EEAAD_CDRL_A022_-_Risk_and_Security_Governance_Report.pdf

PDF 179 KB Posted

Attached to
RFP - Enhanced Electronic Automatic Activation Device (EEAAD) Federal contract opportunity
Solicitation number
W911QY-19-R-0007
Issued by
Department of the Army Materiel Command Army Contracting Command Aberdeen Proving Ground

About this file

This Contract Data Requirements List (CDRL) outlines reporting requirements for an Enhanced Electronic Automatic Activation Device (EEAAD) contract. The contractor must submit a Risk and Security Governance Report within 90 days of award and every 30 days thereafter, including policies, vulnerabilities, incidents, and plans to address issues. An annual review of shared risk and security policies with the Government is also required. One year after award and annually, the contractor shall provide updated reports and samples to the US Army Natick Soldier Systems Center. The reports must be electronically submitted in encrypted Adobe PDF or Microsoft Word format.

Exhibit V CDRL A022 - Risk and Security Governance Report

View the file

Other files for this federal contract opportunity

Other files attached to RFP - Enhanced Electronic Automatic Activation Device (EEAAD), newest first.
File Type Posted
EEAAD_CDRL_A024_-_First_Production_Lot_Report.pdf PDF
EEAAD_CDRL_A009_-_POI_Maintainer.pdf PDF
EEAAD_CDRL_A017_-_SW_Configuration_Mgmt_Plan.PDF PDF
EEAAD_CDRL_A014_-_Lesson_Plan_Operator.pdf PDF
EEAAD_CDRL_A019_-_SW_System_Engineering_Verif_&_Valid_Plan_Docs.PDF PDF
Attachment_0004_-_Peckham_General_Vendor_Shipping_Instr.pdf PDF
EEAAD_CDRL_A020_-_SW_Support_Environment.PDF PDF
EEAAD_CDRL_A010_-_LMI_Data_Products.pdf PDF
EEAAD_CDRL_A006_-_Provisioning_Parts_List.pdf PDF
EEAAD_CDRL_A013_-_Operator.pdf PDF
EEAAD_CDRL_A007_-_Eng_Data_for_Provisioning.pdf PDF
W911QY-19-R-0007_-_EEAAD_RFP.pdf PDF
EEAAD_CDRL_A012_-_Mission.pdf PDF
EEAAD_CDRL_A023_-_Inspection_Plan.pdf PDF
Attachment_0003_-_Processing_Unit_pocket.pdf PDF
EEAAD_CDRL_A011_-_Special_Packaging_Instructions.pdf PDF
EEAAD_CDRL_A001_COTS_Manual_signed.pdf PDF
EEAAD_CDRL_A005_-_Support_Analysis_Summaries.pdf PDF
EEAAD_CDRL_A015_-_Lesson_Plan_-Maintainer.pdf PDF
EEAAD_CDRL_A016_-_Conduct_of_Training.pdf PDF
EEAAD_CDRL_A018_-_Software_Development_Plan.PDF PDF
Attachment_0005_-_Small_Business_Participation_Commitment_Document.pdf PDF
EEAAD_CDRL_A021_-SW_System_Engineering_Verif_&_Valid_Docs.PDF PDF
EEAAD_CDRL_A002_-_Validation_Plan_for_COTS_Manual_&_Supplemental_Info.pdf PDF
EEAAD_CDRL_A008_-_POI_Operator.pdf PDF
EEAAD_CDRL_A003_-_Validation_Report_for_COT_Manual_&_Supplemental_Info.pdf PDF
Attachment_0002_-_NDA_for_Control_Unit_Pocket.pdf PDF
EEAAD_CDRL_A004_-_Maintenance_Allocation_Chart.pdf PDF
Attachment_0001_-_Control_Unit_Pocket.pdf PDF
Show all 29

On GovTribe

Work with this file on GovTribe

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

DD FORM 1423-1, FEB 2001

CONTRACT DATA REQUIREMENTS LIST

(1 Data Item)

PREVIOUS EDITION MAY BE USED.

Form Approved OMB No. 0704-0188

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services and Communications Directorate (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

1. DATA ITEM NO. 2. TITLE OF DATA ITEM 3. SUBTITLE

4. AUTHORITY (Data Acquisition Document No.) 5. CONTRACT REFERENCE 6. REQUIRING OFFICE

7. DD 250 REQ

8. APP CODE

9. DIST STATEMENT

REQUIRED

10. FREQUENCY

11. AS OF DATE

12. DATE OF FIRST SUBMISSION

13. DATE OF SUBSEQUENT

SUBMISSION

14. DISTRIBUTION

a. ADDRESSEE

b. COPIES

Draft Final

Reg Repro

15. TOTAL

16. REMARKS

17. PRICE GROUP

18. ESTIMATED

TOTAL PRICE

G. PREPARED BY H. DATE I. APPROVED BY J. DATE

Page of Pages

CONTRACT DATA REQUIREMENTS LIST

(1 Data Item)

A. CONTRACT LINE ITEM NO. B. EXHIBIT C. CATEGORY:

TDP ________ TM _______ OTHER

D. SYSTEM/ITEM E. CONTRACT/PR NO. F. CONTRACTOR

16. REMARKS (Continued)

DD FORM 1423-1, FEB 2001 Page of Pages

INSTRUCTIONS FOR COMPLETING DD FORM 1423

(See DoD 5010.12-M for detailed instructions.)

FOR GOVERNMENT PERSONNEL

Item A. Self-explanatory.

Item B. Self-explanatory.

Item C. Mark (X) appropriate category: TDP - Technical Data Package;

TM - Technical Manual; Other - other category of data, such as "Provisioning,""Configuration Management," etc.

Item D. Enter name of system/item being acquired that data will support.

Item E. Self-explanatory (to be filled in after contract award).

Item F. Self-explanatory (to be filled in after contract award).

Item G. Signature of preparer of CDRL.

Item H. Date CDRL was prepared.

Item I. Signature of CDRL approval authority.

Item J. Date CDRL was approved.

Item 1. See DoD FAR Supplement Subpart 4.71 for proper numbering.

Item 2. Enter title as it appears on data acquisition document cited in Item 4.

Item 3. Enter subtitle of data item for further definition of data item (optional entry).

Item 4. Enter Data Item Description (DID) number, military specification number, or military standard number listed in DoD 5010.12-L (AMSDL), or one-time DID number, that defines data content and format requirements.

Item 5. Enter reference to tasking in contract that generates requirement for the data item (e.g., Statement of Work paragraph number).

Item 6. Enter technical office responsible for ensuring adequacy of the data item.

Item 7. Specify requirement for inspection/acceptance of the data item by the Government.

Item 8. Specify requirement for approval of a draft before preparation of the final data item.

Item 9. For technical data, specify requirement for contractor to mark the appropriate distribution statement on the data (ref. DoDD 5230.24).

Item 10. Specify number of times data items are to be delivered.

Item 11. Specify as-of date of data item, when applicable.

Item 12. Specify when first submittal is required.

Item 13. Specify when subsequent submittals are required, when applicable.

Item 14. Enter addressees and number of draft/final copies to be delivered to each addressee. Explain reproducible copies in Item 16.

Item 15. Enter total number of draft/final copies to be delivered.

Item 16. Use for additional/clarifying information for Items 1 through 15.

Examples are: Tailoring of documents cited in Item 4; Clarification of submittal dates in Items 12 and 13; Explanation of reproducible copies in Item 14.; Desired medium for delivery of the data item.

FOR THE CONTRACTOR

Item 17. Specify appropriate price group from one of the following groups of effort in developing estimated prices for each data item listed on the DD Form 1423.

a. Group I. Definition - Data which is not otherwise essential to the contractor's performance of the primary contracted effort (production, development, testing, and administration) but which is required by DD Form 1423.

Estimated Price - Costs to be included under Group I are those applicable to preparing and assembling the data item in conformance with Government requirements, and the administration and other expenses related to reproducing and delivering such data items to the Government.

b. Group II. Definition - Data which is essential to the performance of the primary contracted effort but the contractor is required to perform additional work to conform to Government requirements with regard to depth of content, format, frequency of submittal, preparation, control, or quality of the data item.

Estimated Price - Costs to be included under Group II are those incurred over and above the cost of the essential data item without conforming to Government requirements, and the administrative and other expenses related to reproducing and delivering such data item to the Government.

c. Group III. Definition - Data which the contractor must develop for his internal use in performance of the primary contracted effort and does not require any substantial change to conform to Government requirements with regard to depth of content, format, frequency of submittal, preparation, control, and quality of the data item.

Estimated Price - Costs to be included under Group III are the administrative and other expenses related to reproducing and delivering such data item to the Government.

d. Group IV. Definition - Data which is developed by the contractor as part of his normal operating procedures and his effort in supplying these data to the Government is minimal.

Estimated Price - Group IV items should normally be shown on the DD Form 1423 at no cost.

Item 18. For each data item, enter an amount equal to that portion of the total price which is estimated to be attributable to the production or development for the Government of that item of data.

These estimated data prices shall be developed only from those costs which will be incurred as a direct result of the requirement to supply the data, over and above those costs which would otherwise be incurred in performance of the contract if no data were required. The estimated data prices shall not include any amount for rights in data. The Government's right to use the data shall be governed by the pertinent provisions of the contract.

DD FORM 1423-1 (BACK), FEB 2001

1_DATA_ITEM_NO: A022
2_TITLE_OF_DATA_ITEM: Risk and Security Governance (RSG) Report
3_SUBTITLE: UPDATED DOCUMENT
4_AUTHORITY_Data_Acquisit: DI-IPSC-81427A
5_CONTRACT_REFERENCE: See Block 16
6_REQUIRING_OFFICE: PM SCIE
7_DID_250_REQ: N/A
8_APP_CODE: N/A
DIST_STATEMENT: See Block 16
10_FREQUENCY: See Block 16
11_AS_OF_DATE:
12_DATE_OF_FIRST_SUBMISSI: See Block 16
13_DATE_OF_SUBSEQUENT_SUB: See Block 16
addressee1: PM SCIE
draft1:
reg1: 1
repro1:
addressee2: ARDEC
draft2:
reg2: 1
repro2:
addressee3:
draft3:
reg3:
repro3:
addressee4:
draft4:
reg4:
repro4:
addressee5:
draft5:
reg5:
repro5:
addressee6:
draft6:
reg6:
repro6:
addressee7:
draft7:
reg7:
repro7:
addressee8:
draft8:
reg8:
repro8:
addressee9:
draft9:
reg9:
repro9:
addressee10:
draft10:
reg10:
repro10:
addressee11:
draft11:
reg11:
repro11:
addressee12:
draft12:
reg12:
repro12:
addressee13:
draft13:
reg13:
repro13:
addressee14:
draft14:
reg14:
repro14:
addressee15:
draft15:
reg15:
repro15:
addressee16:
draft16:
reg16:
repro16:
addressee17:
draft17:
reg17:
repro17:
addressee18:
draft18:
reg18:
repro18:
addressee19:
draft19:
reg19:
repro19:
addressee20:
draft20:
reg20:
repro20:
addressee21:
draft21:
reg21:
repro21:
addressee22:
draft22:
reg22:
repro22:
addressee23:
draft23:
reg23:
repro23:
addressee24:
draft24:
reg24:
repro24:
addressee25:
draft25:
reg25:
repro25:
addressee26:
draft26:
reg26:
repro26:
addressee27:
draft27:
reg27:
repro27:
addressee28:
draft28:
reg28:
repro28:
addressee29:
draft29:
reg29:
repro29:
addressee30:
draft30:
reg30:
repro30:
addressee31:
draft31:
reg31:
repro31:
addressee32:
draft32:
reg32:
repro32:
addressee33:
draft33:
reg33:
repro33:
addressee34:
draft34:
reg34:
repro34:
addressee35:
draft35:
reg35:
repro35:
addressee36:
draft36:
reg36:
repro36:
addressee37:
draft37:
reg37:
repro37:
addressee38:
draft38:
reg38x:
repro38:
total_draft: 0
total_repro: 0
16_REMARKS: Block 4: Contractor's format is acceptable.

Block 5: Reference DI-IPSC-81427A.

Block 9: DISTRIBUTION STATEMENT D Distribution authorized to the Department of Defense (DoD) and US DoD Contractors only. The document contains export controlled technical data of such military significance that release for purposes other than direct support of DoD supported activities may jeopardize an important technological or operational military advance of the United States.

Designation of such data is made by competent authority in accordance with DoD Directive 5230.25. Date of determination as of 01 November 2013. Other requests shall be referred to Product Manager Soldier Clothing and Individual Equipment, ATTN: SFAE-SDR-SCIE, Ft Belvoir, Virginia.

Warning - This document contains technical data whose export is restricted by the Arms Export Control Act (Title 22, U.S.C. and Sec 2751 et seq.) or the Export Administration Act of 1979, as amended (Title 50, U.S.C. App. 2401 et seq.). Violations of these export laws are subject to severe criminal penalties. Dissemination in accordance with provisions of DoD Directive 5230.25 (Reference C).

DESTRUCTION NOTICE - For unclassified, limited documents, destroy by any method that will prevent disclosure of contents or reconstruction of the document.

Blocks 10, 12 and 13:

The Contractor shall submit its first Risk & Security Governance (RSG) Report 90 days after contract award, every 30 days thereafter and perform an annual review with the Government of shared RSG policies, roles and responsibilities.

The initial RSG Report shall include the Contractor's actual RSG related policies, procedures, vulnerabilities, incidents, and Plan Of Action and Milestones (POAM) (Attachment ##) towards resolving any gaps, as specified in Section C-4.3 Risk & Security Governance.

Every 30 days thereafter, the Contractor shall submit its list of RSG policies, vulnerabilities and incidents experienced in the preceding period with an updated POAM.

17_PRICE_GROUP:
ESTIMATED_TOTAL_PRICE:
G_PREPARED_BY:
H_DATE: 02/11/2019
1_APPROVED_BY:
J_DATE: 02/13/2019
Page:
reg38t: 2
A_CONTRACT_LINE_ITEM_NO:
B_EXHIBIT: V
TDP:
TM:
OTHER: Software
DSYSTEMITEM: Enhanced Electronic Automatic Activation Device (EEAAD)
E_CONTRACTPR_NO:
FCONTRACTOR:
16_REMARKS_Continued: 16. One year after contract award and every year thereafter, the Contractor shall provide its RSG related policies, year to date vulnerabilities and incidents with an updated POAM.

The material reports and samples shall be mailed to the following address:

US Army Natick Soldier Systems Center

SFAE-SDR-SCIE

ATTN: Mr. Tashfiq Salam and or SFAE-SDR-SCIE Point of Contact 15 General Green Avenue Natick, MA 01760

Block 14: Contractor shall submit RSG Report electronically, encrypted or at least password protected with three upper case, three lower case, three numbers and three special characters in either Adobe PDF (preferable) or Microsoft Word format.

Page2:
of_pages:
Reset:
2019-02-11T14:19:48-0500
SCOMA.GREGORY.BRIAN.1015774580
2019-02-13T14:47:36-0500
FRANCE.ROBERT.J.1058012684

File details come from the government source that posted it. Updated .