Attachment 44: Contract Data Requirements List SE015 STIG Compliance Report

CONTRACT DATA REQUIREMENTS LIST

Form Approved

OMB No. 0704-0188

(1 Data Item)

The public reporting burden for this collection of information is estimated to average 110 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any other aspect of this collection of information, including suggestions for reducing the burden, to the Department of Defense, Executive Services Directorate (0704-0188). Respondents should be aware that notwithstanding any other provision of law, no person shall be subject to any penalty for failing to comply with a collection of information if it does not display a currently valid OMB control number. Please do not return your form to the above organization. Send completed form to the Government Issuing Contracting Officer for the Contract/PR No. listed in Block E.

A. CONTRACT LINE ITEM NO.

B. EXHIBIT

C. CATEGORY:

D. SYSTEM/ITEM

1. DATA ITEM NO.

SE015

E. CONTRACT/PR NO.

8. APP CODE

17. PRICE GROUP

3. SUBTITLE

Security Technical Implementation Guides (STIG) Compliance Report

5. CONTRACT REFERENCE

N/A
N/A

X

F. CONTRACTOR

2. TITLE OF DATA ITEM

4. AUTHORITY (Data Acquisition Document No.)

7. DD 250 REQ

9. DIST STATEMENT

REQUIRED

10. FREQUENCY

12. DATE OF FIRST SUBMISSION

See Blk 16

N/A

USAISEC

14.

DISTRIBUTION

See Blk 16

13. DATE OF SUBSEQUENT

SUBMISSION

11. AS OF DATE

18. ESTIMATED

TOTAL PRICE

6. REQUIRING OFFICE

Sample Task 1 para 3.1.2, 3.1.3

b. COPIES

a. ADDRESSEE

16. REMARKS

Final

Draft

See Blk 16

COR

Date of first and subsequent submissions: Delivery of the DRAFT is due no later than 10 TM
business days after completion of the associated task. If returned, a follow-on DRAFT is Gov Project Lead
due no later than 3 business days after Contractor receipt of the Government’s comments. If comments are not provided within 2 business days of a DRAFT delivery, that DRAFT will become the FINAL.

Reg

Repro

Format: Microsoft Word, Arial, font size 12, black.
Content: Provide report that is technically sound, logically organized, coherent, and free of typographical and grammatical errors. The Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIG) Compliance Report shall include the following subject areas:
- Up to date list of the System physical and virtual hosts, operating systems, and applications.
- List of STIGs that apply to each of the physical and virtual hosts, operating systems, and