RTP SEC AttchC-7 PPIP Template

PROPOSER NAME

PROGRAM NAME

PROGRAM PROTECTION IMPLEMENTATION PLAN (PPIP)

VERSION #

DATE

********************************************************** Introduction (Instructional; Not for Inclusion in Contractor PPIP) This sample Contractor Program Protection Implementation Plan (PPIP) Template is intended to inform proposers of example best practices that may be tailored to meet proposal-specific requirements. Proposal-specific requirements will dictate which topics and questions are applicable and potentially introduce new ones. This document is not a checklist, but rather is intended to account for a wide range of scenarios in order to formulate appropriate countermeasures throughout the protection process.

If this PPIP supplements a general or overarching corporate security plan (see Security Factor 4: Security Plan), the proposer must submit both documents for government review. If answers to questions within the PPIP template would be duplicative with the corporate security plan, the proposer may opt to consolidate multiple subsections of the PPIP template or cite the section(s) of the corporate security plan that address the question(s) within the PPIP template.

While the PPIP Contract Deliverable Requirements List (CDRL) deliverable must document, at a minimum, (1) critical technology elements and enabling technologies, (2) threats to, and vulnerabilities, of these items, and (3) selected countermeasures to mitigate associated risks, the initial draft of the PPIP submitted with the proposal only needs to demonstrate the proposer’s process for identifying critical technology elements and selecting countermeasures to mitigate threats to, and vulnerabilities of, these items.

The following five sections are required to address these requirements and provide an iterative record of risk management over the program’s lifecycle:

Introduction, Updates, and Responsible Points of Contact (POCs) Technology Element Identification and Impact Assessment Identified Threats and Vulnerabilities
Countermeasures and Risk Mitigation Plan
Response, Recovery, and Support
PPIP Update Record
Guidance: Update the following table listing PPIP updates, as necessary. PPIP Update Record
Revision Number
Date
Changes
Approved By

TOC \o "1-3" \h \z \u Introduction (Instructional; Not for Inclusion in Contractor PPIP) PAGEREF _Toc176256711 \h 1 PPIP Update Record PAGEREF _Toc176256712 \h 2
1.Introduction, Updates, and Responsible POCs PAGEREF _Toc176256713 \h 5