Q: We understand per the revision to the MSTC Statement of Work that the DIACAP package will be requested two weeks prior to the IA Test Readiness Review. What will be required in the DIACAP package as part of the VPS HFTM solicitation?

A: DIACAP Package will include all documentation as defined in the AR 25-2 and DoDI 8510.01's Comprehensive Package:

- System Identification Profile (SIP)
- DIACAP Implementation Plan (DIP)
- Information Security Plan (ISP)
- Configuration Management Plan (CMP)
- Continuity of Operations Plan (COOP)
- Hardware/Software List
- DIACAP Scorecard
- IT Security Plan of Action and Milestones (POA&M) (If Required)
- Supporting Certification Documentation

Bid Protests Not Available