Attachment 36 - AMHE DIDs (DI-DLAMGMT-00004 Software - Firmware Access Controls, User Roles, and Data Types).pdf

Form Approved OMB No. 0704-0188

Page ___ of ___ Pages

PREVIOUS EDITION MAY BE USED.DD FORM 1664, AUG 96 (EG)

DATA ITEM DESCRIPTION

1. TITLE 2. IDENTIFICATION NUMBER

3. DESCRIPTION/PURPOSE

4. APPROVAL DATE

(YYYYMMDD)

5. OFFICE OF PRIMARY RESPONSIBILITY (OPR) 6a. DTIC APPLICABLE 6b. GIDEP APPLICABLE

7. APPLICATION/INTERRELATIONSHIP

8. APPROVAL LIMITATION 9a. APPLICABLE FORMS 9b. AMSC NUMBER

10. PREPARATION INSTRUCTIONS

11. DISTRIBUTION STATEMENT

Distribution Statement A: Approved for public release; distribution is unlimited.

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to Department of Defense, Washington Headquarters Services, Directorate for Information Operations and Reports (0704-0188), 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 22202-4302. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number. PLEASE DO NOT RETURN YOUR FORM TO THE ABOVE ADDRESS.

DD Form 1664 (BLANK)

Certificate of Compliance (Figure 1)

10 PREPARATION INSTRUCTIONS: 10.1 Format: The documentation must in the Contractor's design unless otherwise specified on the Contract Data Requirements List (CDRL / DD Form 1423). Unless stated otherwise on the CDRL, the deliverable to the Government must be provided in digital format and viewable using the latest version of Microsoft Office or Adobe software products as applicable.

10.2 Content: The documentation must identify all administrator and user accounts (regardless if Contractor-configured or manufacturer default), usernames, passwords, security settings, security codes, user roles, user types, or any other access methods for the solution / system. The documentation must also identify the types of data required and data access levels with direct correlation to user roles / types for use by the solution / system. The documentation must affirm that all unnecessary/unneeded accounts for system operation have been removed.

10.3 Revisions: Unless otherwise indicated by revision and date, the documentation submitted by the Contractor to the Government as cited within this DID will be considered the most up to date iteration. Revisions to documentation must be provided by the Contractor with an accompanying summary that clearly identifies to the Government all changes at the time of submission.

7.2 This DID may be applied to programs or projects during Material Solution Analysis (MSA), Technology Maturation & Risk Reduction (TMRR), Engineering & Manufacturing Development (EMD), Production & Deployment (P&D), and Operations & Support (O&S) phases of the Defense Acquisition Life Cycle.