Mod 02_A00Q RMF -RSNFH60_Rev02.pdf

DD FORM 1423-1, FEB 2001 PREVIOUS EDITION MAY BE USED. Page 1 of 1 Pages

CONTRACT DATA REQUIREMENTS

LIST

(1 Data Item)

Form Approved OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services Directorate (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT

A

C. CATEGORY:

TDP TM OTHER CYBERSECURITY

D. SYSTEM/ITEM

RSNF MH-60R TOFT

E. CONTRACT/PR NO.

N61340-XX-D-XXXX

F. CONTRACTOR

1. DATA ITEM NO.

A00Q

2. TITLE OF DATA ITEM

RISK MANAGEMENT FRAMEWORK (RMF)

PACKAGE DELIVERABLES

3. SUBTITLE

N/A

4. AUTHORITY (Data Acquisition Document No.)

DI-MGMT-82001

5. CONTRACT REFERENCE

SOW 240042 PARA 3.1.3.2.3

6. REQUIRING OFFICE

NAWCTSD ISSM

7. DD 250 REQ

LT

9. DIST STATEMENT

REQUIRED

D

10. FREQUENCY

ASREQ

12. DATE OF FIRST SUBMISSION

SEE BLK 16

14. DISTRIBUTION

a. ADDRESSEE

b. COPIES

8. APP CODE 11. AS OF DATE 13. DATE OF SUBSEQUENT

SUBMISSION

SEE BLK 16

Draft

Final

Reg Repro

16. REMARKS

1. BLK 9: THE FOLLOWING STATEMENT SHALL BE INCLUDED ON THE

DELIVERABLE:

DISTRIBUTION STATEMENT D: Distribution authorized to Department of Defense (DoD) and U.S. DoD contractors only; CTI and export controlled; 1 November 2024. Other requests for the document must be referred to Commanding Officer, Naval Air Systems Command, PMA-299, 47123 Buse Road, Bldg 2272, Patuxent River, MD 20670-1547.

DISCLOSURE: This information is furnished upon the condition that it or knowledge of its possession will not be disclosed to another nation, and that it will not be used for other than the military purpose for which it is being provided without specific authority from the U.S. Department of the Navy; that individual or corporate proprietary rights contained within, whether patented or not, will be respected; that the information will be provided the same degree of security afforded it by the U.S. Department of Defense. Regardless of any declassification markings, this information may not be downgraded or declassified by a foreign recipient without the written approval of the originating U.S. agency.

DESTRUCTION NOTICE: For Unclassified/Limited Distribution documents destroy by any method that will prevent disclosure of contents or reconstruction of the document.

EXPORT WARNING: This document contains technical data whose export is restricted by the Arms Export Control Act (Title 22, U.S.C., Sec 2751 et seq.) or the Export Administration Act of 1979, as amended, Title 50. U.S.C., App. 2401 et seq. Violations of these export laws are subject to severe criminal penalties. Disseminate in accordance with provisions of DoD Directive 5230.25.

2. BLK 12/13 – SEE ANNEX A00Q TABLE BELOW FOR SUBMISSION.

A. DAYS FOR SUBMITTAL ARE CALENDAR DAYS.

B. THE GOVERNMENT WILL HAVE 15 CALENDAR DAYS FOR REVIEW

AND ACCEPTANCE/REJECTION OF THE SUBMISSION. THE

CONTRACTOR SHALL HAVE 10 DAYS TO CORRECT AND RESUBMIT

REJECTED MATERIALS.

C. REVISIONS SHALL BE DUE AS REQUIRED THROUGH THE END OF

THE CONTRACT.

3. BLK 14: DIGITAL MEDIA SHALL BE IN MICROSOFT WORD/EXCEL 2010

COMPATIBLE FORMAT SUBMITTED VIA EMAIL OR CD/DVD-ROM. EMAIL

ADDRESSES PROVIDED IN THE CONTRACT. LSE, IPTL AND PCO SHALL BE

LETTER ONLY.

NAWCTSD PCO 0 SEE

BLK 16 0

NAWCTSD IPTL 0 SEE

BLK 16 0

NAWCTSD LSE 0 SEE

BLK 16

NAWCTSD ISSM 0 1 0

NAWCTSD ISSO 0 1 0

15. TOTAL 0 2 0

G. PREPARED BY

ANDRES, HANCHI, NAWCTSD ENG

H. DATE I. APPROVED BY

DANIEL P. LOTH, NAWCTSD PDI

J. DATE

18. ESTIMATED

TOTAL PRICE

17. PRICE GROUP

CONTRACT DATA REQUIREMENTS LIST

(1 Data Item)

A. CONTRACT LINE ITEM NO. B. EXHIBIT

A

C. CATEGORY:

TDP TM OTHER CYBERSECURITY

D. SYSTEM/ITEM

RSNF MH-60R TOFT

E. CONTRACT/PR NO.

N61340-XX-D-XXXX

F. CONTRACTOR

16. REMARKS (Continued)

ANNEX TO CDRL A00Q

RMF PACKAGE ELEMENT SUBMISSION

RMF PACKAGE ELEMENTS DATE DUE

SUBMISSION DUE TEN (10) CALENDAR

DAYS AFTER TO DTC1

• SELF ASSESSMENT TAB INCLUDING THE FOLLOWING:

1.)

2.)

ACAS.NESSUS FILE

OUTPUT FROM SCAP BENCHMARKS

3.) iii.COMPLTED SECURITY TECHNICAL IMPLEMENTATION GUIDES

(STIGS) CHECKLIST FOR ALL IT COMPONENTS

• PLAN OF ACTION AND MILESTONES (UPDATED POA&M) RESULTS

FROM SELF ASSESSMENT (TO INCLUDE ALL FINDINGS FROM

VULNERABILITY ASSESSMENT TOOLS AND STIG CHECKLISTS)

• UPDATED HARDWARE AND SOFTWARE LIST REFLECTING

CHANGES TO THE SYSTEM

• DIAGRAMS REFLECTING ANY CHANGES WITHIN THE

INFORMATION SYSTEM’S AUTHORIZATION BOUNDARY

• UPDATED ARTIFACTS REFLECTING TO DEVICE NAMES AND ANY

VLAN CHANGES

• CYBERSECUIRTY SYTEM ADMINISTRATION GUIDE (CSAG) WITH

ALL UPDATES INCLUDED

• UPDATED SECURITY CONTROLS TRACABILITY MATRIX

SUBMISSION DUE WITHIN (10) DAYS AFTER

ITC1 IS COMPLETED

• SELF ASSESSMENT TAB INCLUDING THE FOLLOWING:

1.)

2.)

ACAS.NESSUS FILE

OUTPUT FROM SCAP BENCHMARKS

3.) iii.COMPLTED SECURITY TECHNICAL IMPLEMENTATION GUIDES

• PLAN OF ACTION AND MILESTONES (UPDATED POA&M) RESULTS

FROM SELF ASSESSMENT (TO INCLUDE ALL FINDINGS FROM

VULNERABILITY ASSESSMENT TOOLS AND STIG CHECKLISTS)