MAS - Datalock Consulting Group LLC - 47QTCA19D00EV

GSA

47QTCA19D00EV

GENERAL SERVICES ADMINISTRATION

Federal Acquisition Service

Authorized Federal Supply Schedule FSS Price List

Online access to contract ordering information, terms and conditions, pricing, and the option to create an electronic delivery order are available through GSA Advantage!®. The website for

GSA Advantage!® is: https://www.GSAAdvantage.gov.

Multiple Award Schedule

FSC Group: Information Technology Professional Services FSC Class: 54151 Contract number: 47QTCA19D00EV

Contract period:

July 3, 2019 through July 2, 2024

Datalock Consulting Group LLC 4031 University Dr. Suite 100

Fairfax, VA 22030 703-436-4409 X 101 www.datalockcgcom

Contract administration source

Zyad Nabbus Zyad.Nabbus@DataLockCG.com

Business size: SMALL

For more information on ordering, go to the following website: https://www.gsa.gov/schedules

Price list current as of Modification #PS-0005, effective August 31, 2022

*This is the MOST RECENTLY awarded Contractor Initiated Modification and does NOT include any Mass Modifications

Prices Shown Herein are Net (discount deducted) http://www.datalockcgcom/ mailto:Zyad.Nabbus@DataLockCG.com%20%7C%20DataLockCG.com

47QTCA19D00EV

CUSTOMER INFORMATION

1a. Table of awarded special item number(s) with appropriate cross-reference to item descriptions and awarded price(s).

SINs Recovery SIN Title 54151S 54151SRC Information Technology Professional Services 54151HACS 54151HACSRC 54151HACS Highly Adaptive Cybersecurity Services

(HACS)

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. This price is the Government price based on a unit of one, exclusive of any quantity/dollar volume, prompt payment, or any other concession affecting price. Those contracts that have unit prices based on the geographic location of the customer, should show the range of the lowest price, and cite the areas to which the prices apply. See Page 4

1c. If the Contractor is proposing hourly rates, a description of all corresponding commercial job titles, experience, functional responsibility and education for those types of employees or subcontractors who will perform services shall be provided. If hourly rates are not applicable, indicate “Not applicable” for this item.

See Page 4

2. Maximum order:

SINs Maximum Order 54151S $500,000

54151HACS $500,000

3. Minimum order: $100

4. Geographic coverage (delivery area). Domestic

5. Point(s) of production (city, county, and State or foreign country). Same as contractor address

6. Discount from list prices or statement of net price. Government Net Prices (discounts already deducted.)

7. Quantity discounts. None

8. Prompt payment terms. Net 30 days. Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions.

9. Foreign items (list items by country of origin). Not Applicable

10a. Time of delivery. (Contractor insert number of days.) To Be Determined at the Task Order level

47QTCA19D00EV

10b. Expedited Delivery. Items available for expedited delivery are noted in this price list. Be Determined at the Task Order level

10c. Overnight and 2-day delivery. To Be Determined at the Task Order level

10d. Urgent Requirements. To Be Determined at the Task Order level

11. F.O.B. point(s). Destination

12a. Ordering address(es). Same as company address

12b. Ordering procedures: See Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment address(es). Same as company address

14. Warranty provision. Standard Commercial Warranty Terms & Conditions

15. Export packing charges, if applicable. Not Applicable

16. Terms and conditions of rental, maintenance, and repair (if applicable). Not Applicable

17. Terms and conditions of installation (if applicable). Not Applicable

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable). Not Applicable

18b. Terms and conditions for any other services (if applicable). Not Applicable

19. List of service and distribution points (if applicable). Not Applicable

20. List of participating dealers (if applicable). Not Applicable

21. Preventive maintenance (if applicable). Not Applicable

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). Not Applicable

22b. If applicable, indicate that Section 508 compliance information is available for the information and communications technology (ICT) products and services and show where full details can be found (e.g.

contractor’s website or other location.) ICT accessibility standards can be found at:

https://www.Section508.gov/.

Not Applicable

23. Unique Entity Identifier (UEI) number. GM2HRFT252M3

24. Notification regarding registration in System for Award Management (SAM) database. Contractor registered and active in SAM

Service Contract Labor Standards: The Service Contract Labor Standards (SCLS), formerly known as the Service Contract Act (SCA), is applicable to this contract as it applies to the entire Multiple Award Schedule (MAS) and all services provided. While no specific labor categories have been identified as being subject to SCLS/SCA due to exemptions for professional employees (FAR 22.1101, 22.1102 and 29 CRF 541.300), this contract still maintains the provisions and protections for SCLS/SCA eligible labor categories. If and / or when the contractor adds SCLS/SCA labor categories to the contract through the modification process, the contractor must inform the Contracting Officer and establish a SCLS/SCA matrix identifying the GSA labor category titles, the occupational code, SCLS/SCA labor category titles and the applicable WD number. Failure to do so may result in cancellation of the contract.

SIN TITLE DESCRIPTION

54151S

Principal Security Consultant

Directs the Cybersecurity and IA teams in the delivery of information security, information security systems, and/or computer security requirements. Architects, assesses, develops, engineers and implements Cybersecurity solutions. Retrieves, gathers and organizes technical information about an organization’s risks, vulnerabilities, and exposures within the existing security products, networks, applications, and programs. Develops, analyzes, and implements Cybersecurity architecture(s) as appropriate. Performs risk analysis assessments, conducts Cybersecurity governance and compliance services, develops analytical and technical reports as required. May be required to perform in one or more of the following areas: risk and vulnerability assessments;

cyber hunting activities; conducting penetration testing and scanning;

assessment of system security for compliance; security of computer network hardware; operating system utility/support software; disaster recovery; incident response and digital forensics; application assessment;

vulnerability threat management; cloud security; contingency planning;

social engineering; and the development of security policies and procedures. May be responsible for leading a team in performing these services.

Program Manager

Responsible for programs' overall direction and performance including relationship with the client and subcontractors. Manages overall budget, and plan for the project or multiple projects in a program. Manages personnel, materials, quality and defines standards for delivery of services. Ensures timely delivery of services in-line with the contract

47QTCA19D00EV

54151S

Senior Information Security Analyst

Participates in the performance of security risk assessment, systems threat assessment, penetration analysis of facilities. Participates in the development and preparation of OPSEC plans, security plans. Participates in the evaluation and implementation of AIS and network access control.

Performs firewall and VPN configuration, installation. Performs security audits and security policies. Install intrusion detection systems.

54151S

Mid Information

Analyzes and defines security requirements. Designs, develops, engineers and implements solutions to computer security requirements. Gathers and organizes technical information about an organization’s mission goals and needs, existing security products and ongoing programs in the computer security arena. Performs risk analyses that also includes risk assessment.

54151S

Junior Information

Provides expertise in application design, systems software and Information Technology systems. Provide technical, managerial, and administrative direction for problem definition, analysis, requirements development, and implementation of complex solutions by making information technology/information management related recommendations. Advise on organizational improvements, optimization, or maintenance efforts in the following specialties: information assurance, information systems architecture, networking, telecommunications, automation, risk management, software life-cycle management, development methodologies, visual design, information architecture, copywriting, and content management.

54151S

Senior Information Security Engineer

Specializes in the security of the network and all applications that are within the healthcare IT solution or application. Determines who requires access to which information, and then plans, coordinates, and implements information security programs. Using a multi-layered approach, they use their specialized expertise and up-to-date knowledge to help protect against web threats that facilitate cybercrime including malware, phishing, viruses, denial-of-service attacks, information warfare, and hacking.

54151S

Mid Information Security Engineer

Provides timely and effective billable service to clients to including design, installation and updating security requirements running on one or more hardware platforms and a variety of application software.

Coordinates projects resources to ensure the successful implementation of network infrastructure design. May interact with the Law enforcement community to assist in legal challenges.

54151S

Junior Information Security Engineer

Provides timely and effective billable service to clients to including design, installation and updating security requirements running on one or more hardware platforms and a variety of application software.

Coordinates projects resources to ensure the successful implementation of network infrastructure design. May interact with the Law enforcement community to assist in legal challenges.

54151S

Senior Penetration Tester

Responsible for testing software changes in the test environments as well as in production as directed. Understand the customer’s system-related requirements and ensure full verification after comprehensive testing.

This position involves variety of tests including functional and regression testing. Required to keep track of software bugs and deficiencies, open

47QTCA19D00EV

ticket with a comprehensive description of the item to be fixed.

Contribute to improving customer requirements if testing reveals gaps and deficiencies. Update Requirements Traceability Verification with detailed logging of evidence and test results

54151S

Mid Penetration Tester

Duties include documenting general performance baselines for key application processes, identify poorly performing processes, and execute tuning activities to improve performance. Assist with planning the performance testing effort, recommending scripts and load to run, determining a performance testing schedule, developing and executing scripts, analyzing performance testing results, suggesting tuning solutions to improve performance, and working with staff to analyze and manage performance. Perform comprehensive analyses of the testing results for the databases, the applications, SQL, as well as the database, web, and application servers and provide tuning solutions. Provide knowledge transfer and internal training to project team members. Will provide daily supervision and direction to staff.

Junior Penetration Tester

Duties include documenting general performance baselines for key application processes, identify poorly performing processes, and execute tuning activities to improve performance. Assist with planning the performance testing effort, recommending scripts and load to run, determining a performance testing schedule, developing and executing scripts, analyzing performance testing results, suggesting tuning solutions to improve performance, and working with staff to analyze and manage performance. Perform comprehensive analysis of the testing results for the databases, the applications, SQL, as well as the database, web, and application servers and provide tuning solutions. Provide knowledge transfer and internal training to project team members. May provide daily supervision and direction to staff.

54151HACS Sr Information Security Architect

Responsible for designing, building, testing and implementing security systems for an organization's IT network. Develops enterprise security architectures for organizations. Reviews security measures and recommends enhancements based on areas of weakness. Develops as-is and to-be security architectures. Develops security requirements and prepares security standards, policies, and procedures

54151HACS Mid Information

Responsible for participating in the designing, building, testing and implementing security systems for an organization's IT network.

Participates in the development and documents enterprise security architectures for organizations. Reviews security measures and recommends enhancements based on areas of weakness. Develops and documents as-is and to-be security architectures. Develops security requirements and documents security standards, policies, and procedures.

54151HACS Junior Information

Responsible for participating in the designing, building, testing and implementing security systems for an organization's IT network.

Participates in the development and documents enterprise security architectures for organizations. Works with Senior staff to review security measures and recommends enhancements based on areas of weakness.

Works with Senior staff to develop and documents as-is and to-be security architectures. Participates in the Development security requirements and documents security standards, policies, and procedures.

54151HACS Sr Incident Response Engineer

Responsible for detecting and independently responding to security incidents. Develops incident response plan including all phases:

Preparation, Identification, Containment, Eradication, Recovery and Lessons Learned. Responsible for leading the incident response team.

Conducts pro-active threat hunting. Performs forensic analysis of devices involved in incidents. Analyzes network traffic and identifies attack activity. Mentors other members of the incident response team. Briefs senior management on incident response activities.

54151HACS Mid Incident Response Engineer

Responsible for detecting and responding to security incidents. Ability to learn to perform pro-active threat hunting. Performs forensic analysis of devices involved in incidents. Analyzes network traffic and identifies attack activity. Documents incident response activities and lessons learned. Briefs incident response team on incident response activities.

54151HACS Junior Incident Response Engineer

Responsible for participating in detecting and responding to security incidents. Ability to learn to perform pro-active threat hunting. Performs forensic analysis of devices involved in incidents. Analyzes network traffic and identifies attack activity. Documents incident response activities and lessons learned.

47QTCA19D00EV

GSA SCHEDULE PRICING (Inclusive of IFF)

Resource GSA Rate Year 1

GSA Rate Year 2

GSA Rate Year 3

GSA Rate Year 4

GSA Rate Year 5

Principal Security Consultant $270.00 $275.40 $280.91 $286.53 $292.26

Program Manager $175.50 $179.01 $182.59 $186.24 $189.97

Senior Information Security Analyst $148.50 $151.47 $154.50 $157.59 $160.74

Mid Information Security Analyst $121.50 $123.93 $126.41 $128.94 $131.52

Junior Information Security Analyst $76.50 $78.03 $79.59 $81.18 $82.81

Senior Information Security Engineer $157.50 $160.65 $163.86 $167.14 $170.48

Mid Information Security Engineer $125.00 $127.50 $130.05 $132.65 $135.30

Junior Information Security Engineer $76.50 $78.03 $79.59 $81.18 $82.81

Senior Penetration Tester $180.00 $183.60 $187.27 $191.02 $194.84

Mid Penetration Tester $135.00 $137.70 $140.45 $143.26 $146.13

Junior Penetration Tester $76.50 $78.03 $79.59 $81.18 $82.81

Sr Information Security Architect $225.01

$229.51

$234.10

$238.79

$243.56

Mid Information Security Architect $157.51

$160.66

$163.87

$167.15

$170.49

Junior Information Security Architect $99.01

$100.99

$103.01

$105.07

$107.17

Sr Incident Response Engineer

$166.51

$169.84

$173.24

$176.70

$180.24

Mid Incident Response Engineer

$130.51

$133.12

$135.78

$138.50

$141.27

Junior Incident Response Engineer

$94.51

$96.40

$98.32

$100.29

$102.30