The following are some of the key entities and roles within the CS TPL process:
CS TPL Executive Office
The CS TPL Executive Office (CTEO) acts as the staff element for managing the CS TPL. The CTEO provides process guidance, coordination, information, and support to Government sponsors and Offerors throughout the entire process, from the registration phase to placement on the CS TPL. CTEO is responsible for the management and staffing of the centralized testing laboratory in which all product testing and assessment will be conducted.
Product Sponsors (Optional)
Product sponsors are welcome participants to the CS TPL process. As key stakeholders, the Sponsors have valuable input as to the priorities, requirements, and goals of interested federal organizations. The Sponsor’s presence throughout the CS TPL process is helpful to build and maintain momentum for a successful outcome of the CS TPL process. The Sponsor should be a government employee from a participating department or agency. The major responsibilities and activities of the Sponsor include the following:
Offeror
An Offeror can be a manufacturer, Original Equipment Manufacturer (OEM), supplier, or a vendor with authority and knowledge to submit the product for evaluation by the CS TPL. The Offeror’s responsibilities for the CS TPL process are as follows:
CS TPL Executive Office
The CS TPL Executive Office (CTEO) acts as the staff element for managing the CS TPL. The CTEO provides process guidance, coordination, information, and support to Government sponsors and Offerors throughout the entire process, from the registration phase to placement on the CS TPL. CTEO is responsible for the management and staffing of the centralized testing laboratory in which all product testing and assessment will be conducted.
Product Sponsors (Optional)
Product sponsors are welcome participants to the CS TPL process. As key stakeholders, the Sponsors have valuable input as to the priorities, requirements, and goals of interested federal organizations. The Sponsor’s presence throughout the CS TPL process is helpful to build and maintain momentum for a successful outcome of the CS TPL process. The Sponsor should be a government employee from a participating department or agency. The major responsibilities and activities of the Sponsor include the following:
- Assist in prioritization of potentially competing Offeror submissions, or when the quantity of Offeror submissions exceeds CS TPL testing availability
- Assist DoD and other agencies with developing requirements for the CS TPL
- Facilitate the work of CTEO
- Clearly communicate aspects of the CS TPL process with stakeholder groups
- Ensure that the business need is valid and correctly prioritized within the CS TPL process
- Identify and qualify benefits of sponsored products in addition to the CS TPL and report benefit realization
- Involve stakeholders in the project and maintain their ongoing commitment to the CS TPL process
Offeror
An Offeror can be a manufacturer, Original Equipment Manufacturer (OEM), supplier, or a vendor with authority and knowledge to submit the product for evaluation by the CS TPL. The Offeror’s responsibilities for the CS TPL process are as follows:
- Understanding of existing government policy and procedures as they pertain to the sale of the product to the U.S. Government. The CS TPL does not replace any existing policy or procedures. It is only intended to augment the purchasing and RMF processes
- Assign by name an Offeror Lead Engineer (OLE) with appropriate technical knowledge which will be the primary Point of Contact (POC) for the Offeror activities in support of a specific product to be assessed
- Review the CS TPL documentation and submit completed forms and documentation in accordance with the process
- Provide detailed information and clarification to the test laboratory as requested
- Assist the CTEO, Decision Executive (DE), and Sponsor with the coordination of all testing activities, logistics, and funding for the test laboratory
- Perform due diligence in reviewing the offeror’s documentation for securing the device to meeting the known RMF requirements prior to submitting the product.
- Submit required documents and funding to the CTEO as directed in Section 3 in a timely manner
- Ensure engineering support is provided during all phases of the CS TPL testing assigned for the Device Under Test (DUT). This may require on-site support as determined by the Action Agent (AA)
- Attend the Initial Contact Meeting (ICM), out-briefings, and any applicable meetings to discuss test plan, test results, and Offeror mitigation strategies in accordance with the guidance provided in this process. These meetings may be virtual or may be in-person as directed by the AA
- Provide security configuration guidance for the DUT to the CTEO. Products with incomplete offeror provided security guidance may not be accepted to testing phase until this shortcoming is addressed.
- Provide product and management descriptions that will serve as input to the Cybersecurity Report (CR)
- Notify the CTEO within 30 days or more prior to a product no longer being available for purchase.