<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE dita
  PUBLIC "-//OASIS//DTD DITA Composite//EN" "ditabase.dtd">
<dita xmlns:ditaarch="http://dita.oasis-open.org/architecture/2005/"
      domains="(topic task)                            (topic concept)                            (topic concept glossentry)                            (topic concept glossgroup)                            (topic reference)                            (topic troubleshooting++task) (topic task)                            (topic abbrev-d)                            a(props deliveryTarget)                            (topic equation-d)                            (topic hazard-d)                            (topic hi-d)                            (topic indexing-d)                            (topic markup-d)                            (topic mathml-d)                            (topic pr-d)                            (topic relmgmt-d)                            (topic sw-d)                            (topic svg-d)                            (topic ui-d)                            (topic ut-d)                            (topic markup-d xml-d)                            (topic task strictTaskbody-c)   "
      ditaarch:DITAArchVersion="1.3">
   <concept id="DFARS_PGI_PGI_239.7603-4"
            outputclass="4"
            ditaarch:DITAArchVersion="1.3"
            class="- topic/topic concept/concept ">
      <title class="- topic/title ">
         <ph props="autonumber" class="- topic/ph ">PGI 239.7603-4</ph>  DoD damage assessment activities.</title>
      <conbody class="- topic/body  concept/conbody ">
         <p outputclass="List1" class="- topic/p ">(a)  Prior to initiating damage assessment activities, the contracting officer shall verify that a contract(s) identified in the cyber incident report include(s) the clause at DFARS <xref outputclass="fm:ParaNumOnly"
                  class="- topic/xref "
                  base="DFARS-252.239-7010"
                  href="252.239-7010.dita#DFARS_252.239-7010">252.239-7010</xref>.   If the contracting officer determines that a contract identified in the report does not contain the clause, the contracting officer shall notify the requiring activity that damage assessment activities, if required, may be determined to constitute a change to the contract.</p>
         <p outputclass="List1" class="- topic/p ">(b)  In cases of cyber incidents involving multiple contracts, a single contracting officer will be designated to coordinate with the contractor regarding media submission.</p>
         <p outputclass="List1" class="- topic/p ">(c)  If the requiring activity requests the contracting officer obtain media, as defined at DFARS <xref outputclass="fm:ParaNumOnly"
                  class="- topic/xref "
                  base="DFARS-252.239-7010"
                  href="252.239-7010.dita#DFARS_252.239-7010">252.239-7010</xref>, from the contractor, the contracting officer shall—</p>
         <p outputclass="List2" class="- topic/p ">(1)  Provide a written request for the media;</p>
         <p outputclass="List2" class="- topic/p ">(2)  Provide the contractor with the “Instructions for Media Submission” document available at http://www.acq.osd.mil/dpap/dars/pgi/docs/Instructions_for_Submitting_Media.docx; and</p>
         <p outputclass="List2" class="- topic/p ">(3)  Provide a copy of the request to DC3, electronically via email at dcise@dc3.mil, and the requiring activity.</p>
         <p outputclass="List1" class="- topic/p ">(d)  If the contracting officer is notified by the requiring activity that media are not required, the contracting officer shall notify the contractor and simultaneously provide a copy of the notice to DC3 and the requiring activity.</p>
         <p outputclass="List1" class="- topic/p ">(e)  The contracting officer shall document the action taken as required by paragraph (c) or (d) of this section, in the contract file.</p>
         <p outputclass="List1" class="- topic/p ">(f)  Upon receipt of the contractor media, DC3 will confirm receipt in writing to the contractor and the requesting contracting officer.</p>
         <p outputclass="List1" class="- topic/p ">(g)  When the requiring activity determines that the damage assessment activities are complete, the requiring activity will provide the contracting officer with a report documenting the findings from the damage assessment activities affecting covered defense information.</p>
         <p outputclass="List1" class="- topic/p ">(h)  The contracting officer shall include the report documenting the findings in the contract file(s) and provide a copy to the contractor.</p>
      </conbody>
   </concept>
</dita>
