[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-1-en-105":3,"doc-detail-240547-en":53,"doc-seo-240547-105":75},{"code":4,"msg":5,"data":6},0,"success",[7,14,19,24,29,34,39,44,49],{"id":8,"doc_module":9,"doc_module_name":10,"category_name":11,"show_sort_weight":12,"slug":13},11,1,"Template","Presentations",90,"presentations",{"id":15,"doc_module":9,"doc_module_name":10,"category_name":16,"show_sort_weight":17,"slug":18},12,"Resumes",80,"resumes",{"id":20,"doc_module":9,"doc_module_name":10,"category_name":21,"show_sort_weight":22,"slug":23},14,"Invoices",70,"invoices",{"id":25,"doc_module":9,"doc_module_name":10,"category_name":26,"show_sort_weight":27,"slug":28},15,"Posters",60,"posters",{"id":30,"doc_module":9,"doc_module_name":10,"category_name":31,"show_sort_weight":32,"slug":33},16,"Social Media",50,"social-media",{"id":35,"doc_module":9,"doc_module_name":10,"category_name":36,"show_sort_weight":37,"slug":38},17,"Forms",40,"forms",{"id":40,"doc_module":9,"doc_module_name":10,"category_name":41,"show_sort_weight":42,"slug":43},18,"Letters",30,"letters",{"id":45,"doc_module":9,"doc_module_name":10,"category_name":46,"show_sort_weight":47,"slug":48},21,"Paper Templates",5,"papers-templates",{"id":50,"doc_module":9,"doc_module_name":10,"category_name":51,"show_sort_weight":4,"slug":52},158,"General","general-158",{"code":4,"msg":5,"data":54},{"doc_id":55,"user_id":56,"nickname":57,"user_avatar":58,"doc_module":9,"category_id":8,"category_name":11,"doc_title":59,"doc_description":60,"doc_content":61,"file_id":62,"file_url":63,"file_type":64,"file_size":65,"view_count":35,"is_deleted":4,"is_public":9,"is_downloadable":9,"audit_status":9,"page_count":66,"language":67,"language_code":68,"site_id":69,"html_lang":68,"table_of_contents":70,"faqs":71,"seo_title":72,"seo_description":60,"update_tm":73,"read_time":74},240547,1099514068035,"Ezra","https://ap-avatar.wpscdn.com/davatar_276721f389ce27ea32af1340a28f341c","Improving Cybersecurity and Resilience through Acquisition - Draft Implementation Plan - Version 1","Draft implementation plan translating the DoD-GSA Joint Working Group report on improving cybersecurity and resilience through federal acquisitions into actionable steps. It defines the purpose, describes an iterative stakeholder-driven development process, and clarifies assumptions and constraints. The plan breaks recommendations into outcomes, assigns primary responsibility for steps, and outlines major tasks such as acquisition category definitions, acquisition risk assessment and prioritization, and developing security overlays methodology. It also notes differing overlay definitions and required foundational implementation sequencing.","Improving Cybersecurity and Resilience through Acquisition [DRAFT] IMPLEMENTATION PLAN  \nVersion 1.0 February 2014  \nTable of Contents  \nIntroduction................................................................................................................................... 3  \nPurpose........................................................................................................................................... 3  \nPlan Development Process ........................................................................................................... 3  \nAssumptions/Clarifications/Constraints ..................................................................................... 3  \nRecommendation IV: Acquisition Cyber Risk Management Strategy................................... 4  \nOutputs/Completion Criteria....................................................................................................... 4  \nOverview of Major Tasks and Sub Tasks................................................................................... 4  \nTask Descriptions.......................................................................................................................... 5  \nMAJOR TASK 1: Develop Acquisition Category Definitions ............................................... 5  \nSUB TASK 1.a. Determine Taxonomy and Establish Category Definitions....................... 5  \nSUB TASK 1.b. Conduct Spend Analysis............................................................................... 5  \nMAJOR TASK 2: Conduct Acquisition Risk Assessment and Prioritization...................... 6  \nMAJOR TASK 3: Develop Methodology to Create Overlays................................................ 6  \nSUB TASK 3.a. Determine Appropriate Security Controls ................................................. 7  \nSUB TASK 3.b. Determine Appropriate Acquisition Mitigations ....................................... 7  \nSUB TASK 3.b. Determine Appropriate Other Safeguards................................................. 7  \nIntroduction  \nSection 8(e) of Executive Order (EO) 13636 directed that the Department of Defense and the General Services Administration make recommendations to the President on the feasibility, security benefits, and relative merits of incorporating security standards into acquisition planning and contract administration.  \nThe final report of the Department of Defense (DoD) and General Services Administration (GSA) Joint Working Group on Improving Cybersecurity and Resilience through Acquisition was signed by the Secretary of Defense and the Administrator of General Services on January 23, 2014.1  \nThe DoD-GSA report (Report) recommends six (6) strategic reforms to address issues relevant to cybersecurity in Federal acquisitions, suggests how challenges might be resolved, and identifies important considerations for the implementation of the recommendations.  \nPurpose  \nThe Implementation Plan (Plan) translates the Report recommendations into onthe-ground actions that will improve cybersecurity and resilience by reforming management of the people, processes, and technology involved in Federal acquisitions. The government is committed to continuing the open, collaborative, stakeholder-centric process used to develop the recommendations in development of this Plan.  \nThe Plan incorporates the implementation considerations identified in the Report, breaks each recommended reform into identifiable outcomes and steps to achieve each outcome, assigns one or more office of primary responsibility for each step , presents specific actions Federal agencies will take to improve cybersecurity and resilience in acquisitions, and suggests when each step will be completed.  \nPlan Development Process  \nThe Plan will be developed using an iterative process to facilitate sequential and concurrent implementation of the recommendations as appropriate. Planning will be accomplished through a series of stakeholder outreach and engagement a","cbCaiiRzbQmD8X1F","https://ap.wps.com/l/cbCaiiRzbQmD8X1F","pdf",338057,7,"English","en",105,"# Introduction\n## Purpose\n## Plan Development Process\n## Assumptions/Clarifications/Constraints\n# Recommendation IV: Acquisition Cyber Risk Management Strategy\n## Outputs/Completion Criteria\n## Overview of Major Tasks and Sub Tasks\n## Task Descriptions\n### MAJOR TASK 1: Develop Acquisition Category Definitions\n### MAJOR TASK 2: Conduct Acquisition Risk Assessment and Prioritization\n### MAJOR TASK 3: Develop Methodology to Create Overlays","[{\"question\":\"What is the goal of the Draft Implementation Plan?\",\"answer\":\"The plan translates the report’s cybersecurity and resilience recommendations into on-the-ground actions that improve management of people, processes, and technology in federal acquisitions.\"},{\"question\":\"How will the plan be developed?\",\"answer\":\"Development follows an iterative approach using stakeholder outreach and engagement, including public comment requests and in-person meetings.\"},{\"question\":\"Why is Recommendation IV implemented first?\",\"answer\":\"It is implemented first because the federal acquisition cyber risk management strategy and processes provide the foundation needed for other recommendations.\"}]","Improving Cybersecurity and Resilience through Acquisition - Draft Implementation Plan - Version 1 | PDF",1789162641,3,{"code":4,"msg":76,"data":77},"ok",{"site_id":69,"language":68,"slug":78,"title":59,"keywords":79,"description":60,"schema_data":80,"social_meta":135,"head_meta":137,"extra_data":139,"updated_unix":140},"improving-cybersecurity-and-resilience-through-acquisition-draft-implementation-plan-version-1","",{"@graph":81,"@context":134},[82,97,117],{"@type":83,"itemListElement":84},"BreadcrumbList",[85,89,92,94],{"item":86,"name":87,"@type":88,"position":9},"https://docshare.wps.com","Home","ListItem",{"item":90,"name":10,"@type":88,"position":91},"https://docshare.wps.com/template/",2,{"item":93,"name":11,"@type":88,"position":74},"https://docshare.wps.com/template/presentations/",{"item":95,"name":59,"@type":88,"position":96},"https://docshare.wps.com/template/improving-cybersecurity-and-resilience-through-acquisition-draft-implementation-plan-version-1/240547/",4,{"url":95,"name":59,"@type":98,"image":99,"author":104,"headline":59,"publisher":106,"fileFormat":109,"inLanguage":68,"description":60,"dateModified":110,"datePublished":111,"encodingFormat":109,"isAccessibleForFree":112,"interactionStatistic":113},"DigitalDocument",{"url":100,"@type":101,"width":102,"height":103},"https://docshare.wps.com/thumbnails/improving-cybersecurity-and-resilience-through-acquisition-draft-implementation-plan-version-1/240547.png","ImageObject",442,249,{"name":57,"@type":105},"Person",{"url":86,"name":107,"@type":108},"DocShare","Organization","application/pdf","2026-10-31","2026-09-11",true,{"@type":114,"interactionType":115,"userInteractionCount":35},"InteractionCounter",{"@type":116},"ViewAction",{"@type":118,"mainEntity":119},"FAQPage",[120,126,130],{"name":121,"@type":122,"acceptedAnswer":123},"What is the goal of the Draft Implementation Plan?","Question",{"text":124,"@type":125},"The plan translates the report’s cybersecurity and resilience recommendations into on-the-ground actions that improve management of people, processes, and technology in federal acquisitions.","Answer",{"name":127,"@type":122,"acceptedAnswer":128},"How will the plan be developed?",{"text":129,"@type":125},"Development follows an iterative approach using stakeholder outreach and engagement, including public comment requests and in-person meetings.",{"name":131,"@type":122,"acceptedAnswer":132},"Why is Recommendation IV implemented first?",{"text":133,"@type":125},"It is implemented first because the federal acquisition cyber risk management strategy and processes provide the foundation needed for other recommendations.","https://schema.org",{"og:url":95,"og:type":136,"og:title":59,"og:site_name":107,"og:description":60},"article",{"robots":138,"canonical":95},"index,follow",{"doc_id":55,"site_id":69},1791718915]