2._CRD SCOPE_NN1 
This_DT0 policy_NN1 applies_VVZ to_PRP all_DT0 existing_AJ0 DOC_NN1 information_NN1 systems_NN2 including_PRP those_DT0 used_VVN ,_PUN managed_VVD ,_PUN or_CJC operated_VVN by_PRP a_AT0 contractor_NN1 ,_PUN another_DT0 agency_NN1 ,_PUN or_CJC other_AJ0 organization_NN1 on_PRP behalf_NN1 of_PRF the_AT0 DOC_NN1 ._SENT Systems_NN2 under_PRP development_NN1 must_VM0 meet_VVI the_AT0 Federal_AJ0 acquisition_NN1 guidelines_NN2 for_PRP IPv6_NN1 as_CJS do_VDB all_DT0 new_AJ0 DOC_NN1 acquisitions_NN2 of_PRF Information_NN1 Technology_NN1 (_PUL IT_NN1 )_PUR products_NN2 or_CJC services_NN2 using_VVG Internet_NN1 Protocol_NN1 (_PUL IP_NP0 )_PUR ._SENT 
3._CRD BACKGROUND_NN1 
OMB_VVB Memorandum_NN1 M-21-07_CRD ,_PUN dated_VVD November_NP0 19_CRD ,_PUN 2020_CRD ,_PUN outlines_VVZ the_AT0 Federal_AJ0 government_NN1 's_POS strategic_AJ0 mandate_NN1 to_TO0 deliver_VVI its_DPS information_NN1 services_NN2 ,_PUN operate_VVB its_DPS networks_NN2 ,_PUN and_CJC access_VVB the_AT0 services_NN2 of_PRF others_NN2 using_VVG only_AV0 IPv6_AJ0 ._SENT This_DT0 memorandum_NN1 gives_VVZ Federal_AJ0 agencies_NN2 specific_AJ0 requirements_NN2 for_PRP completing_VVG the_AT0 operational_AJ0 deployment_NN1 of_PRF IPv6_NN1 across_PRP all_DT0 Federal_AJ0 information_NN1 systems_NN2 and_CJC services_NN2 ._SENT The_AT0 memorandum_NN1 helps_VVZ agencies_NN2 identify_VVI and_CJC overcome_VVI obstacles_NN2 that_CJT keep_VVB them_PNP from_PRP migrating_VVG to_PRP IPv6-only_AJ0 network_NN1 environments_NN2 ._SENT 
4._CRD AUTHORITY_NN1 
Applicable_AJ0 Executive_AJ0 Orders_NN2 ,_PUN National_AJ0 Policy_NN1 ,_PUN and_CJC Public_AJ0 Laws_NN2 for_PRP this_DT0 policy_NN1 include_VVB the_AT0 following_AJ0 :_PUN 
•_PUN CIO_NP0 Council_NN1 ,_PUN "_PUQ Planning_NN1 Guide_NN1 /_PUN Roadmap_NN1 Toward_PRP IPv6_AJ0 Adoption_NN1 within_PRP the_AT0 U.S._NP0 Government_NN1 ,_PUN "_PUQ July_NP0 2012_CRD 
•_PUN Enterprise_NN1 IPv6_CRD Deployment_NN1 Guidelines_NN2 at_PRP replaced-dns_NN2 
•_PUN FAR_AJ0 Part_NN1 39_CRD –_PUN Acquisition_NN1 of_PRF Information_NN1 Technology_NN1 ,_PUN 
replaced-url_NN1 
•_PUN FAR_AJ0 Part_NN1 11.002_CRD (_PUL g_NN0 )_PUR –_PUN Describing_VVG Agency_NN1 Needs_NN2 –_PUN Policy_NN1 
•_PUN FAR_AJ0 Part_NN1 39_CRD –_PUN Acquisition_NN1 of_PRF Information_NN1 Technology_NN1 
•_PUN FAR_AJ0 Part_NN1 11.002_CRD (_PUL g_NN0 )_PUR –_PUN Describing_VVG Agency_NN1 Needs_NN2 –_PUN Policy_NN1 
•_PUN Federal_AJ0 Acquisitions_NN2 Regulations_NN2 (_PUL FAR_AJ0 )_PUR Part_NN1 11.002_CRD (_PUL g_ZZ0 )_PUR Federal_AJ0 Information_NN1 Security_NN1 
Modernization_NN1 Act_NN1 of_PRF 2014_CRD (_PUL FISMA_NN1 2014_CRD )_PUR Public_AJ0 Law_NN1 113-283_CRD 
•_PUN IAB_AJ0 Statement_NN1 on_PRP IPv6_CRD ,_PUN The_AT0 Internet_NN1 Architecture_NN1 Board_NN1 ,_PUN November_NP0 2016_CRD 
•_PUN IPv6_CRD Enterprise_NN1 Network_NN1 Scenarios_NN2 at_PRP replaced-url_NN1 
•_PUN IPv6_CRD FAR_AJ0 Requirements_NN2 :_PUN Federal_AJ0 Register_NN1 ,_PUN Volume_NN1 74_CRD Issue_NN1 236_CRD (_PUL Thursday_NP0 ,_PUN December_NP0 10_CRD ,_PUN 2009_CRD )_PUR (_PUL replaced-dns_NP0 )_PUR 
•_PUN IPv6_AJ0 Transition_NN1 /_PUN Co-existence_NN1 Security_NN1 Considerations_NN2 at_PRP replaced-url_NN1 
•_PUN OMB_NP0 memorandum_NN1 ,_PUN M-21-07_CRD ,_PUN "_PUQ Completing_VVG the_AT0 Transition_NN1 to_PRP Internet_NN1 Protocol_NN1 Version_NN1 6_CRD (_PUL IPv6_CRD )_PUR ,_PUN "_PUQ dated_VVD November_NP0 19_CRD ,_PUN 2020_CRD 
•_PUN OMB_NP0 Circular_NN1 A-130_NN1 ,_PUN "_PUQ Managing_AJ0 Information_NN1 as_PRP a_AT0 Strategic_AJ0 Resource_NN1 "_PUQ 
•_PUN OMB_NP0 Memorandum_NN1 M-05-22_NN1 ,_PUN "_PUQ Transition_NN1 Planning_NN1 for_PRP Internet_NN1 Protocol_NN1 Version_NN1 6_CRD 
(_PUL IPv6_CRD )_PUR ,_PUN "_PUQ August_NP0 2_CRD ,_PUN 2005_CRD 
•_PUN OMB_NP0 ,_PUN Memorandum_NN1 for_PRP Chief_AJ0 Information_NN1 Officers_NN2 of_PRF Executive_AJ0 Departments_NN2 and_CJC Agencies_NN2 ,_PUN Transition_NN1 to_PRP IPv6_CRD ,_PUN September_NP0 28_CRD ,_PUN 2010_CRD 
•_PUN OMB_NP0 Circular_NN1 A-130_NN1 ,_PUN "_PUQ Managing_AJ0 Information_NN1 as_PRP a_AT0 Strategic_AJ0 Resource_NN1 "_PUQ 
•_PUN Security_NN1 Considerations_NN2 at_PRP replaced-url_NN1 
•_PUN "_PUQ USGv6_AJ0 Profile_NN1 ,_PUN "_PUQ National_AJ0 Institute_NN1 of_PRF Standards_NN2 and_CJC Technology_NN1 (_PUL NIST_AJ0 )_PUR Special_AJ0 
Publication_NN1 500-267B_NN1 Revision_NN1 1_CRD 
•_PUN "_PUQ USGv6_CRD Test_NN1 Program_NN1 Guide_NN1 ,_PUN "_PUQ NIST_AJ0 Special_AJ0 Publication_NN1 (_PUL NIST_NN1 SP_NN1 )_PUR -_PUN 500-281A_NN1 ,_PUN 
Revision_NN1 1_CRD ,_PUN November_NP0 2020_CRD 
•_PUN "_PUQ USGv6_CRD Suppliers_NN2 Declaration_NN1 of_PRF Conformity_NN1 ,_PUN "_PUQ NIST_AJ0 Special_AJ0 Publication_NN1 (_PUL NIST_NN1 SP_NN1 )_PUR ,_PUN 
500-281Ar1s_CRD ,_PUN November_NP0 2020_CRD 
•_PUN "_PUQ USGv6_CRD Capabilities_NN2 Table_NN1 ,_PUN "_PUQ NIST_AJ0 Special_AJ0 Publication_NN1 (_PUL NIST_NN1 SP_NN1 )_PUR ,_PUN 500-267Br1s_CRD ,_PUN 
November_NP0 2020._CRD 
•_PUN "_PUQ USGv6_CRD Test_NN1 Methods_NN2 :_PUN General_AJ0 Description_NN1 and_CJC Validation_NN1 ,_PUN "_PUQ NIST_NN1 Special_AJ0 
Publication_NN1 (_PUL NIST_NN1 SP_NN1 )_PUR ,_PUN 500-281Br1_CRD ,_PUN November_NP0 2020_CRD 
•_PUN "_PUQ Guidelines_NN2 for_PRP the_AT0 Secure_AJ0 Deployment_NN1 of_PRF IPv6_NN1 ,_PUN "_PUQ NIST_AJ0 Special_AJ0 Publication_NN1 (_PUL SP_NN1 )_PUR 800-_CRD 
119_CRD ,_PUN December_NP0 2010_CRD 
•_PUN "_PUQ Security_NN1 and_CJC Privacy_NN1 Controls_NN2 for_PRP Information_NN1 Systems_NN2 and_CJC Organizations_NN2 "_PUQ ,_PUN NIST_NN1 
SP_NN1 800-53_CRD Rev._NP0 5_CRD 
•_PUN DOC_NN1 Transition_NN1 to_PRP Internet_NN1 Protocol_NN1 Version_NN1 6_CRD (_PUL IPv6_CRD )_PUR ,_PUN July_NP0 2021_CRD 
5._CRD POLICY_NN1 
This_DT0 policy_NN1 implements_NN2 OMB_VVB memorandum_NN1 M-21-07_CRD mandates_NN2 for_PRP transitioning_VVG existing_AJ0 Federal_AJ0 networks_NN2 ,_PUN systems_NN2 ,_PUN and_CJC services_NN2 to_PRP IPv6_AJ0 and_CJC Federal_AJ0 Acquisitions_NN2 Regulations_NN2 (_PUL FAR_AJ0 )_PUR Part_NN1 11.002_CRD (_PUL g_ZZ0 )_PUR requirements_NN2 for_PRP the_AT0 procurement_NN1 of_PRF all_DT0 new_AJ0 networked_AJ0 IT_NN1 products_NN2 or_CJC services_NN2 ._SENT The_AT0 DOC_NN1 will_VM0 phase_VVI out_AVP the_AT0 use_NN1 of_PRF IPv4_NN1 for_PRP all_DT0 systems_NN2 by_PRP the_AT0 close_NN1 of_PRF FY_NP0 2025._CRD To_TO0 accomplish_VVI this_DT0 :_PUN 
•_PUN All_DT0 newly_AV0 acquired_VVN networked_AJ0 Federal_AJ0 information_NN1 systems_NN2 shall_VM0 be_VBI IPv6-enabled_VVN at_PRP the_AT0 time_NN1 of_PRF deployment_NN1 to_TO0 ensure_VVI the_AT0 IPv6_AJ0 only_AJ0 requirement_NN1 is_VBZ met_VVN no_AV0 later_AV0 than_CJS FY_NP0 2023._CRD 
•_PUN Opportunities_NN2 for_PRP IPv6_AJ0 pilots_NN2 will_VM0 be_VBI identified_VVN and_CJC at_PRP least_AV0 one_CRD pilot_NN1 of_PRF an_AT0 IPv6-only_AJ0 operational_AJ0 system_NN1 will_VM0 be_VBI completed_VVN by_PRP the_AT0 end_NN1 of_PRF FY_NP0 2021._CRD A_AT0 report_NN1 of_PRF the_AT0 results_NN2 will_VM0 be_VBI provided_VVN to_PRP OMB_NN1 upon_PRP request_NN1 ._SENT 
•_PUN An_AT0 IPv6_AJ0 implementation_NN1 plan_NN1 will_VM0 be_VBI developed_VVN by_PRP the_AT0 end_NN1 of_PRF FY_NP0 2021_CRD to_TO0 update_VVI all_DT0 networked_AJ0 Federal_AJ0 information_NN1 systems_NN2 (_PUL and_CJC the_AT0 IP-enabled_AJ0 assets_NN2 associated_VVN with_PRP these_DT0 systems_NN2 )_PUR to_TO0 fully_AV0 enable_VVI native_AJ0 IPv6_AJ0 operation_NN1 ._SENT The_AT0 DOC_NN1 Information_NN1 Resources_NN2 Management_NN1 (_PUL IRM_VVB )_PUR Strategic_AJ0 Plan_NN1 will_VM0 be_VBI updated_VVN as_CJS required_VVN ._SENT The_AT0 IPv6_AJ0 implementation_NN1 plan_NN1 shall_VM0 describe_VVI the_AT0 agency_NN1 transition_NN1 process_NN1 and_CJC include_VVB the_AT0 following_AJ0 milestones_NN2 and_CJC actions_NN2 :_PUN 
o_ITJ At_PRP least_AV0 20_CRD %_NN0 of_PRF IP-enabled_AJ0 assets_NN2 on_PRP Federal_AJ0 networks_NN2 are_VBB operating_VVG in_PRP IPv6-_AJ0 only_AJ0 environments_NN2 by_PRP the_AT0 end_NN1 of_PRF FY_NP0 2023._CRD 
o_ITJ At_PRP least_AV0 50_CRD %_NN0 of_PRF IP-enabled_AJ0 assets_NN2 on_PRP Federal_AJ0 networks_NN2 are_VBB operating_VVG in_PRP IPv6-_AJ0 only_AJ0 environments_NN2 by_PRP the_AT0 end_NN1 of_PRF FY_NP0 2024._CRD 
o_ITJ At_PRP least_AV0 80_CRD %_NN0 of_PRF IP-enabled_AJ0 assets_NN2 on_PRP Federal_AJ0 networks_NN2 are_VBB operating_VVG in_PRP IPv6-_AJ0 only_AJ0 environments_NN2 by_PRP the_AT0 end_NN1 of_PRF FY_NP0 2025._CRD 
•_PUN All_DT0 Federal_AJ0 information_NN1 systems_NN2 that_DT0 cannot_NN1 be_VBI converted_VVN to_TO0 use_VVI IPv6_NN1 will_VM0 be_VBI identified_VVN ,_PUN the_AT0 finding_NN1 justified_VVN ,_PUN and_CJC a_AT0 schedule_NN1 provided_VVN for_PRP replacing_VVG or_CJC retiring_VVG these_DT0 systems_NN2 ._SENT 
•_PUN All_DT0 external_AJ0 partners_NN2 will_VM0 identify_VVI systems_NN2 that_CJT interface_VVB with_PRP networked_AJ0 Federal_AJ0 information_NN1 systems_NN2 and_CJC develop_VVB plans_NN2 to_TO0 migrate_VVI all_DT0 such_DT0 network_NN1 interfaces_NN2 to_PRP the_AT0 use_NN1 of_PRF IPv6_NN1 ._SENT 
•_PUN The_AT0 upgrade_NN1 of_PRF public_AJ0 /_PUN external_AJ0 facing_NN1 servers_NN2 and_CJC services_NN2 (_PUL e.g._AV0 ,_PUN web_NN1 ,_PUN email_NN1 ,_PUN Domain_NN1 Name_NN1 System_NN1 (_PUL DNS_NP0 )_PUR ,_PUN and_CJC Intrusion_NN1 Prevention_NN1 System_NN1 (_PUL ISP_NP0 )_PUR services_NN2 )_PUR ,_PUN internal_AJ0 client_NN1 applications_NN2 that_CJT communicate_VVB with_PRP public_AJ0 Internet_NN1 services_NN2 ,_PUN and_CJC supporting_VVG enterprise_NN1 networks_NN2 to_TO0 operationally_AV0 use_VVI native_AJ0 IPv6_NN1 will_VM0 be_VBI completed_VVN as_CJS soon_AV0 as_CJS practicable_AJ0 ._SENT 
6._CRD ADHERING_VVG TO_PRP FEDERAL_AJ0 IPv6_AJ0 ACQUISITION_NN1 POLICY_NN1 REQUIREMENTS_NN2 
DOC_NN1 shall_VM0 ensure_VVI that_CJT all_DT0 future_AJ0 acquisitions_NN2 of_PRF networked_AJ0 information_NN1 technology_NN1 include_VVB IPv6_AJ0 requirements_NN2 as_CJS mandated_VVN in_PRP FAR_AJ0 Council_NN1 amendment_NN1 issued_VVN in_PRP December_NP0 2009_CRD ,_PUN unless_CJS the_AT0 DOC_NN1 CIO_NN1 or_CJC designee_NN1 waives_VVZ the_AT0 requirement_NN1 ._SENT DOC_NN1 ,_PUN bureaus_NN2 acquiring_VVG information_NN1 technology_NN1 using_VVG Internet_NN1 Protocol_NN1 shall_VM0 develop_VVI requirements_NN2 documents_NN2 to_TO0 include_VVI reference_NN1 to_PRP the_AT0 appropriate_AJ0 technical_AJ0 capabilities_NN2 defined_VVN in_PRP the_AT0 U.S._NP0 Government_NN1 Version_NN1 6_CRD (_PUL USGv6_CRD )_PUR Profile_NN1 ,_PUN National_AJ0 Institute_NN1 of_PRF Standards_NN2 and_CJC Technology_NN1 (_PUL NIST_AJ0 Special_AJ0 Publication_NN1 (_PUL SP_NN1 )_PUR 500-267_CRD and_CJC the_AT0 corresponding_AJ0 declarations_NN2 of_PRF conformance_NN1 defined_VVN in_PRP the_AT0 USGv6_AJ0 Test_NN1 Program_NN1 ._SENT The_AT0 DOC_NN1 COP_NN1 shall_VM0 ensure_VVI that_CJT Federal_AJ0 IT_NN1 systems_NN2 are_VBB positioned_VVN to_PRP leverage_NN1 the_AT0 technical_AJ0 and_CJC economic_AJ0 benefits_NN2 of_PRF IPv6_NN1 ,_PUN and_CJC eventually_AV0 migrate_VVB to_PRP IPv6-only_AJ0 environments_NN2 when_CJS appropriate_AJ0 ._SENT 
In_PRP accordance_NN1 with_PRP existing_AJ0 FAR_AJ0 requirements_NN2 ,_PUN DOC_NN1 shall_VM0 :_PUN 
•_PUN Continue_VVB to_TO0 use_VVI the_AT0 USGv6_AJ0 Profile_NN1 to_TO0 define_VVI agency_NN1 or_CJC acquisition_NN1 specific_AJ0 requirements_NN2 for_PRP IPv6_CRD capabilities_NN2 when_CJS purchasing_VVG networked_AJ0 information_NN1 technology_NN1 and_CJC services_NN2 ,_PUN specifying_VVG the_AT0 requirement_NN1 for_PRP hardware_NN1 and_CJC software_NN1 to_TO0 be_VBI capable_AJ0 of_PRF operating_VVG in_PRP an_AT0 IPv6-only_AJ0 environment_NN1 ._SENT 
•_PUN Continue_VVB to_TO0 require_VVI potential_AJ0 vendors_NN2 to_TO0 document_VVI compliance_NN1 with_PRP such_DT0 IPv6_AJ0 requirement_NN1 statements_NN2 through_PRP the_AT0 USGv6_AJ0 Test_NN1 Program_NN1 ;_PUN and_CJC 
•_PUN In_PRP rare_AJ0 circumstances_NN2 where_CJS requiring_VVG demonstrated_VVN IPv6_CRD capabilities_NN2 would_VM0 pose_VVI undue_AJ0 burden_NN1 on_PRP an_AT0 acquisition_NN1 action_NN1 ,_PUN provide_VVB a_AT0 process_NN1 for_PRP the_AT0 DOC_NN1 CIO_NN1 to_TO0 waive_VVI this_DT0 requirement_NN1 on_PRP a_AT0 case-by-case_AJ0 basis_NN1 ._SENT In_PRP such_DT0 cases_NN2 ,_PUN the_AT0 purchasing_AJ0 agency_NN1 shall_VM0 request_VVI documentation_NN1 from_PRP vendors_NN2 detailing_VVG explicit_AJ0 plans_NN2 (_PUL e.g._AV0 ,_PUN timelines_NN2 )_PUR to_TO0 incorporate_VVI IPv6_CRD capabilities_NN2 to_PRP their_DPS offerings_NN2 ._SENT 
A_AT0 requestor_NN1 in_PRP DOC_NN1 bureau_NN1 or_CJC office_NN1 seeking_VVG to_TO0 procure_VVI an_AT0 IT_NN1 product_NN1 or_CJC service_NN1 using_VVG IP_NN1 must_VM0 work_VVI with_PRP their_DPS Contracting_AJ0 Officer_NN1 (_PUL CO_NN1 )_PUR to_TO0 ensure_VVI appropriate_AJ0 IPv6_AJ0 requirements_NN2 language_NN1 is_VBZ included_VVN in_PRP the_AT0 following_AJ0 documents_NN2 :_PUN 
•_PUN Procurement_NN1 Requests_NN2 (_PUL PR_NP0 )_PUR ,_PUN 
•_PUN Advanced_AJ0 Procurement_NN1 Plans_NN2 (_PUL APP_NP0 )_PUR ,_PUN 
•_PUN Statements_NN2 of_PRF Work_NN1 (_PUL SOW_NN1 )_PUR ,_PUN 
•_PUN Requests_NN2 for_PRP Proposal_NN1 ,_PUN and_CJC 
•_PUN Awarded_AJ0 Contracts_NN2 
7.EVOLVING_AV0 THE_AT0 USGv6_AJ0 PROGRAM_NN1 POLICY_NN1 REQUIREMENTS_NN2 
NIST_NN1 will_VM0 continue_VVI to_TO0 update_VVI and_CJC expand_VVI the_AT0 USGv6_AJ0 Program_NN1 and_CJC provide_VVB periodic_AJ0 updates_NN2 to_PRP the_AT0 USGv6_AJ0 Profile_NN1 to_TO0 incorporate_VVI the_AT0 latest_AJS Internet_NN1 Engineering_NN1 Task_NN1 Force_NN1 (_PUL IETF_NP0 )_PUR specifications_NN2 relevant_AJ0 to_PRP IPv6_AJ0 technology_NN1 ._SENT DOC_NN1 shall_VM0 continue_VVI to_TO0 monitor_VVI updates_NN2 from_PRP the_AT0 USGv6_AJ0 Program_NN1 to_TO0 ensure_VVI DOC_NN1 and_CJC its_DPS constituent_NN1 bureaus_NN2 maintain_VVB consistency_NN1 with_PRP IPv6_CRD changes_NN2 of_PRF other_AJ0 government_NN1 agencies_NN2 ,_PUN as_CJS well_AV0 as_CJS continue_VVI to_TO0 monitor_VVI and_CJC adhere_VVI to_PRP updates_NN2 from_PRP NIST_NN1 as_CJS required_VVN per_PRP FISMA_NP0 ._SENT DOC_NN1 shall_VM0 enforce_VVI the_AT0 following_AJ0 policy_NN1 requirements_NN2 :_PUN 
•_PUN Avoid_VVB any_DT0 unnecessary_AJ0 duplication_NN1 of_PRF generic_AJ0 testing_NN1 requirements_NN2 by_PRP leveraging_VVG the_AT0 USGv6_AJ0 Test_NN1 Program_NN1 for_PRP basic_AJ0 conformance_NN1 and_CJC general_AJ0 interoperability_NN1 testing_NN1 of_PRF commercial_AJ0 products_NN2 ._SENT 
•_PUN Ensure_VVB that_DT0 acquisition_NN1 specific_AJ0 testing_NN1 focuses_VVZ on_PRP specific_AJ0 systems_NN2 integration_NN1 ,_PUN performance_NN1 ,_PUN and_CJC information_NN1 assurance_NN1 testing_NN1 not_XX0 covered_VVN in_PRP the_AT0 USGv6_AJ0 Test_NN1 Program_NN1 ._SENT 
8._CRD ENSURING_VVG ADEQUATE_AJ0 SECURITY_NN1 
To_TO0 help_VVI ensure_VVI the_AT0 security_NN1 benefits_NN2 of_PRF IPv6_NN1 for_PRP all_DT0 Federal_AJ0 agencies_NN2 ,_PUN DOC_NN1 shall_VM0 ensure_VVI the_AT0 following_AJ0 requirements_NN2 are_VBB in_PRP place_NN1 for_PRP all_DT0 DOC_NN1 's_POS information_NN1 systems_NN2 :_PUN 
•_PUN Include_VVB plans_NN2 for_PRP full_AJ0 support_NN1 of_PRF production_NN1 IPv6_CRD services_NN2 in_PRP IT_NN1 security_NN1 plans_NN2 ,_PUN architectures_NN2 ,_PUN and_CJC acquisition_NN1 ._SENT 
•_PUN Validate_VVB all_DT0 systems_NN2 that_CJT support_VVB network_NN1 operations_NN2 or_CJC enterprise_NN1 security_NN1 services_NN2 (_PUL e.g._AV0 ,_PUN identity_NN1 and_CJC access_NN1 management_NN1 systems_NN2 ,_PUN firewalls_NN2 and_CJC intrusion_NN1 detection_NN1 /_PUN protection_NN1 systems_NN2 ,_PUN end-point_NN1 security_NN1 systems_NN2 ,_PUN security_NN1 incident_NN1 and_CJC event_NN1 management_NN1 systems_NN2 ,_PUN access_NN1 control_NN1 and_CJC policy_NN1 enforcement_NN1 systems_NN2 ,_PUN threat_NN1 intelligence_NN1 and_CJC reputation_NN1 systems_NN2 )_PUR are_VBB IPv6-capable_AJ0 and_CJC can_VM0 operate_VVI in_PRP IPv6-only_AJ0 environments_NN2 ._SENT 
•_PUN Follow_VVB applicable_AJ0 Federal_AJ0 guidance_NN1 and_CJC leverage_NN1 industry_NN1 best_AJS practices_NN2 ,_PUN as_CJS appropriate_AJ0 ,_PUN for_PRP the_AT0 secure_AJ0 deployment_NN1 and_CJC operation_NN1 of_PRF IPv6_AJ0 networks_NN2 ._SENT 
•_PUN Ensure_VVB that_CJT all_DT0 security_NN1 and_CJC privacy_NN1 policy_NN1 assessment_NN1 ,_PUN authorization_NN1 and_CJC monitoring_NN1 processes_NN2 fully_AV0 address_VVB the_AT0 production_NN1 use_NN1 of_PRF IPv6_NN1 in_PRP Federal_AJ0 information_NN1 systems_NN2 ._SENT 
9._CRD PRODUCT_NN1 AND_CJC SERVICE_NN1 PROCURES_VVZ REQUESTS_NN2 
The_AT0 following_AJ0 are_VBB the_AT0 requirements_NN2 for_PRP DOC_NN1 staff_NN0 to_TO0 follow_VVI to_TO0 request_VVI procurement_NN1 of_PRF IT_NN1 products_NN2 and_CJC services_NN2 :_PUN 
•_PUN Include_VVB appropriate_AJ0 IPv6_AJ0 requirements_NN2 language_NN1 in_PRP PR_NP0 and_CJC APP_NP0 ._SENT 
•_PUN Work_VVB with_PRP CO_NN1 to_TO0 ensure_VVI appropriate_AJ0 IPv6_AJ0 requirements_NN2 language_NN1 is_VBZ included_VVN in_PRP 
Statements_NN2 of_PRF Work_NN1 (_PUL SOW_NN1 )_PUR ,_PUN RFPs_NP0 and_CJC awarded_VVN contracts_NN2 ._SENT 
•_PUN Complete_VVB IPv6_AJ0 IT_NN1 Procurement_NN1 Checklist_NN1 and_CJC send_VVB to_PRP CO._NN1 
•_PUN Analyze_VVB the_AT0 project_NN1 requirements_NN2 ,_PUN the_AT0 IPv6_AJ0 requirements_NN2 ,_PUN and_CJC the_AT0 product_NN1 's_POS capabilities_NN2 as_CJS captured_VVN on_PRP the_AT0 Supplier_NN1 's_POS Declaration_NN1 of_PRF Conformity_NN1 (_PUL SDoC_NP0 )_PUR and_CJC submit_VVB analysis_NN1 to_PRP CO._NN1 
•_PUN If_CJS procured_VVN via_PRP federal_AJ0 schedule_NN1 ,_PUN sole_AJ0 source_NN1 ,_PUN or_CJC credit_NN1 card_NN1 ,_PUN then_AV0 obtain_VVB SDoC_NN1 from_PRP vendor_NN1 and_CJC submit_VVB SDoC_NN1 to_PRP CO._NN1 
•_PUN Notify_VVB CO_NN1 of_PRF all_DT0 contract_NN1 specifications_NN2 that_CJT do_VDB not_XX0 comply_VVI with_PRP providing_VVG full_AJ0 feature_NN1 functionality_NN1 for_PRP IPv6_CRD ._SENT 
10._CRD CONTRACTING_AJ0 OFFICERS_NN2 
The_AT0 DOC_NN1 Enterprise_NN1 Services_NN2 CO_NN1 shall_VM0 review_VVI APP_NP0 to_TO0 determine_VVI the_AT0 applicability_NN1 of_PRF IPv6_CRD requirements_NN2 to_PRP its_DPS acquisition_NN1 ._SENT The_AT0 CO_NN1 shall_VM0 ensure_VVI the_AT0 APP_NN1 and_CJC supporting_AJ0 documents_NN2 are_VBB in_PRP accordance_NN1 with_PRP FAR_AV0 11.002_CRD (_PUL g_ZZ0 )_PUR IPv6_AJ0 requirements_NN2 by_PRP including_VVG :_PUN 
•_PUN Instructions_NN2 in_PRP solicitations_NN2 that_CJT require_VVB offerors_NN2 to_TO0 notify_VVI the_AT0 contracting_AJ0 officer_NN1 of_PRF any_DT0 contract_NN1 specifications_NN2 that_CJT do_VDB not_XX0 comply_VVI with_PRP providing_VVG full_AJ0 feature_NN1 functionality_NN1 for_PRP IPv6_CRD ._SENT 
•_PUN A_AT0 Contract_NN1 requirements_NN2 statement_NN1 in_PRP solicitations_NN2 that_CJT specifically_AV0 states_VVZ that_CJT products_NN2 and_CJC services_NN2 that_CJT use_VVB Internet_NN1 Protocol_NN1 provide_VVB full_AJ0 feature_NN1 functionality_NN1 in_PRP IPv6-only_AJ0 environments_NN2 in_PRP compliance_NN1 with_PRP the_AT0 NIST_AJ0 USGv6_AJ0 Testing_NN1 Program_NN1 ._SENT 
•_PUN The_AT0 IPv6_CRD requirements_NN2 statement_NN1 shall_VM0 be_VBI substantially_AV0 the_AT0 same_DT0 as_CJS the_AT0 statement_NN1 provided_VVN in_PRP FERC_NP0 's_POS contracting_AJ0 writing_NN1 templates_NN2 and_CJC the_AT0 IPv6_AJ0 IT_NN1 Procurement_NN1 Checklist_NN1 ._SENT 
11._CRD VENDORS_NN2 
Vendors_NN2 shall_VM0 complete_VVI and_CJC sign_VVI a_AT0 Supplier_NN1 's_POS Declaration_NN1 of_PRF Conformity_NN1 (_PUL SDoC_NP0 )_PUR that_DT0 specifies_VVZ and_CJC certifies_VVZ the_AT0 product_NN1 's_POS IPv6_AJ0 capabilities_NN2 to_TO0 submit_VVI with_PRP the_AT0 proposal_NN1 ._SENT 
12._CRD POLICY_NN1 COMPLIANCE_NN1 
Only_AV0 DOC_NN1 's_POS CIO_NN1 or_CJC a_AT0 designee_NN1 may_VM0 waive_VVI the_AT0 IPv6_AJ0 requirements_NN2 and_CJC must_VM0 do_VDI so_AV0 in_PRP writing_NN1 ._SENT A_AT0 requestor_NN1 within_PRP DOC_NN1 or_CJC its_DPS constituent_NN1 bureaus_NN2 seeking_VVG a_AT0 waiver_NN1 to_TO0 retain_VVI an_AT0 IT_NN1 product_NN1 or_CJC service_NN1 that_CJT does_VDZ not_XX0 meet_VVI the_AT0 IPv6_AJ0 compliance_NN1 requirements_NN2 specified_VVN in_PRP OMB-M-21-07_CRD ,_PUN FAR_AV0 11.002_CRD (_PUL g_NN0 )_PUR ,_PUN and_CJC in_PRP this_DT0 policy_NN1 must_VM0 submit_VVI a_AT0 signed_AJ0 request_NN1 in_PRP memorandum_NN1 format_NN1 to_PRP the_AT0 DOC_NN1 'S_POS CIO_NN1 ._SENT All_DT0 IT_NN1 hardware_NN1 ,_PUN software_NN1 and_CJC services_NN2 that_CJT do_VDB not_XX0 comply_VVI with_PRP Federal_AJ0 and_CJC DOC_NN1 IPv6_NN1 requirements_NN2 require_VVB written_AJ0 and_CJC signed_AJ0 approval_NN1 from_PRP the_AT0 CIO_NN1 ._SENT 
13._CRD ROLES_NN2 AND_CJC RESPONSIBILITIES_NN2 
Deputy_NN1 Secretary_NN1 (_PUL DepSec_NP0 )_PUR 
Ensures_VVZ OMB_NP0 IPv6_NN1 transition_NN1 compliance_NN1 and_CJC consistency_NN1 across_PRP the_AT0 agency_NN1 ;_PUN and_CJC 
Provides_VVZ agency-wide_AJ0 guidance_NN1 for_PRP IPv6_AJ0 implementation_NN1 ._SENT 
Chief_AJ0 Information_NN1 Officer_NN1 (_PUL CIO_NP0 )_PUR 
Carries_VVZ out_AVP the_AT0 responsibilities_NN2 of_PRF the_AT0 Federal_AJ0 Agency_NN1 CIO_NN1 as_CJS required_VVN by_PRP Federal_AJ0 law_NN1 ,_PUN regulation_NN1 ,_PUN and_CJC policy_NN1 ;_PUN Leads_VVZ and_CJC strategizes_VVZ for_PRP cybersecurity_NN1 infrastructure_NN1 and_CJC operations_NN2 ;_PUN 
Designates_VVZ the_AT0 Chief_AJ0 Information_NN1 Security_NN1 Officer_NN1 (_PUL CISO_NP0 )_PUR to_TO0 carry_VVI out_AVP the_AT0 CIO_NN1 's_POS responsibilities_NN2 for_PRP cybersecurity_NN1 and_CJC IT_NN1 account_NN1 management_NN1 ;_PUN 
Designates_VVZ the_AT0 DCIO_NN1 for_PRP Solutions_NN2 &_NP0 Service_NN1 Delivery_NN1 (_PUL OSCIO_NP0 )_PUR to_TO0 operate_VVI and_CJC maintain_VVI the_AT0 information_NN1 systems_NN2 and_CJC infrastructure_NN1 ;_PUN 
Has_VHZ the_AT0 authority_NN1 to_TO0 set_VVI Agency-wide_AJ0 IT_NN1 policy_NN1 ,_PUN including_PRP all_DT0 areas_NN2 of_PRF IT_NN1 governance_NN1 such_DT0 as_PRP enterprise_NN1 architecture_NN1 and_CJC standards_NN2 ,_PUN IT_NN1 capital_NN1 planning_NN1 and_CJC investment_NN1 management_NN1 ,_PUN IT_NN1 asset_NN1 management_NN1 ,_PUN IT_NN1 budgeting_NN1 and_CJC acquisition_NN1 ,_PUN IT_NN1 performance_NN1 management_NN1 ,_PUN risk_NN1 management_NN1 ,_PUN IT_NN1 workforce_NN1 management_NN1 ,_PUN IT_NN1 security_NN1 and_CJC operations_NN2 ,_PUN and_CJC information_NN1 security_NN1 ;_PUN and_CJC 
Approves_VVZ or_CJC disapproves_VVZ all_DT0 IPv6_AJ0 compliance_NN1 waivers_NN2 to_PRP this_DT0 policy_NN1 ._SENT 
Chief_AJ0 Information_NN1 Security_NN1 Officer_NN1 (_PUL CISO_NP0 )_PUR 
Carries_VVZ out_AVP the_AT0 Chief_AJ0 Information_NN1 Officer_NN1 security_NN1 responsibilities_NN2 under_PRP Federal_AJ0 Information_NN1 Security_NN1 Modernization_NN1 Act_NN1 of_PRF 2014_CRD (_PUL FISMA_NP0 )_PUR and_CJC serving_VVG as_PRP the_AT0 primary_AJ0 liaison_NN1 for_PRP the_AT0 Chief_AJ0 Information_NN1 Officer_NN1 (_PUL CIO_NP0 )_PUR to_PRP the_AT0 organization_NN1 's_POS Information_NN1 System_NN1 Owners_NN2 ,_PUN and_CJC Information_NN1 System_NN1 Security_NN1 Officers_NN2 ;_PUN 
Heads_VVZ an_AT0 office_NN1 with_PRP the_AT0 mission_NN1 and_CJC resources_NN2 to_TO0 assist_VVI the_AT0 organization_NN1 in_PRP achieving_VVG more_DT0 secure_AJ0 information_NN1 and_CJC information_NN1 systems_NN2 in_PRP accordance_NN1 with_PRP FISMA_NN1 requirements_NN2 ;_PUN and_CJC 
Approves_VVZ all_DT0 IPv6_AJ0 upgrades_NN2 and_CJC new_AJ0 purchases_NN2 ._SENT 
Information_NN1 System_NN1 Owner_NN1 (_PUL ISO_NP0 )_PUR 
Provides_VVZ procurement_NN1 ,_PUN development_NN1 ,_PUN integration_NN1 ,_PUN modification_NN1 ,_PUN operation_NN1 ,_PUN maintenance_NN1 ,_PUN and_CJC disposal_NN1 of_PRF an_AT0 information_NN1 system_NN1 ;_PUN 
Provides_VVZ operational_AJ0 interests_NN2 of_PRF the_AT0 user_NN1 community_NN1 (_PUL i.e._AV0 ,_PUN users_NN2 who_PNQ require_VVB access_NN1 to_PRP the_AT0 information_NN1 system_NN1 to_TO0 satisfy_VVI mission_NN1 ,_PUN business_NN1 ,_PUN or_CJC operational_AJ0 requirements_NN2 )_PUR ;_PUN 
Provides_VVZ the_AT0 development_NN1 and_CJC maintenance_NN1 of_PRF the_AT0 security_NN1 plan_NN1 and_CJC ensures_VVZ that_CJT the_AT0 system_NN1 is_VBZ deployed_VVN and_CJC operated_VVN in_PRP accordance_NN1 with_PRP the_AT0 agreed-upon_NN1 security_NN1 controls_NN2 ;_PUN 
Responsible_AJ0 for_PRP deciding_VVG who_PNQ has_VHZ access_NN1 to_PRP the_AT0 system_NN1 (_PUL and_CJC with_PRP what_DTQ types_NN2 of_PRF privileges_NN2 or_CJC access_NN1 rights_NN2 )_PUR and_CJC ensures_VVZ that_CJT system_NN1 users_NN2 and_CJC support_NN1 personnel_NN2 receive_VVB the_AT0 requisite_AJ0 security_NN1 training_NN1 (_PUL e.g._AV0 ,_PUN instruction_NN1 in_PRP rules_NN2 of_PRF behavior_NN1 )_PUR ;_PUN and_CJC 
Reviews_VVZ security_NN1 assessment_NN1 results_NN2 from_PRP the_AT0 Security_NN1 Control_NN1 Assessor_NN1 ._SENT 
