DI-ADMIN-80239_(A002).pdf

Data Item Description PDF 108 KB Posted

Attached to
Information Assurance Certification and Accreditation Validation Services and IA Engineering Technical Support
Solicitation number
N64267-14-T-0137
Issued by

About this file

DID

View the file

Other versions and copies of DI-ADMIN-80239

File Revision Posted Attached to
18bb__DI-ADMIN-80239_(A002).pdf Revision not stated IA Services
di-admin-80239_a002.pdf Revision not stated Maintain IA C&A status on Trouble and Failure Reporting (TFR) System

Who attaches DI-ADMIN-80239

Other files

File Type Posted
DI-MGMT-80227_(A001).pdf PDF
CDRL_Scan_Results.pdf PDF
CDRL_Contractor's_Personnel_Listing.pdf PDF
DI-MISC-80841_(A003-A004).pdf PDF
CDRL_C_ _A_Documentation.pdf PDF
CDRL.pdf PDF
N64267-14-T-0137.pdf PDF
CDRL_Annual_Testing.pdf PDF
DI-MGMT-81834A_(A005).pdf PDF

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

DATA ITEM DESCRIPTION

Form AEWOVWJ

OMB No. 0704 -018C

EW 0.31s: 4“” 30, 1

TITLE 2. IDENTIFICATION NUMBER

InformationSystemsAccreditationDm2umantation

DI-ADMN-80239

DESCRIPTIONI.PURPOSE

3.1. ThE Data IterIDescription(DID)identifiesthe formatand contentrequirem coveredby the swcific and discretetaskfor the contractorto preparethisdata prcductidentifiedin the contractStatementof Work (SOW).

(continuadon page 2)

APPROVAL DATE 5. oFFICE OF PRIMARY RESPONSIBILITY (OPR) 6., DTIC REQUIRED 8b. G!DEP REOUll

:YYMMOO)

860915 A/ASSH-RMT

APPLICATION/ lNTERRELATlONSHIP

7.1. This DID cortati the fomt and content preparationinstructionfor the da productqeneratedby the specificand discretetaskrequirematfor thisdata includedin the contract.

7.2. This DID is applicableto all informationsystemsas SIXXified in AR 380-38C

7.3. ThisDID supersedesDI-s-1831.

APPROVAL LIMITATION 9.. APPLICABLE FORMS 9b, AIJSC NUMBER

A3963

PREPARATION INSTRUCTIONS

10.1 Contract. Thisdata is aeneratedby the contractwhichcontainsa q=ecific discretev.wk tasktm developthisdata mxxluct.

10.2 Contentand Format. Contentand Formatshal1 ke as describedbelow:

10.2.1 SectionI - ExecutiveSumrary.

a. Key Vulnerabilities.A summaryof key vulnerabilitiesidemtified during riskanalvsisprocessand exceptionalcircumstancespsrt.ainingto operatingthe system(s)in the facilityat the statedlevel. A discussionof actiOnsMen to minimizetheserisksmustte includd alongwitha descriptionof the exceptional circumstances,if any, justifyingoperationin thisenvironmsmt.

b. Male of Greration. De$cribsoptionsand proceduresin use at the facilit as follows:

(1) Icg-onattemots.

‘(2) Procedures,if processingin a lowersensitivitylevel.

(3) Majorsoftwaresystems,executive,and applications.

(4) Use of dataencryptionif any.

(5) Securityfeatuxes.

(6) Use of localnatiomls.

Form 18S4, FEB 85 .,.”,0”. e.. mo. !. “..”!

PAc3E~ —P~G=OF 3

3.

3.2.

DI-ADMN-80239

DEXRIFTICN/PUPXXE (cent‘d)

This DID definesthe dab requiredto obtaininformationsystemaccreditation in accordancewith AR 380-380,“AutrnnationSecurity.” Regulationcan be obtained from: ccmmnder, USAAGPublicationsCenter,2800-stern Blvd.,~l~re, ~ 21220-2896.

10. PREPARATIONIWSTRUCTTXXS(Cent’d)

10.2.1. (rent‘d)

c. WaiversRequested. Identifytitle,na and dateof any waiversgranted or rquestd for the Xormtion systi.

10.2.2. SectionII - AccreditationObjective.

a. Eackgrcund.Cesmiptionof relevanteventaleadingto and the objectiveof thisaccreditation;tbe essentialnatureof the missionand otherfactorsrrotivating thisaccreditaticm.otheroperationalalternatives(forexample,splitsystem, mcuremnt of separab cxxmuter)conaiderexlpriorto selectingthis courseofP action. Rationalefor rejectingotheropxational alternatives.

b: proposedsystem@sration. Detailedinformationconcerningfeaturesof operatloml and securitymalesto be i@em.nted, ti includedescriptionof syst~ (S) hardwareand software,significantapplications,and systeminterfaces.

10.2.3. SectionIII - Risk ManagementReview. Threatidentification(allexternal and internalthreats)will includea detailedvulnerabilityanalysis,risk assessmnt, and countermeasuresasscciatd with each threat.

10.2.4. SectionIV - Inplemmtationof SecurityControlsand Countemeasures.

a. SecurityFeatures. ~ibe h detailthe followingin existence:

(1) Security!4anagemnt.

(2) software.

(3) Hardmre.

(4) Procedural.

(5) Cannunications.

(6) Persoxlw?l.

(7) Dwunlentation.

(8) Physicaland Environwntal.

Page 2 of 3 pages

DI-ADMN-80239

10. PREPARATI~ INSTRUCrICNS(Cent’d)

b. I@emntation Procedures.Describereconmmded countemneasuresand alternatives,cost and tineestimatesto implementthesemwwres, milestones,task interdependenciesand initialand finaloperationalcapabilities.

c. ProblemAreas. Identifyproblemspotentiallydisruptiveof system accreditationtasks,processes,and schedules.

10.2.5. SectionV - System(s)Testand Evaluation(ST&E)Plan.

a. Test Requiremmts. A statementof the purpose,scow, objectivesand requirementsof the test.

b. TestMethodology.Identifythe follcwing:

(1) Test na.hcd to be used.

(2) Investigativeand analyticalapproachesto ke used.

(3) Supportrequirements,if any.

10.2.6. Appendices.The followingappendicesshal1 k included:

a. Glossarycontaininga listof abbreviationsor term.

b. Additionalappmdices shallbe used to furnishexamples,charts,exhibits, flowcharts,and scenario[s)thaturovideadditionalsupportivedata.

Page 3 of 3 Pages

File details come from the government source that posted it. Updated .