2-2025-0529 2023 SLCGP IRP Tabletop Exercise SOW.pdf
PDF 197 KB Posted
- Attached to
- Plan and Execute a Tabletop Exercise of the Incident Response Plan (IRP) and Emergency Operations Plan (EOP)
- Solicitation number
- 25-09
- Issued by
- Bethel Census Area, Alaska
About this file
This is a Scope of Services document for a Cybersecurity Incident Response Plan (IRP) and Emergency Operations Plan (EOP) Tabletop Exercise issued by the Bristol Bay Borough (BBB), involving the State of Alaska, the Alaska Division of Homeland Security and Emergency Management (DHS&EM), and the Cybersecurity and Infrastructure Security Agency (CISA). The project involves planning and executing a tabletop exercise focused on IT cybersecurity incident response and emergency operations, with the goal of identifying and recording gaps in existing plans, training personnel on their roles and responsibilities, and engaging community members. The exercise is estimated to take 120 hours, with provisions for up to 3 travel occurrences to the Borough and 15 days of per diem, targeting project initiation by November 30, 2025, and completion of all deliverables by April 30, 2026.
The project will require the selected vendor to propose an hourly rate for coordination, exercise, and documentation services, with billing limited to actual hours and travel used. The vendor will be responsible for creating an exercise plan, conducting the exercise with onsite coordination, facilitating a hotwash meeting, and producing a lessons learned document. Special requirements include delivering all documentation in Microsoft Word format and traveling to the King Salmon, AK airport. The Borough will provide lodging and potentially a vehicle for local transportation. The engagement will involve multiple stakeholders, including Bristol Bay management, personnel from all departments, community members, various IT support service vendors, and state and federal agencies, with the explicit understanding that the vendor will not manage the overall project, update the existing plans, or physically enact any scenarios.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Bristol Bay Borough
IRP & EOP Tabletop Exercise
SCOPE OF SERVICES
Introduction The Bristol Bay Borough (BBB) would like to contract with a qualified vendor to plan and conduct a tabletop exercise of the Borough’s Cybersecurity Incident Response Plan (IRP) the Cybersecurity Annex to the Emergency
Operations Plan (EOP).
This project will plan and execute tabletop exercises aimed at IT’s Cybersecurity Incident Response Plan (IRP) and the Emergency Services’ Emergency Operations Plan (EOP) Cybersecurity Annex. The project will ensure the plans have been thought through for the environment and conditions and have involved the right personnel. The exercise will identify and record gaps that can later be used to update the plans. The exercise will inform and train personnel on their roles and responsibilities during and after an event. The exercise will reach out to community members within the Borough that would also be affected and involved in events.
The project will use the Cybersecurity and Infrastructure Security Agency (CISA) tabletop exercise services.
The project will use State of Alaska (SOA) Alaska Division of Homeland Security and Emergency Management
(DHS&EM) emergency preparedness exercise support services.
The project is estimated to take 120 hours of exercise planning, coordination, execution, and delivery of lessons learned. The project will also fund up to 3 occurrences of travel to the Borough, and up to 15 days of per diem.
(Lodging will be done at a Borough facility and no charge to the vendor).
Copies of the IRP and EOP will be supplied to interested proposers upon request and after vetting of the proposer. Proposers will sign a Request and Non-Disclosure Agreement (NDA) and agree not to share the IRP or
EOP with any other entities. Request and NDA available for download on with this RFP.
The engagement will include but is not limited to:
• Bristol Bay management and personnel in all departments
• Bristol Bay community members
• Other vendors of BBB that provide a variety of IT support services. The list may include, but is no limited to: Dolan Municipal, LLC, ESRI, McClintock Land Associates Inc, Alaska CAMA Company, LLC, Horan &
Company, LLC, Caselle, Naknek Electric Association, Bristol Bay Telecommunications Group, Costal
Surveyors, StarLink, ProComm Alaska, Dell, Microsoft, Ionis, Rubrik, Octopi, Revize, Laserfiche, and others.
• State of Alaska
• Department of Homeland Security (DHS) – Cybersecurity and Infrastructure Security Agency (CISA)
Scope of Services In scope:
1. Thorough review of the IRP and EOP Cybersecurity Annex
2. Coordination with SOA and CISA on exercise planning support available
3. Travel to the Borough during execution of the exercise
4. Lead role in conducting the exercise
5. In person or online coordination with exercise participants
a. Tavel to the Borough for planning and coordination prior to the exercise is optional.
6. Creation of the exercise plan to include scenarios and exercise inputs
7. Capture of lessons learned during the exercise
8. Exercise Hotwash at the end of the exercise to capture Lessons Learned
Out of Scope:
1. Project Management of this project, this is done by another Borough vendor
2. Updates to the IRP or EOP
3. Physical enactment of any scenario
Deliverables
• Exercise Plan document
• Exercise execution o Onsite exercise coordinator/facilitator
• Hotwash meeting o Onsite facilitator
• Lessons Learned document
Special Requirements
• Exercise plans and lessons learned documentation delivered in MS Word format
• Travel to the Borough for the exercise execution o King Salmon, AK airport
• Lodging can be provided by BBB.
• Borough vehicle can be available for local transportation, must have insurance to drive.
Cost
• An estimated 120 hours, vendor will propose the hourly rate and total cost of coordination, exercise, and documentation services.
• UP to 3 occurrences of travel to the Borough and up to 15 days of per diem
• Vendor will bill only for the hours and travel used.
Schedule
• The project may begin as soon as a contract is awarded, target date is no later than Nov 30, 25
• The schedule will be coordinated with all parties
• Completion of all deliverables target date is April 30, 2026
Disclaimer The Borough shall have unrestricted rights to all delivered data and reports. All documentation and reports will be delivered electronically to the Borough in an editable Microsoft Office format.
---- End of Scope of Services----
File details come from the government source that posted it. Updated .