Data-custodian readiness means the right person can carry out the access responsibilities assigned by the certification and the solicitation. Check the current JCP record, the certified location, the request instructions and the handoff to the people who will use the data.
Naming someone in an internal spreadsheet does not update a government certification or grant access to a package.
Start with the current JCP record
DLA’s JCP guidance describes the custodian as an employee at the certified location with authority to oversee access. A custodian change requires a certification revision. Read the applicable country instructions and current portal guidance when making that change.
Record the entity and certified location, custodian name, certification status and expiration, and date checked. Keep personal information in the appropriate internal record. A public bid-planning document usually needs only the responsible role and a reference.
Distinguish the roles in the handoff
| Role | Question to answer |
|---|---|
| Certification owner | Who maintains the JCP application and requests revisions? |
| Authorized requester | Who does this solicitation permit to request its package? |
| Receiving-environment owner | Who confirms where the files may be received, stored and used? |
| Technical user | Who needs the data to estimate or perform the work? |
| Pursuit owner | Who decides what unresolved access work means for the bid schedule? |
One person may hold several roles. The point is to expose the responsibilities, not to create a larger team.
Follow the package’s delivery instructions
The retained Hellfire RFQ directs delivery through DoD SAFE to the custodian named on the certified form. The Warren engine assembly package uses a SAM.gov restricted-attachment request by the JCP custodian. A shared custodian concept does not make the delivery system the same.
Use the three-case access comparison to see how the requester and route differ. These are dated examples. Verify the current package before using their instructions.
Prepare for absence or personnel change
Before an urgent request, confirm that the named person still works at the certified location and can perform the assigned responsibility. If that is no longer true, use JCP’s revision process. Do not solve the problem by forwarding credentials, impersonating the former custodian or assuming a colleague has inherited the authorization.
For planned leave, establish the permitted continuity arrangement with the relevant program and buyer. An internal backup list cannot override the release instruction.
Define what happens after receipt
Agree on the receiving location, authorized users, permitted disclosures and any return or destruction requirement. The controlled-data receiving guide covers that security review. Keep the access request and the technical-use handoff connected without placing the controlled files in an ordinary planning worksheet.
Deep Fathom’s compliance evidence workflows may support the assessment work behind a request. This page does not claim that the platform maintains JCP certifications or acts as a government data-delivery system. Review bid requirements.
JCP guidance and retained examples reviewed September 7, 2026.