Data Line Items A TDP TM OTHER X - MISC

D. SYSTEM|ITEM E. CONTRACT/PR NO. F. CONTRACTOR

Integrated Tool Suite software and hardware

N0003919R0081 TBD

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE

17. PRICE

GROUP

A001 Trip/Travel Report N/A

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE 18.

ESTIMATED

TOTAL PRICE

DI-MISC-81943 PWS 5.1; 11.0 PMW 130

7. DD 250 REQ 9. DIST

STATEMENT

REQUIRED

10. FREQUENCY 12. DATE OF FIRST SUBMISSION 14. DISTRIBUTION

LT ASREQ See Block 16 b. COPIES

8. APP CODE 11. AS OF DATE 13. DATE OF SUBSEQUENT

SUBMISSION

a. ADDRESSEE DRAFT FINAL

N/A D N/A ASREQ Reg Repro

16. REMARKS COR 0 1

Block 9: Distribution Statement D: Distribution authorized to the DoD and U.S. DoD Contractors only; Operational Use; 10 May 2019. Other request for this document shall be referred to PMW 130.

Blocks 10, 12, 13: The Contractor shall deliver the initial report 10 days after completion of the trip.

Block 14: The Contractor shall submit CDRL to COR via encrypted email.

CDRLs shall contain the Data Item No. from Block 1 of the DD 1423. Any deliverables containing classified or sensitive information shall be submitted in Digital Versatile Disc to the PMW 130 COR using appropriate means. Any data deliverables containing SECRET information shall be submitted to the COR via SIPRNet. The Contractor shall provide notification to the COR of SIPR deliverables to the COR’s NMCI/NIPR email.

The contractor shall submit which version of the software as well as the contract number with EVERY software delivery.

COR:

LCDR Jamie Mason 619-524-7641 jamie.mason@navy.mil jamie.mason@navy.smil.mil

15. Total 0

G. PREPARED BY

Jamie Mason, PMW 130 Assistant Program Manager

H. DATE

7/11/2019

I. APPROVED BY

Jamie Mason, PMW 130 Assistant Program Manager

J. DATE

7/11/2019

DD FORM 1423-1, FEB 2001 Page 1 of 6 Pages

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding thus burden estimate or any other aspect of this collection of information, including suggestions for reducing this burden, to Department of Defense, Executive Services Directorate (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

All Data Line Items A TDP TM OTHER X - MGMT

D. SYSTEM|ITEM E. CONTRACT/PR NO. F. CONTRACTOR

Integrated Tool Suite software and hardware

N0003919R0081 TBD

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE 17. PRICE

GROUP

A002 System Security Plan and Associated Plans of Action for a Contractor’s Internal Unclassified Information System

N/A

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE 18.

ESTIMATED

TOTAL PRICE

DI-MGMT-82247 PWS 5.1; 8.0 PMW 130

7. DD 250 REQ 9. DIST

STATEMENT

REQUIRED

10. FREQUENCY 12. DATE OF FIRST SUBMISSION 14. DISTRIBUTION

LT See Block 16 See Block 16 b. COPIES

8. APP CODE 11. AS OF DATE 13. DATE OF SUBSEQUENT

SUBMISSION

a. ADDRESSEE DRAFT FINAL

N/A E N/A See Block 16 Reg Repro

16. REMARKS COR 1

Block 9: Distribution Statement E: Distribution authorized to the Department of Defense only; Proprietary Information; 10 May 2019. Other requests for this document shall be referred to PMW 130.

Blocks 10, 11, 12, 13: Initial submission shall be 30 days after contract award, and all subsequent annual submissions, of SSP and Plans of Action (or appropriate extracts thereof) shall be submitted upon request. Requests will indicate what specific information is required (e.g., list of requirements not yet met and associated plans of action; description of how all requirements are met and associated plans of action).

Block 14: The Contractor shall submit the Systems Security Plan and Associated Plans of Action via a secure method such as encrypted email, file transfer or CD/DVD to the COR. The Contractor shall concurrently provide a copy of the Letter of Transmittal (LT) to the PCO. Any data deliverables containing SECRET information shall be submitted to the COR via SIPRNet.

The Contractor shall provide notification to the COR of SIPR deliverables to the COR’s NMCI/NIPR email.

The contractor shall submit which version of the software as well as the contract number with EVERY software delivery.

COR:

LCDR Jamie Mason 619-524-7641

15. Total 1

Assistant Program Manager

H. DATE

7/11/2019

I. APPROVED BY

Jamie Mason, PMW 130 Assistant Program Manager

DD FORM 1423-1, FEB 2001 Page 2 of 6 Pages

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding thus burden estimate or any other aspect of this collection of information, including suggestions for reducing this burden, to Department of Defense, Executive Services Directorate (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

All Data Line Items A TDP TM OTHER X - SCRE

D. SYSTEM|ITEM E. CONTRACT/PR NO. F. CONTRACTOR

Integrated Tool Suite software and hardware

N0003919R0081 TBD

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE 17. PRICE

GROUP

A003 Contractor’s Record of Tier 1 Level Suppliers Receiving/Developing Covered Defense Information

N/A

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE 18.

ESTIMATED

TOTAL PRICE

DI-SCRE-82258 PWS 5.1; 9.2 PMW 130

7. DD 250 REQ 9. DIST

STATEMENT

REQUIRED

10. FREQUENCY 12. DATE OF FIRST SUBMISSION 14. DISTRIBUTION

LT See Block 16 See Block 16 b. COPIES

8. APP CODE 11. AS OF DATE 13. DATE OF SUBSEQUENT

SUBMISSION

a. ADDRESSEE DRAFT FINAL

N/A E N/A See Block 16 Reg Repro

16. REMARKS COR 0 1

Block 9: Distribution Statement E: Distribution authorized to the Department of Defense only; Proprietary Information; 10 May 2019. Other requests for this document shall be referred to PMW 130.

Blocks 10, 12, 13: Initial shall be delivered 30 days after contract modification incorporating CDRL. Subsequent submissions shall be required when changes are made to the list, but no more than monthly.

Block 14: * Local cognizant DCMA and DSS offices.

The Contractor shall submit CDRL to COR via encrypted email. CDRLs shall contain the Data Item No. from Block 1 of the DD 1423. Any deliverables containing classified or sensitive information shall be submitted in Digital Versatile Disc to the PMW 130 COR using appropriate means. Any data deliverables containing SECRET information shall be submitted to the COR via SIPRNet. The Contractor shall provide notification to the COR of SIPR deliverables to the COR’s NMCI/NIPR email.

The contractor shall submit which version of the software as well as the contract number with EVERY software delivery.

COR:

LCDR Jamie Mason 619-524-7641

DCMA* 0 1

DSS* 0 1

Assistant Program Manager

H. DATE

7/11/2019

I. APPROVED BY

Jamie Mason, PMW 130 Assistant Program Manager

DD FORM 1423-1, FEB 2001 Page 3 of 6 Pages

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding thus burden estimate or any other aspect of this collection of information, including suggestions for reducing this burden, to Department of Defense, Executive Services Directorate (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

All Data Line Items A TDP TM OTHER X - ILSS

D. SYSTEM|ITEM E. CONTRACT/PR NO. F. CONTRACTOR

Integrated Tool Suite software and hardware

N0003919R0081 TBD

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE 17. PRICE

GROUP

A004 Training Materials Other Program Training Materials

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE 18.

ESTIMATED

TOTAL PRICE

DI-ILSS-80872 PWS 4.0; 5.1 PMW 130

7. DD 250 REQ 9. DIST

STATEMENT

REQUIRED

10. FREQUENCY 12. DATE OF FIRST SUBMISSION 14. DISTRIBUTION

LT See Block 16 See Block 16 b. COPIES

8. APP CODE 11. AS OF DATE 13. DATE OF SUBSEQUENT

SUBMISSION

a. ADDRESSEE DRAFT FINAL

N/A D N/A See Block 16 Reg Repro

16. REMARKS COR 0 1

Block 9: Distribution Statement D: Distribution authorized to the DoD and U.S. DoD Contractors only; Operational Use; 10 May 2019. Other request for this document shall be referred to PMW 130.

Block 10, 12, and 13: The Government will provide the Contractor 90 day advance notice of when training shall take place, and the Contractor shall submit Training Materials two weeks prior to each training event.

Subsequent submissions shall be required when changes are made to the Training Materials, but no more than once annually.

Block 14: The Contractor shall submit CDRL to COR via encrypted email.

CDRLs shall contain the Data Item No. from Block 1 of the DD 1423. Any deliverables containing classified or sensitive information shall be submitted in Digital Versatile Disc to the PMW 130 COR using appropriate means. Any data deliverables containing SECRET information shall be submitted to the COR via SIPRNet. The Contractor shall provide notification to the COR of SIPR deliverables to the COR’s NMCI/NIPR email.

619-524-7641

Assistant Program Manager

H. DATE

7/11/2019

I. APPROVED BY

Jamie Mason, PMW 130 Assistant Program Manager

DD FORM 1423-1, FEB 2001 Page 4 of 6 Pages

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding thus burden estimate or any other aspect of this collection of information, including suggestions for reducing this burden, to Department of Defense, Executive Services Directorate (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

All Data Line Items A TDP TM OTHER X - ILSS

D. SYSTEM|ITEM E. CONTRACT/PR NO. F. CONTRACTOR

Integrated Tool Suite software and hardware

N0003919R0081 TBD

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE 17. PRICE

GROUP

A005 Commercial off-the-shelf (COTS) Equipment Manual Requirements

Commercial off-the-shelf (COTS) Training Materials

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE 18.

ESTIMATED

TOTAL PRICE

MIL-DTL-24784/4D PWS 4.0; 5.1 PMW 130

7. DD 250 REQ 9. DIST

STATEMENT

REQUIRED

10. FREQUENCY 12. DATE OF FIRST SUBMISSION 14. DISTRIBUTION

LT See Block 16 See Block 16 b. COPIES

8. APP CODE 11. AS OF DATE 13. DATE OF SUBSEQUENT

SUBMISSION

a. ADDRESSEE DRAFT FINAL

N/A D N/A See Block 16 Reg Repro

16. REMARKS COR 0 1

Block 9: Distribution Statement D: Distribution authorized to the DoD and U.S. DoD Contractors only; Operational Use; 10 May 2019. Other request for this document shall be referred to PMW 130.

Block 10, 12, and 13: The Government will provide the Contractor 90 day advance notice of when training shall take place. The Contractor shall submit COTS manuals and other documentation which come standard with the software and hardware, as well as training materials provided at any commercially available training courses relevant to the software that is available from the software vendor, two weeks prior to each training event.

Subsequent submissions shall be required when changes are made to the COTS manuals and other documentation, but no more than once annually.

Block 14: The Contractor shall submit CDRL to COR via encrypted email.

CDRLs shall contain the Data Item No. from Block 1 of the DD 1423. Any deliverables containing classified or sensitive information shall be submitted in Digital Versatile Disc to the PMW 130 COR using appropriate means. Any data deliverables containing SECRET information shall be submitted to the COR via SIPRNet. The Contractor shall provide notification to the COR of SIPR deliverables to the COR’s NMCI/NIPR email.

619-524-7641

Assistant Program Manager

H. DATE

7/11/2019

I. APPROVED BY

Jamie Mason, PMW 130 Assistant Program Manager

DD FORM 1423-1, FEB 2001 Page 5 of 6 Pages

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding thus burden estimate or any other aspect of this collection of information, including suggestions for reducing this burden, to Department of Defense, Executive Services Directorate (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

All Data Line Items A TDP TM OTHER X - MGMT

D. SYSTEM|ITEM E. CONTRACT/PR NO. F. CONTRACTOR

Integrated Tool Suite software and hardware

N0003919R0081 TBD

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE 17. PRICE

GROUP

A006 Contractor’s Progress, Status, and Management Report (CPSMR)

Monthly Status Report (MSR)

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE 18.

ESTIMATED

TOTAL PRICE

DI-MGMT-80227 PWS 4.0; 5.1 PMW 130

7. DD 250 REQ 9. DIST

STATEMENT

REQUIRED

10. FREQUENCY 12. DATE OF FIRST SUBMISSION 14. DISTRIBUTION

LT MTHLY 15DAC b. COPIES

8. APP CODE 11. AS OF DATE 13. DATE OF SUBSEQUENT

SUBMISSION

a. ADDRESSEE DRAFT FINAL

N/A D O 15DARP Reg Repro

16. REMARKS COR 0 1

Block 4: Within the September Monthly Status Report, the Contractor shall include confirmation that Enterprise-Wide Contractor Manpower Reporting Application (ECMRA) reporting requirements have been fulfilled as well as the total number of man-hours reported as specified in the PWS.

Block 9: DISTRIBUTION STATEMENT D: Distribution authorized to the Department of Defense and U.S. DoD Contractors only; Operational Use; 10 May 2019. Other request for this document shall be referred to PMW 130.

Block 10: The “As of Date” for the data in the Monthly Status Report shall be the end of the month.

Block 14: The Contractor shall submit CDRL to COR via encrypted email.

CDRLs shall contain the Data Item No. from Block 1 of the DD 1423. Any deliverables containing classified or sensitive information shall be submitted in Digital Versatile Disc to the PMW 130 COR using appropriate means. Any data deliverables containing SECRET information shall be submitted to the COR via SIPRNet. The Contractor shall provide notification to the COR of SIPR deliverable to the COR’s NMCI/NIPR email.

The contractor shall submit which version of the software as well as the contract number with EVERY software delivery.

COR:

LCDR Jamie Mason 619-524-7641 jamie.mason@navy.mil jamie.mason@navy.smil.mil

CS: Megan Ashley Megan Ashley@navy.mil

CS 1

Assistant Program Manager

H. DATE

7/11/2019

I. APPROVED BY

Jamie Mason, PMW 130 Assistant Program Manager

DD FORM 1423-1, FEB 2001 Page 6 of 6 Pages