Statement_of_Work.pdf

U.S. Fish & Wildlife Service Branch of Training & Inspections Office of Law Enforcement

STATEMENT OF WORK

CELLEBRITE TOUCH2 DIGITAL FORENSICS PROJECT

I. BACKGROUND

On July 1, 2012, President Obama signed an Executive Order on Combatting Wildlife Trafficking. The Executive Order was shortly followed by the formation of a National Task Force and National Strategy to Combat Wildlife Trafficking. The National Strategy identified 3 strategic priorities for the United States to Combat Wildlife Trafficking (CWT): 1) International and Domestic, 2) Reduce Demand for Illegally Traded Wildlife and 3) Expand International Cooperation and Commitment. The respective duties and long-term existence of both the Task Force and National Strategy were subsequently codified with the passage of the Eliminate, Neutralize and Disrupt (END) Wildlife Trafficking Act in 2016, and bolstered further in February of 2017 with the signing of President Trump’s Executive Order on Enforcing Federal Law with Respect to Transnational Criminal Organizations and International Trafficking which specifically identified wildlife as a priority amongst the trafficking of illicit drugs, weapons and humans.

In furtherance of the National Strategy to Combat Wildlife Trafficking, the U.S. Fish and Wildlife Service (FWS) Office of Law Enforcement (OLE), in collaboration and support from the Department of State (DOS), has committed experienced wildlife criminal investigators (special agents) as law enforcement Attaches stationed at U.S Embassies around the globe, including: Beijing, China, Bangkok, Thailand, Dar es Salaam, Tanzania, Gaborone, Botswana, Libreville, Gabon, Lima, Peru and Mexico City, Mexico.

Since inception of the FWS International Operations Unit (IOU), FWS Attaché’s have experienced great success collaborating directly with various national law enforcement agencies responsible for enforcing national wildlife legislation and assisting host countries in their respective CWT investigations. Through these experiences, FWS Attaché’s have also noted a general lack of knowledge of the value of digital evidence and lack of digital forensic capacity in many countries affected by wildlife trafficking activity. By way of example, as investigative efforts have strengthened, enforcement officers have been increasingly confronted with more sophisticated and extensive networks of traffickers. As a result, officers are encountering and presented with the opportunity to seize valuable digital evidence, such as cell phones, tablets and other digital media during the course of routine wildlife trafficking investigations. However, due to general lack of knowledge of evidentiary value and absence of forensic technology to extract often vital digital evidence from phones, tablets and other digital media, these devices are often handed back to suspects, returned or otherwise under- utilized in CWT investigations.

Armed with appropriate training and equipment, FWS Attaché’s could provide a valuable tool in CWT efforts around the globe by collaborating directly with national enforcement officers and providing an effective means to image and provide access to digital evidence in support ongoing CWT investigations in host countries/regions.

These services will occur between April 2th – 6th, 2018 to allow for planning and curriculum preparation. Please refer to Section III (B) (i) for specifics on venue.

II. SCOPE OF WORK

This project is designed to establish/enhance the digital forensic capabilities of the host country/region within the AOR of individual FWS Attachés. Toward this goal, the CELLEBRITE TOUCH2 DIGITAL FORENSICS PROJECT shall provide a valuable tool in CWT efforts and add to the resources available to FWS Attaché’s in their respective AOR.

Actions to be taken during the course of this project include: the purchase of appropriate equipment, provision of necessary training to Attaché’s and FWS personnel and the maintenance of the equipment and project in the long-term through acquisition of five year SMS contracts.

The planned life of this project is at least 5 years, which may be later extended as the FWS Attaché remains at post and other funding sources are identified should the program be deemed valuable in CWT efforts in the region.

III. STATEMENT OF WORK

This project proposes to purchase seven (7) Cellebrite Touch2 Digital Forensic Extraction Devices, one for each of the FWS Attaché’s located at U.S. Embassies in Bangkok, Beijing, Dar es Salaam, Gaborone, Libreville, Lima, Mexico City and an additional units to be supplied to FWS Headquarters for ongoing support to all FWS Attaché locations. The Cellebrite Touch2 units will be used to directly support wildlife enforcement authorities in host countries/regions by providing an effective means to quickly and effectively extract digital evidence from seized phones, devices and other digital media, in support of ongoing CWT investigations. In addition, and as delineated in section III (B) of this proposal, the proceeding describes the specific training requirements, and Service Management and Support (SMS) contracts required to facilitate Touch2 operation and provide this valuable tool in support of CWT investigations.

In addition, it will be supported and conferred with the FWS Digital Evidence Recovery and Technical Support Unit (DERTSU) who can provide expertise and guidance in the purchase and use of appropriate equipment delineated further in this proposal and provide ongoing support with training requirements, system upgrades and the continually evolving technology as the project progresses.

A. Project Component 1 – Equipment Acquisition

i. Purchase of seven (7) Cellebrite Touch2 units for each of the FWS Attaches located at U.S. Embassies in Bangkok, Beijing, Dar es Salaam, Gaborone, Libreville, Lima, Mexico City; with an additional unit to be supplied to FWS Headquarters for ongoing support to all FWS Attaché locations.

ii. Purchase of seven (7) extended, four (4) year Service Management and Support (SMS) contracts for each of the Cellebrite Touch2 devices. Annual SMS Contracts are required with Cellebrite devices in order to update software and keep-up with evolving technology and new phones/devices entering the marketplace. Purchase of extended 4 year contracts for each the Touch2’s reduces the overall annual price of these contracts and ensures sustainability of the project and utility of the purchased Cellebrite Touch2 units in the long-term.

B. Project Component 2 – Training - In order to facilitate the successful operation and appropriate use of the Cellebrite Touch2 units, a minimum Cellebrite Certified Operator (CCO) course must be completed by the 7 FWS Attaché’s delineated above, and 3 FWS headquarters support personnel.

i. Cellebrite Certified Operator (CCO) Course completion x 7 FWS Attaché’s, and 3

FWS headquarters support personnel will attend the training session located at the Falls Church, VA. Headquarters Office. The training dates are slated for April 2nd – 6th, 2018.

C. Project Component 3 – Implementation – Upon acquisition of equipment and receipt of the appropriate training, the proponents anticipate the following procedures in deploying the Cellebrite Digital Forensic Extraction devices to provide direct support to wildlife enforcement authorities in host countries/regions within the Attaché’s respective area of responsibility (AOR):

i. Touch2’s and related equipment will remain in control of the FWS and Embassy personnel.

ii. The FWS Attaché will be trained and responsible for the deployment of the Cellebrite Touch2 device and will oversee/supervise use and assistance by the respective FSNI assigned to them.

iii. In addition to those units controlled by the FWS Attaché’s, one Cellebrite unit and related equipment will remain with FWS headquarters personnel who have been trained in the CCO course and can fulfill a support role when called upon by individual Attaché’s. This may occur during the course of large-scale investigations where multiple devices are being seized and when additional investigative assistance may be needed.

iv. Attaché’s, in collaboration with local wildlife authorities, will determine, on a case-by-case basis, the appropriateness of deploying Cellebrite Touch2 devices and the provision of extracted data to host country/region wildlife enforcement officers for investigative/evidentiary purposes.

v. If determined appropriate, phones, devices and other digital media seized during the course of ongoing CWT investigations may remitted to FWS Attaché’s where the Touch2 device may be deployed and a copy of the data be provided to the host country/region wildlife enforcement officers for investigative/evidentiary purposes.

IV. IMPLEMENTATION STRATEGY

As previously described, this project will be implemented fully by FWS Attaché’s within their respective AOR with the assistance of FSNIs and headquarters support personnel. It is anticipated that each Attaché location will present a different set of circumstances and Attaché’s will face a variety of experiences implementing this project. I.e., while some attaches may be inundated with mobile device seizures and requests to deploy the Touch2 system, other Attaché’s may be called upon minimally. While some locations may produce more technologically advanced devices and/or richer data sets, others may produce more antiquated devices and/or minimal or basic data extractions. Flexibility and ease of access to the Touch2 digital forensic extraction device will provide quick and valuable data extraction in direct support of local CWT investigations while freeing up DERTSU resources and support for those instances when more thorough extractions or analysis may be required.

V. SUSTAINABILITY

This project is designed to maintain the utility of the Cellebrite Touch2 system for a period of five (5) years through the purchase of the extended, 4 year SMS contract. As FWS Attaché’s maintain post for a period of 3-5 years and will be responsible for the implementation of the Cellebrites Touch2, this will allow the time needed to adapt to local needs and assess the value of maintaining this digital forensic tool within each respective AOR. At the conclusion of the SMS contract, the project may be extended.

VI. REPORTING

FWS Attaché’s will report periodically on the implementation of this project with direct involvement and oversight of IOU. FWS Attaché’s will maintain direct engagement with host country/region CWT enforcement authorities after deploying the Cellebrite Touch2 and providing the extracted data and can offer any ongoing assistance in furtherance of the investigation, to include: assistance in data analysis, forensic support, etc.