PWS Attachment 2 - DD FORM 1423-1 -System Security Plan.pdf
PDF 653 KB Posted
- Attached to
- Clinical Reference Laboratory Testing Services
- Solicitation number
- HT001526RE001FINAL
- Issued by
-
Defense Health Agency
About this file
This is a DD Form 1423-1, Contract Data Requirements List, which documents a single data item requirement for a federal contract. The data item (P170) is a System Security Plan and Associated Plans of Action for a Contractor's Internal Unclassified Information System, with an initial subtitle designation. The requiring office is THP/HPOSS, and submission is directed to the Contracting Officer via the DOD Safe website.
The first submission is due within 30 calendar days after contract award as a one-time deliverable. Subsequent annual submissions are required, with each due 30 calendar days before the anniversary date during each option period. No specific file format is mandated. The content must include a description of system boundaries, system environments of operation, implementation of NIST SP 800-171 security requirements, and plans to correct deficiencies and reduce vulnerabilities in the contractor's information system. The form references the Performance Work Statement paragraph for additional contract context and recommends using the CUI SSP template available at https://doi.org/10.6028/NIST.SP.800-171r3. The contractor may utilize the NIST SP 800-171A assessment methodology to demonstrate the depth and rigor of their assessment of each NIST SP 800-171 security requirement.
View the file
Other files
Show all 17
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
DD FORM 1423-1, FEB 2001
CONTRACT DATA REQUIREMENTS LIST
(1 Data Item)
PREVIOUS EDITION MAY BE USED.
Form Approved OMB No. 0704-0188
The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services and Communications Directorate (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.
A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:
TDP ________ TM _______ OTHER
D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR
1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE
4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE
7. DD 250 REQ
8. APP CODE
9. DIST STATEMENT
REQUIRED
10. FREQUENCY
11. AS OF DATE
12. DATE OF FIRST SUBMISSION
13. DATE OF SUBSEQUENT
SUBMISSION
14. DISTRIBUTION
a. ADDRESSEE
b. COPIES
Draft Final
Reg Repro
15. TOTAL
16. REMARKS
17. PRICE GROUP
18. ESTIMATED
TOTAL PRICE
G. PREPARED BY H. DATE I. APPROVED BY J. DATE
Page of Pages
| 1_DATA_ITEM_NO: P170 |
| 2_TITLE_OF_DATA_ITEM: System Security Plan and Associated Plans of Action for a Contractor’s Internal Unclassified Information System |
| 3_SUBTITLE: Initial |
| 4_AUTHORITY_Data_Acquisit: |
| 5_CONTRACT_REFERENCE: See PWS paragraph |
| 6_REQUIRING_OFFICE: THP/HPOSS |
| 7_DID_250_REQ: |
| 8_APP_CODE: |
| DIST_STATEMENT: B |
| 10_FREQUENCY: See Block 16 |
| 11_AS_OF_DATE: See Block 16 |
| 12_DATE_OF_FIRST_SUBMISSI: See Block 16 |
| 13_DATE_OF_SUBSEQUENT_SUB: See Block 16 |
| addressee1: Submit to the KO |
| draft1: |
| reg1: |
| repro1: |
| addressee2: via the DOD Safe |
| draft2: |
| reg2: |
| repro2: |
| addressee3: website. |
| draft3: |
| reg3: |
| repro3: |
| addressee4: |
| draft4: |
| reg4: |
| repro4: |
| addressee5: |
| draft5: |
| reg5: |
| repro5: |
| addressee6: |
| draft6: |
| reg6: |
| repro6: |
| addressee7: |
| draft7: |
| reg7: |
| repro7: |
| addressee8: |
| draft8: |
| reg8: |
| repro8: |
| addressee9: |
| draft9: |
| reg9: |
| repro9: |
| addressee10: |
| draft10: |
| reg10: |
| repro10: |
| addressee11: |
| draft11: |
| reg11: |
| repro11: |
| addressee12: |
| draft12: |
| reg12: |
| repro12: |
| addressee13: |
| draft13: |
| reg13: |
| repro13: |
| addressee14: |
| draft14: |
| reg14: |
| repro14: |
| addressee15: |
| draft15: |
| reg15: |
| repro15: |
| addressee16: |
| draft16: |
| reg16: |
| repro16: |
| addressee17: |
| draft17: |
| reg17: |
| repro17: |
| addressee18: |
| draft18: |
| reg18: |
| repro18: |
| addressee19: |
| draft19: |
| reg19: |
| repro19: |
| addressee20: |
| draft20: |
| reg20: |
| repro20: |
| addressee21: |
| draft21: |
| reg21: |
| repro21: |
| addressee22: |
| draft22: |
| reg22: |
| repro22: |
| addressee23: |
| draft23: |
| reg23: |
| repro23: |
| addressee24: |
| draft24: |
| reg24: |
| repro24: |
| addressee25: |
| draft25: |
| reg25: |
| repro25: |
| addressee26: |
| draft26: |
| reg26: |
| repro26: |
| addressee27: |
| draft27: |
| reg27: |
| repro27: |
| addressee28: |
| draft28: |
| reg28: |
| repro28: |
| addressee29: |
| draft29: |
| reg29: |
| repro29: |
| addressee30: |
| draft30: |
| reg30: |
| repro30: |
| addressee31: |
| draft31: |
| reg31: |
| repro31: |
| addressee32: |
| draft32: |
| reg32: |
| repro32: |
| addressee33: |
| draft33: |
| reg33: |
| repro33: |
| addressee34: |
| draft34: |
| reg34: |
| repro34: |
| addressee35: |
| draft35: |
| reg35: |
| repro35: |
| addressee36: |
| draft36: |
| reg36: |
| repro36: |
| addressee37: |
| draft37: |
| reg37: |
| repro37: |
| addressee38: |
| draft38: |
| reg38x: |
| repro38: |
| total_draft: |
| total_repro: |
| 16_REMARKS: FIRST SUBMISSION: |
Frequency: One Time Reporting Period Start Date: Contract Award Due Date: Within 30 calendar days after contract award
SUBSEQUENT SUBMISSION:
Frequency: Annual (Option Period) Reporting Period Start Date: Continue from first submission Due Date: 30 calendar days before the anniversary date during each option period.
PII/PHI: No FILE FORMAT: No specific file format required.
CONTENT DETAILS:
The system security plan (SSP) shall include a description of system boundaries, system environments of operation, how the NIST SP 800-171 security requirements are implemented or how Contractor plans to meet the security requirements, and the relationships with or connections to other systems. Any associated plans of action shall include a description how the Contractor will correct deficiencies and reduce or eliminate vulnerabilities in the Contractor’s information system related to the contract. Recommend using CUI SSP template available at https://doi.org/10.6028/NIST.SP.800-171r3.
Contract Reference: See PWS paragraph
Assessment Objectives: The Contractor may utilize the NIST SP 800-171A to display the depth and rigor of their assessment of each of the NIST SP 800-171 security requirements.
| 17_PRICE_GROUP: |
| ESTIMATED_TOTAL_PRICE: |
| G_PREPARED_BY: |
| H_DATE: |
| 1_APPROVED_BY: |
| J_DATE: |
| reg38t: |
| A_CONTRACT_LINE_ITEM_NO: |
| B_EXHIBIT: |
| DSYSTEMITEM: |
| E_CONTRACTPR_NO: |
| FCONTRACTOR: |
| of_pages: 1 |
| Reset: |
| TDP: |
| OTHER: |
| A: |
| Contract Line: |
| B: |
| Exhibit: |
| D: |
| System: |
| E: |
| Contract/PR: |
| Contractor: |
| 16: |
| Remarks: |
| Page number of this page: 1 |
| Page number: |
| TD: |
| TM: |
| Other: |
| Remarks-2nd Pg (2): |
| Page number-2nd Pg (2): |
| Pages: |
| Remarks-2nd Pg (3): |
| Page number-2nd Pg (3): |
| Remarks-2nd Pg (5): |
| Page number-2nd Pg (5): |
File details come from the government source that posted it. Updated .