SOW Annex D - Ministerio de Defensa

1.5.5 Security Operating Procedures (SECOPS)NATO UNCLASSIFIEDAMD-7 TO IFB-CO-12546-POL GAG - SOW Annex Da. The Contractor shall develop Security Operating Procedures (SECOPS) for each site ofthe GAG system (CE sites and GAG sites) describing the implementation of proceduralsecurity requirements. This SECOPS shall follow the guidelines provided in aboveReference D.b. In terms of operational procedures, for elements of the GAG system connected to orproviding connectivity via the NDN or any other Host Nation’s network or system, theparticular national security requirements of the Host Nation shall be taken into account.1.5.6 Security Test and Evaluation Plan (ST&E)a. The Contractor shall develop a Security Test and Evaluation Plan (ST&E) describingthe testing activities for the security functions per each CE site and GAG site.b. The CE site-specific and GAG site-specific technical, administrative and securitysafeguards will be evaluated based on administrative and technical documentationreviews, a physical configuration management audit, equipment and/or systemdiagnostics, discrete security function testing, and total system testing to the extentpossible in the test environment.1.5.7 Key Management Plan (KMP)a. The KMP shall include the provisions for key exchange or key fill requirements insupport of the crypto equipment that will be integrated with the GAG system, e.g.VINSON or IP crypto devices (regardless whether those will be provided as PFE), butalso shall describe the process of exchanging of Word of Day (WOD) and otherrelevant information with the radio equipment.NATO UNCLASSIFIEDPage 6 of 14