PWS Attachment 2 - DRAFT DD FORM 1423-1 -System Security Plan.pdf
PDF 645 KB Posted
- Attached to
- Clinical Reference Laboratory Testing Services
- Solicitation number
- HT001526RE001
- Issued by
-
Defense Health Agency
About this file
This is a DD Form 1423-1, Contract Data Requirements List, used to specify a single data item requirement for federal contracts. The form documents the requirement for data item P170: System Security Plan and Associated Plans of Action for a Contractor's Internal Unclassified Information System, with an initial subtitle. The requiring office is THP/HPOSS, and submission shall be directed to the Contracting Officer via the DOD Safe website.
The submission schedule requires an initial submission within 30 calendar days after contract award, followed by optional annual subsequent submissions due 30 calendar days before each anniversary date during the option period. No specific file format is required, and no DD Form 250 is needed. The content must include a description of system boundaries, system environments of operation, implementation of NIST SP 800-171 security requirements, contractor plans to meet security requirements, relationships with other systems, and associated plans of action describing how the contractor will correct deficiencies and reduce or eliminate vulnerabilities in information systems related to the contract. The contractor may utilize NIST SP 800-171A to display the depth and rigor of assessment for each security requirement. The document references the Performance Work Statement paragraph for additional contract-related information and recommends using the CUI SSP template available at https://doi.org/10.6028/NIST.SP.800-171r3.
View the file
Other files
Show all 18
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
DD FORM 1423-1, FEB 2001
CONTRACT DATA REQUIREMENTS LIST
(1 Data Item)
PREVIOUS EDITION MAY BE USED.
Form Approved OMB No. 0704-0188
The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services and Communications Directorate (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.
A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:
TDP ________ TM _______ OTHER
D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR
1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE
4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE
7. DD 250 REQ
8. APP CODE
9. DIST STATEMENT
REQUIRED
10. FREQUENCY
11. AS OF DATE
12. DATE OF FIRST SUBMISSION
13. DATE OF SUBSEQUENT
SUBMISSION
14. DISTRIBUTION
a. ADDRESSEE
b. COPIES
Draft Final
Reg Repro
15. TOTAL
16. REMARKS
17. PRICE GROUP
18. ESTIMATED
TOTAL PRICE
G. PREPARED BY H. DATE I. APPROVED BY J. DATE
Page of Pages
DRAFT
| 1_DATA_ITEM_NO: P170 |
| 2_TITLE_OF_DATA_ITEM: System Security Plan and Associated Plans of Action for a Contractor’s Internal Unclassified Information System |
| 3_SUBTITLE: Initial |
| 4_AUTHORITY_Data_Acquisit: |
| 5_CONTRACT_REFERENCE: See PWS paragraph |
| 6_REQUIRING_OFFICE: THP/HPOSS |
| 7_DID_250_REQ: |
| 8_APP_CODE: |
| DIST_STATEMENT: B |
| 10_FREQUENCY: See Block 16 |
| 11_AS_OF_DATE: See Block 16 |
| 12_DATE_OF_FIRST_SUBMISSI: See Block 16 |
| 13_DATE_OF_SUBSEQUENT_SUB: See Block 16 |
| addressee1: Submit to the KO |
| draft1: |
| reg1: |
| repro1: |
| addressee2: via the DOD Safe |
| draft2: |
| reg2: |
| repro2: |
| addressee3: website. |
| draft3: |
| reg3: |
| repro3: |
| addressee4: |
| draft4: |
| reg4: |
| repro4: |
| addressee5: |
| draft5: |
| reg5: |
| repro5: |
| addressee6: |
| draft6: |
| reg6: |
| repro6: |
| addressee7: |
| draft7: |
| reg7: |
| repro7: |
| addressee8: |
| draft8: |
| reg8: |
| repro8: |
| addressee9: |
| draft9: |
| reg9: |
| repro9: |
| addressee10: |
| draft10: |
| reg10: |
| repro10: |
| addressee11: |
| draft11: |
| reg11: |
| repro11: |
| addressee12: |
| draft12: |
| reg12: |
| repro12: |
| addressee13: |
| draft13: |
| reg13: |
| repro13: |
| addressee14: |
| draft14: |
| reg14: |
| repro14: |
| addressee15: |
| draft15: |
| reg15: |
| repro15: |
| addressee16: |
| draft16: |
| reg16: |
| repro16: |
| addressee17: |
| draft17: |
| reg17: |
| repro17: |
| addressee18: |
| draft18: |
| reg18: |
| repro18: |
| addressee19: |
| draft19: |
| reg19: |
| repro19: |
| addressee20: |
| draft20: |
| reg20: |
| repro20: |
| addressee21: |
| draft21: |
| reg21: |
| repro21: |
| addressee22: |
| draft22: |
| reg22: |
| repro22: |
| addressee23: |
| draft23: |
| reg23: |
| repro23: |
| addressee24: |
| draft24: |
| reg24: |
| repro24: |
| addressee25: |
| draft25: |
| reg25: |
| repro25: |
| addressee26: |
| draft26: |
| reg26: |
| repro26: |
| addressee27: |
| draft27: |
| reg27: |
| repro27: |
| addressee28: |
| draft28: |
| reg28: |
| repro28: |
| addressee29: |
| draft29: |
| reg29: |
| repro29: |
| addressee30: |
| draft30: |
| reg30: |
| repro30: |
| addressee31: |
| draft31: |
| reg31: |
| repro31: |
| addressee32: |
| draft32: |
| reg32: |
| repro32: |
| addressee33: |
| draft33: |
| reg33: |
| repro33: |
| addressee34: |
| draft34: |
| reg34: |
| repro34: |
| addressee35: |
| draft35: |
| reg35: |
| repro35: |
| addressee36: |
| draft36: |
| reg36: |
| repro36: |
| addressee37: |
| draft37: |
| reg37: |
| repro37: |
| addressee38: |
| draft38: |
| reg38x: |
| repro38: |
| total_draft: |
| total_repro: |
| 16_REMARKS: FIRST SUBMISSION: |
Frequency: One Time Reporting Period Start Date: Contract Award Due Date: Within 30 calendar days after contract award
SUBSEQUENT SUBMISSION:
Frequency: Annual (Option Period) Reporting Period Start Date: Continue from first submission Due Date: 30 calendar days before the anniversary date during each option period.
PII/PHI: No FILE FORMAT: No specific file format required.
CONTENT DETAILS:
The system security plan (SSP) shall include a description of system boundaries, system environments of operation, how the NIST SP 800-171 security requirements are implemented or how Contractor plans to meet the security requirements, and the relationships with or connections to other systems. Any associated plans of action shall include a description how the Contractor will correct deficiencies and reduce or eliminate vulnerabilities in the Contractor’s information system related to the contract. Recommend using CUI SSP template available at https://doi.org/10.6028/NIST.SP.800-171r3.
Contract Reference: See PWS paragraph
Assessment Objectives: The Contractor may utilize the NIST SP 800-171A to display the depth and rigor of their assessment of each of the NIST SP 800-171 security requirements.
| 17_PRICE_GROUP: |
| ESTIMATED_TOTAL_PRICE: |
| G_PREPARED_BY: |
| H_DATE: |
| 1_APPROVED_BY: |
| J_DATE: |
| reg38t: |
| A_CONTRACT_LINE_ITEM_NO: |
| B_EXHIBIT: |
| DSYSTEMITEM: |
| E_CONTRACTPR_NO: |
| FCONTRACTOR: |
| of_pages: 1 |
| Reset: |
| TDP: |
| OTHER: |
| A: |
| Contract Line: |
| B: |
| Exhibit: |
| D: |
| System: |
| E: |
| Contract/PR: |
| Contractor: |
| 16: |
| Remarks: |
| Page number of this page: 1 |
| Page number: |
| TD: |
| TM: |
| Other: |
| Remarks-2nd Pg (2): |
| Page number-2nd Pg (2): |
| Pages: |
| Remarks-2nd Pg (3): |
| Page number-2nd Pg (3): |
| Remarks-2nd Pg (5): |
| Page number-2nd Pg (5): |
File details come from the government source that posted it. Updated .