Naval Medical Logistics Command (NMLC) Certification & Accreditation (C&A) Initial Technical Questionnaire Certification and Accreditation (C&A) Process Initial Technical Questionnaire DIACAP/Platform Information Technology Risk Assessment (PIT/PRA) The information provided below will be used to identify the technical characteristics, of an information technology (IT)-based system/device, such as data processing capabilities, current security posture, and level of compliance with the Information Assurance (IA) principles of Confidentiality, Integrity, Availability, and Non-Repudiation. BLUE SECTION (Shall be submitted with proposal) SYSTEM IDENTIFICATION QUESTIONS 1.1 System Name: (System Name Provide the naming convention for the – system name and associated acronym (if any)) To help avoid duplicating efforts, if the C&A form has been already been filled out for the same system/device/application please select YES and stop. If you have not filled out this form before select NO and continue on with finishing the form. 1.2 System Description: (System Description Provide a brief high level – description of the system architecture) 1.3 Certification & Accreditation Status: (Certification & Accreditation (C&A) Status If known, – state whether the system has been or is currently undergoing the DoD Certification & Accreditation Process (DIACAP/PIT/CoN)) If the system has already attained Certification & Accreditation, completion of the remainder of the C&A Initial Technical Questionnaire is NOT required. 1.4 Data Processing Capabilities: (Data processing capabilities With regards to data – processing, does the system/device perform any of the following functions (check all that apply)) If none of the above functions is performed by the system/device described above, completion of the C&A Initial Technical Questionnaire is NOT required.
Naval Medical Logistics Command (NMLC) Certification & Accreditation (C&A) Initial Technical Questionnaire Certification and Accreditation (C&A) Process Initial Technical Questionnaire DIACAP/Platform Information Technology Risk Assessment (PIT/PRA) The information provided below will be used to identify the technical characteristics, of an information technology (IT)-based system/device, such as data processing capabilities, current security posture, and level of compliance with the Information Assurance (IA) principles of Confidentiality, Integrity, Availability, and Non-Repudiation. BLUE SECTION (Shall be submitted with proposal) SYSTEM IDENTIFICATION QUESTIONS 1.1 System Name: (System Name – Provide the naming convention for the system name and associated acronym (if any)) To help avoid duplicating efforts, if the C&A form has been already been filled out for the same system/device/application please select YES and stop. If you have not filled out this form before select NO and continue on with finishing the form. 1.2 System Description: (System Description – Provide a brief high level description of the system architecture) 1.3 Certification & Accreditation Status: (Certification & Accreditation (C&A) Status – If known, state whether the system has been or is currently undergoing the DoD Certification & Accreditation Process (DIACAP/PIT/CoN)) If the system has already attained Certification & Accreditation, completion of the remainder of the C&A Initial Technical Questionnaire is NOT required. 1.4 Data Processing Capabilities: (Data processing capabilities – With regards to data processing, does the system/device perform any of the following functions (check all that apply)) If none of the above functions is performed by the system/device described above, completion of the C&A Initial Technical Questionnaire is NOT required.
C%20and%20A%20Questionnaire%20for%20New%20Procurements.docx