Attachment 36 - AMHE DIDs (DI-DLAMGMT-00009 Physical and Cybersecurity Features of End Devices Provided).pdf

Form Approved OMB No. 0704-0188

Page ___ of ___ Pages

PREVIOUS EDITION MAY BE USED.DD FORM 1664, AUG 96 (EG)

DATA ITEM DESCRIPTION

1. TITLE 2. IDENTIFICATION NUMBER

3. DESCRIPTION/PURPOSE

4. APPROVAL DATE

(YYYYMMDD)

5. OFFICE OF PRIMARY RESPONSIBILITY (OPR) 6a. DTIC APPLICABLE 6b. GIDEP APPLICABLE

7. APPLICATION/INTERRELATIONSHIP

8. APPROVAL LIMITATION 9a. APPLICABLE FORMS 9b. AMSC NUMBER

10. PREPARATION INSTRUCTIONS

11. DISTRIBUTION STATEMENT

Distribution Statement A: Approved for public release; distribution is unlimited.

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to Department of Defense, Washington Headquarters Services, Directorate for Information Operations and Reports (0704-0188), 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 22202-4302. Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number. PLEASE DO NOT RETURN YOUR FORM TO THE ABOVE ADDRESS.

DD Form 1664 (BLANK)

Certificate of Compliance (Figure 1)

10 PREPARATION INSTRUCTIONS: 10.1 Format: The documentation must in the Contractor's design unless otherwise specified on the Contract Data Requirements List (CDRL / DD Form 1423). Unless stated otherwise on the CDRL, the deliverable to the Government must be provided in digital format and viewable using the latest version of Microsoft Office or Adobe software products as applicable.

10.2 Content: The documentation must identify a complete list of all physical and cybersecurity features for the solution / system. This complete list may include (but not be limited to) authentication, encryption, access control, event and communication logging, monitoring, methods to change settings from Contractor configured or manufacturer default conditions, and alarming to protect the deployed solution / system from unauthorized modification or use. The documentation must also identify all of the physical and cybersecurity features that are non-essential and/or not required for the operation / maintenance of the solution / system with indication on which of those unnecessary features were disabled or removed by the Contractor as part of the configuration.

10.3 Revisions: Unless otherwise indicated by revision and date, the documentation submitted by the Contractor to the Government as cited within this DID will be considered the most up to date iteration. Revisions to documentation must be provided by the Contractor with an accompanying summary that clearly identifies to the Government all changes at the time of submission.

7.2 This DID may be applied to programs or projects during Material Solution Analysis (MSA), Technology Maturation & Risk Reduction (TMRR), Engineering & Manufacturing Development (EMD), Production & Deployment (P&D), and Operations & Support (O&S) phases of the Defense Acquisition Life Cycle.