MAS - Focal Point Federal, LLC - 47QTCA20D00DB

GENERAL SERVICES ADMINISTRATION

Federal Supply Service

Authorized Federal Supply Schedule Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA Advantage!®, a menu-driven database system. The INTERNET address GSA

Advantage!® is: GSAAdvantage.gov.

Multiple Award Schedule

Contract Number: 47QTCA20D00DB

Contract period: August 4, 2020 – August 3, 2025

Focal Point Federal, LLC 201 E Kennedy Blvd, Suite 1750

Tampa, FL 33602

(P) 443-733-3146

(F) 443-319-5147 https://focal-point.com/

Contractor’s Administration Source: BEllis@focal-point.com

Business Size: Other Than Small

For more information on ordering from Federal Supply Schedules go to the GSA

Schedules page at GSA.gov.

Price list current as of Modification PS-0006, effective March 9, 2022

Prices Shown Herein are Net (discount deducted)

Focal Point Federal, LLC Contract 47QTCA20D00DB Pg 2

CUSTOMER INFORMATION

1a. Table of awarded special item number with appropriate cross-reference to item descriptions and awarded prices.

611410 - Information Technology Training - Includes training on hardware, software, cloud, and other applicable systems.

OLM - Order-Level Materials are supplies and/or services acquired in direct support of individual task or delivery order placed against a Schedule contract or BPA. OLM pricing is not established at the Schedule contract or BPA level, but at the order level.

OLMs are Purchased under the authority of the FSS Program, Unknown until an order is placed, Only authorized for use in direct support of another awarded SIN, Only authorized for inclusion at the order level under a Time-and-Materials (T&M) or Labor-Hour (LH) Contract Line Item Number (CLIN), OLMs are not open-market items, OLMs are not awarded under ancillary supplies/services or other direct cost (ODC) SINs (these items are defined, priced, and awarded at the FSS contract level).

The Order-Level Materials SIN is only authorized for use in direct support of another awarded SIN, Price analysis for OLMs is not conducted when awarding the FSS contract or FSS BPA, Order-Level Materials SIN must be inclusive of the Industrial Funding Fee (IFF) and the cumulative value of OLMs in an individual task or delivery order cannot exceed 33.33% of the total value of the order.

1b. Identification of the lowest priced model number and lowest unit price.

1c. If the Contractor is proposing hourly rates, a description of all corresponding commercial job titles, experience, functional responsibility and education for those types of employees or subcontractors who will perform services shall be provided. If hourly rates are not applicable, indicate “Not applicable” for this item. Not Applicable.

2. Maximum order: $250,000.

3. Minimum order: $100.000

4. Geographic coverage. 48 Contiguous States and Washington, DC, Alaska, Puerto Rico, Hawaii

5. Point of production. Tampa, FL (Hillsborough County).

6. Discount from list prices or statement of net price. Prices Shown Herein are Net (discount deducted)

7. Quantity discounts. Additional 5% discount for orders over $200,000.

8. Prompt payment terms. Information for Ordering Offices: 1% for Net 20 Days, Net 30.

9. Foreign items. None

Focal Point Federal, LLC Contract 47QTCA20D00DB Pg 3

10a. Time of delivery. To be negotiated at the task order level.

10b. Expedited Delivery. Items available for expedited delivery are noted in this price list.

10c. Overnight and 2-day delivery. To be negotiated at the task order level.

10d. Urgent Requirements. To be negotiated at the task order level

11. F.O.B. point. Destination.

12a. Ordering address: Focal Point Federal, LLC, 201 E Kennedy Blvd, Suite 1750, Tampa, FL 33602.

12b. Ordering procedures: For supplies and services, the ordering procedures, information on Blanket Purchase Agreements (BPA’s) are found in Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment address. 2 Focal Point Federal, LLC, 01 E Kennedy Blvd, Suite 1750, Tampa, FL 33602.

14. Warranty provision. Not applicable.

15. Export packing charges. Not applicable.

16. Terms and conditions of rental, maintenance, and repair. Not applicable.

17. Terms and conditions of installation. Not applicable.

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices. Not applicable.

18b. Terms and conditions for any other services. Not applicable.

19. List of service and distribution points. Not applicable.

20. List of participating dealers. Not applicable.

21. Preventive maintenance. Not applicable.

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). Not applicable.

22b. Indicate that Section 508 compliance information is available on Electronic and Information Technology (EIT) supplies and services and show where full details can be found. Not applicable.

EIT standards can be found at: www.Section508.gov/.

23. Unique Entity Identifier (UEI) number. JJHFV2WBG7C7.

24. Notification regarding registration in System for Award Management (SAM) database. Yes.

Mfg Course Title Course Description Course Length GSA Price

Focal Point Academy Assembly for

Reverse Engineers

Many who are employed as analysts or programmers have not had the time to learn the Assembly language - a skill that will save them precious time when effective analysis is needed most.

Designed for Malware Analysts and Code Developers alike, Assembly for Reverse Engineers will equip students with the know-how to effectively read Assembly, understand statements and reverse engineer machine code back to its higher-level equivalent. Discover how a compiler transforms high-level code into machine code, learn common Assembly statements you’ll see used in the real world, and then be introduced to writing your own code during this week-long, lab-intensive course. This class is taught as 70% hands-on and 30% classroom instruction and culminates in a capstone examination exercise. Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

5 Days $4,546.60

Focal Point Academy Behavioral Malware

Analysis

Behavioral Malware Analysis teaches students the fundamental skills necessary to analyze malicious software from a behavioral perspective. From simple key loggers to massive botnets, this class covers a wide variety of current threats. Using system monitoring tools and analytic software, students will analyze real-world malware samples in a training environment, giving them hands-on experience building secure lab environments, classifying malware, analyzing behavioral characteristics and their effects to systems, and documenting findings. This class is taught as 70% hands-on and 30% classroom instruction and culminates in a capstone examination exercise.- Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

5 Days $4,546.60

Focal Point Academy Introduction to C

Programming

C is one of the oldest and yet most widely used high-level programming languages in the world today. This course covers the fundamental principles of programming in this essential language.

Suitable for beginners, it starts with the basics of programming languages, program structure, and programming concepts before progressing to topics such as variables and scope, arithmetic operators, control flow, basic I/O, and using libraries. By the end of this course, students should be able to write, compile, and execute C programs that perform a variety of functions involving file and user I/O, data structures, algorithmic data manipulation, memory management, and more.-

Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

5 Days $4,546.60

Focal Point Academy Introduction to C++

Programming

This course introduces the student to the core concepts of object-oriented programming and equips them to implement these concepts in the C++ programming language. Starting with the foundations of classes, objects, inheritance and polymorphism, the course covers a wide range of techniques and is designed for those who are new to object-oriented programming.-Minimum # of

Students is 8 and the Maximun # is 20. Pricing is per Student.

5 Days $4,546.60

Focal Point Academy

Automated Network Defense (Formerly -

Cyber Threats Detection and

Mitigation)

Automation is essential in network defense to ensure that human eyes only focus on the things that really matter. This course teaches how to defend enterprise infrastructure at scale using a combination of tools and platforms such as IDS/IPS, firewalls, and SIEMs. Configuring and tuning these systems properly maximize their effectiveness at catching and stopping threats while reducing alert fatigue for analysts and responders. Students learn to identify gaps in coverage, write basic and complex signatures, manage rule sets for optimization, use chain rules to detect multi-stage events, and implement decoding and fingerprinting capabilities to overcome evasion techniques. This class is taught as 70% hands-on and 30% classroom instruction and culminates in a capstone examination exercise.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

5 Days $4,546.60

Focal Point Academy

Hacker Methodologies for

Security Professionals

Mainstream media coverage of hacker groups and their exploits have left the public thinking that all cyber security is black magic. While many attacks involve some advanced networking and coding techniques, most compromises are carried out by much less sophisticated attackers. Most of these individuals have learned the process of compromising servers and networks in the same way that all of us have learned technology; by researching online. The days of creating and compiling your own exploit code are long since passed. Most attackers are using “point and pwn” utilities like Armitage, Cain & Able, and the Social Engineers Toolkit (SET) to cause havoc for organizations worldwide. We believe that to emulate the various cyber threat vectors, it is critical to understand what most attacks have in common: their methodology. Bringing together decades of experience in government, commercial and academic cyber security training and consulting, our instructors have developed and implemented multiple threat emulation methodologies. While methodologies change over time to account for new technologies and techniques, the concepts involved remain constant. This course provides a flexible methodology for use in emulating external and internal network intrusion threat vectors.-Minimum # of Students is 8 and the

Maximun # is 20. Pricing is per Student.

5 Days $4,546.60

Focal Point Federal, LLC Contract # 47QTCA20D00DB Pg 4

Introduction to Cyber

Security

Over the past few years, the world has continued to watch as breach after breach has resulted in millions of credit card and personal information records being posted on the Internet. The Internet Storm Center reports an average of over 700,000 detected intrusion attempts daily – and that's only the events they catch. There is no question that Cyber Security is a now a business priority and a prevailing global issue. The challenge lies in where to begin the daunting task of securing your infrastructure, training your end users, and preparing your organization to face the year ahead.

Introduction to Cyber Security is the foundational training for all users, whether management, IT, end user or programmer. Equip your team with the most up-to-date knowledge of the threats we all face and the hands-on skills to address them. With information gathered from the most trusted sources (CERT, NIST, DHS and others), this course presents an objective, complete, and cutting-edge view of our current environment as well as a vision of the near future of Cyber Security.- Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

1 Day $1,143.83

Focal Point Academy Linux and C++

Reverse Engineering

This course enables the skilled malware analyst to branch into the less mainstream (but equally important) areas of reversing C++ binaries and Linux binaries. After a review of assembly, including a deeper dive into the differences between x86 and x64 architectures, students will learn about C++ calling conventions, classes, objects, and exception handling and how these affect reverse engineering. The course then turns to the Linux operating system, covering topics such as kernel structure and the Linux Application Binary Interface (ABI) in preparation for statically analyzing and debugging Linux executables and malware.-Minimum # of Students is 8 and the

Maximun # is 20. Pricing is per Student.

5 Days $4,546.60

Focal Point Academy Linux Kernel

Internals

From kernel module implementation to memory and process management, Linux Kernel Internals teaches you the fundamentals of developing for the Linux kernel. Equipped with a laptop with all the necessary tools, you will set up a development environment for Linux and then learn to build kernel modules that interact with I/O, memory, processes, file systems, and networking. This course also takes a deep dive into the Linux-specific obfuscation methods frequently used by attackers to escape detection. This course is perfect for those looking to start low-level kernel development for this popular operating system.-Minimum # of Students is 8 and the Maximun # is

20. Pricing is per Student.

5 Days $5,455.92

Focal Point Academy

Endpoint Live Forensics (Formerly -

Live System Analysis)

Endpoint Live Forensics teaches students how to identify abnormal activity and investigate a running system that may have been compromised. In this course, students will learn sound methodology coupled with the most useful commands and tools that can be employed during investigation to reveal the significant indicators of infiltration, as well as how to create a system baseline to be used for future analysis. Both the Windows and Linux operating systems are covered in this course. This course is taught as 70% hands on and 30% classroom instruction.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

5 Days $4,546.60

Focal Point Academy

Network Forensics & Investigation II

(Formerly - Malicious Network Traffic Analysis)

Building on the skills developed in the previous course, students will learn how to use advanced features in tools such as Elastic, Wireshark, Zeek and Suricata, how to apply threat intelligence to enrich analysis and direct response actions, and how to identify and investigate more complex or hard-to-detect intrusions. This course covers malicious actions from across the attacker lifecycle, from initial reconnaissance and access through to activities such as data exfiltration and command-and-control traffic attributed to botnets or APTs. This class is taught as 70% hands-on and 30% classroom instruction and culminates in a capstone examination exercise.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

5 Days $4,546.60

Focal Point Academy Malware Reverse

Engineering

Malware Reverse Engineering builds on the knowledge and skills from the Assembly for Reverse Engineers course and teaches students how to perform more advanced analysis of real-world malware samples. The primary techniques taught are disassembly and debugging. The course also covers topics such as data decoding and binary obfuscation to bypass protections and perform effective analysis on hardened samples; dealing with destructive malware; and defeating anti-debugging and other anti-analysis techniques. This class is taught as 70% hands-on and 30% classroom instruction and culminates in a capstone examination exercise.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

5 Days $5,455.92

Focal Point Academy

Network Forensics & Investigation I

(Formerly - Network Traffic Analysis)

This course teaches the core skills of identifying and investigating potential breaches and other events from a network data perspective. Students will learn how to use common security frameworks and tools such as SIEMs, and packet/protocol analysis tools to respond to alerts, correlate data points from multiple sources, use security analytics to reconstruct event timelines, and extract artifacts for further analysis. Critical thinking skills and analytic methodologies are used as a foundation to achieve outcomes or reach conclusions with an appropriate level of confidence After attending this course, students will be able to home in on the key events in a traffic capture and reconstruct the event timeline. This class is taught as 70% hands-on and 30% classroom instruction and culminates in a capstone team based CTF challenge.-Minimum # of

Students is 8 and the Maximun # is 20. Pricing is per Student.

5 Days $4,546.60

Focal Point Federal, LLC Contract # 47QTCA20D00DB Pg 5

Threat Hunting with Python (Formerly - Python for Network

Defenders)

This intermediate-level course teaches students how to take threat hunting hypotheses generated from contextual data or threat intelligence feeds, and then write Python scripts that interact with various data sources and perform data analytics to determine the validity of those hypotheses.

Techniques include the use of advanced data structures, active data gathering using Scapy and other tools, scripting database or SIEM queries, and more. Successful students will gain the ability to script or automate a variety of custom threat hunting tasks and speed up their threat hunting processes.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

5 Days $4,546.60

Focal Point Academy Python for Reverse

Engineers

Python Reverse Engineering is geared towards the reverse engineer and introduces the Python language with a focus on using it to accelerate, automate, and optimize reverse engineering tasks.

The course begins with an introduction to the Python language, a review of object types and flow statements, then delves into file operations, modules, working with the CTypes library for interaction with Windows operating systems, debugging, and IDA scripting.-Minimum # of

Students is 8 and the Maximun # is 20. Pricing is per Student.

5 Days $5,455.92

Focal Point Academy Windows Rootkit

Reverse Engineering

This course takes students into advanced and specialist topics surrounding rootkit analysis.

Students will learn about the Windows kernel, automated and manual unpacking, live kernel debugging with IDA and and malware analysis prior to attending. WinDbg, and reverse engineering drivers. This is a heavily lab-intensive course that requires students to have a solid background in programming, reverse engineering,-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

5 Days $4,546.60

Focal Point Academy

OS Internals for Security

Professionals (Formerly -

Understanding Operating Systems)

OS Internals for Security Professionals is a foundational course that exposes students to the underpinnings of modern desktop operating systems and the components that are most vulnerable to attack. It covers the principles of process, memory, and I/O management that drive all modern operating systems. It also includes hands-on labs to discover how they are implemented in Windows and Linux. After attending this course, students will be able to describe how the components of operating systems work and interact, use built-in tools to analyze these components, and have an excellent foundation for courses in malware analysis, intrusion analysis, and penetration testing This course is taught as 60% hands-on and 40% classroom instruction.- Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

5 Days $4,546.60

Focal Point Academy Introduction to Cyber

Risk Management

A one-day, seminar-style program that covers the cyber fundamentals you need to operate your business securely, embrace disruption safely, and effectively communicate cyber risks within your organization. Designed with busy executives in mind, this program dissects the most important issues in cyber risk management and arms attendees with the tools needed to engage in strategic cyber conversations at the executive level.-Minimum # of Students is 8 and the Maximun # is 20.

Pricing is per Student.

1 Day $909.32

Focal Point Academy Introduction to Cyber Risk Management -

Live Online Delivery

ICRM - Live Online Delivery-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

1 Day $4,785.89

Palo Alto Networks

Firewall Essentials:

Configuration and

Management (EDU- 210)

Successful completion of this five-day, instructor-led course should enhance the student’s understanding of how to configure and manage Palo Alto Networks Next-Generation Firewalls.

The course includes hands-on experience configuring, managing, and monitoring a firewall in a lab environment.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

5 $1,914.36

Palo Alto Networks

Firewall: Optimizing Firewall Threat

Prevention (EDU- 214)

Successful completion of this three-day, instructor-led course will help the student manage and maintain a Palo Alto Networks firewall-protected environment. The student will learn how to improve non-greenfield environments and will be better equipped to ensure that configurations match security best practice. The student will also be able to develop an operational strategy for maintaining a high level of compliance.-Minimum # of Students is 8 and the Maximun # is 20.

Pricing is per Student.

2 days $2,871.54

Focal Point Federal, LLC Contract # 47QTCA20D00DB Pg 6

Palo Alto Networks

Cortex XDR 2 - Prevention Analysis, and Response (EDU-

260)

Successful completion of this instructor-led course with hands-on lab activities should enhance the student’s understanding of how to activate a Cortex XDR instance; create agent installation packages to install the Cortex XDR agents; create security policies and profiles to protect endpoints against multi-stage, fileless attacks built using malware and exploits; respond to attacks using response actions; understand behavioral threat analysis, log stitching, agent-provided enhanced endpoint data, and causality analysis; investigate and triage attacks using the incident management page of Cortex XDR and analyze alerts using the Causality and Timeline analysis views; use API to insert alerts; create BIOC rules; and search a lead in raw data sets in Cortex Data Lake using Cortex XDR Query Builder.-Minimum # of Students is 8 and the Maximun # is 20.

Pricing is per Student.

3 Days $2,871.54

Palo Alto Networks

Prisma Access SASE Security: Design and

Operation (EDU- 318)

This course is an instructor-led training that describes Prisma Access Secure Access Service Edge (SASE). This course is intended for anyone who wants to learn how to secure remote networks and mobile users. You will learn how to design, implement and operate the Prisma Access solution to better protect mobile users and your IT infrastructure in remote networks using a SASE implementation.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

3 days $2,871.54

Palo Alto Networks Firewall:

Troubleshooting

(EDU-330)

Successful completion of this three-day, instructor-led course will enhance the participant’s understanding of how to troubleshoot the full line of Palo Alto Networks next-generation firewalls.

Participants will perform hands-on troubleshooting related to the configuration and operation of the Palo Alto Networks firewall. Completion of this class will help participants develop an in-depth knowledge of how to troubleshoot visibility and control over applications, users, and content.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

3 Days $1,818.64

Cloud Security Alliance Certificate of Cloud Security Knowledge (CCSK) Foundation

Successful students will gain the ability to determine if a cloud computing environment has been implemented responsibly and with the appropriate security controls. In short, you will be able to leave this class with the ability to properly design, build, and maintain a secure cloud computing environment within a business setting. This course includes one exam voucher for the most current version of the CCSK exam-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per

Student.

2 days $2,727.96

Cloud Security Alliance Certificate of Cloud Security Knowledge (CCSK) Plus – AWS

CCSK Plus AWS builds on the foundation class with expanded material and offers extensive hands-on activities that reinforce classroom instruction. Students engage in a scenario of bringing a fictional organization securely into the cloud, which gives them the opportunity to apply their knowledge by performing a series of activities that would be required in a real-world environment with a focus on AWS. Students will come away ready to earn their Certificate of Cloud Security Knowledge (CCSK). This course includes one exam voucher for the most current version of the

CCSK exam-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

3 days $2,727.96

Cloud Security Alliance Certificate of Cloud Security Knowledge

(CCSK) Plus – Azure

CCSK Plus Azure builds on the foundation class with expanded material and offers extensive hands-on activities that reinforce classroom instruction. Students engage in a scenario of bringing a fictional organization securely into the cloud, which gives them the opportunity to apply their knowledge by performing a series of activities that would be required in a real-world environment with a focus on MS Azure. Students will come away ready to earn their Certificate of Cloud Security Knowledge (CCSK). This course includes one exam voucher for the most current version of the CCSK exam-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

3 days $1,818.64

Trivera Technologies Intro to Python Programming

(TTPS4800)

Introduction to Python Programming is a hands-on Python programming course that teaches you the key skills you’ll need to get started with programming in Python to a solid, foundational level.

The start of the course will lead you through writing and running basic Python scripts, and then guide you through how to use more advanced features such as file operations, regular expressions, working with binary data, and using the extensive functionality of Python modules. Extra emphasis is placed on features unique to Python, such as tuples, array slices, and output formatting. This course provides you with an excellent kick start for users new to Python and scripting, enabling you to quickly use basic Python skills on the job in a variety of ways. You’ll be able use Python in basic web development projects and use it to automate or simplify common tasks with scripts. The course also serves as a solid primer course / foundation for continued Python study in support for next-level web development with Python, using Python in DevOps, Python for data science / machine learning or Python for systems admin or networking support.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

3 days $2,727.96

Focal Point Federal, LLC Contract # 47QTCA20D00DB Pg 7

Trivera Technologies

Python Programming Proficiency | Using Python in the Cloud with Azure

(TTPS4880)

Using Python in the Cloud with Azure is an introductory and beyond-level practical, hands-on Python training course that leads the student from the basics of writing and running Python scripts to more advanced skills required to write solid Python code to deploy to production. This comprehensive, practical course provides an in-depth exploration of working with the programming language, not an academic overview of syntax and grammar.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

5 days $909.32

Trivera Technologies

Data Science Overview | Tools, Tech & Modern

Roles in the Data Driven Enterprise

(TTDS6600)

The Data Science Overview is an introductory level course that introduces the concepts and technologies involved in Big Data, Data Science, Predictive Analytics, Artificial Intelligence, Data Mining, and Data Warehousing. This overview explores the current state of data science, the major components of a modern data science infrastructure, team roles and responsibilities, and possible outcomes for your investment.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

1 day $4,546.60

Trivera Technologies

Next Level Python for Data Science /

Intermediate | Working with

NumPy, Pandas, SciKit Learn, SciPy, TensorFlow & More

(TTPS4876)

Next-Level Python for Data Science covers the essentials of using Python as a tool for data scientists to perform exploratory data analysis, complex visualizations, and large-scale distributed processing on “Big Data”. In this course we cover essential mathematical and statistics libraries such as NumPy, Pandas, SciPy, SciKit-Learn, TensorFlow, as well as visualization tools like matplotlib, PIL, and Seaborn. This course is ‘intermediate level’ as it assumes that attendees have solid data analytics and data science background and have basic Python knowledge. Topics are introductory in nature, but are covered in-depth, geared for experienced students.-Minimum # of

Students is 8 and the Maximun # is 20. Pricing is per Student.

5 days $2,727.96

Trivera Technologies

Intro to R Programming for Data Science &

Analytics

(TTDS6683)

R is a functional programming environment used by business analysts and data scientists. In Intro to R Programming, you will learn the components of a statistical programming environment and be able to describe generic programming language concepts as they are implemented in R. You will learn the basics of statistical computing which includes programming in R, reading data into R, accessing R packages, writing R functions, and visualizing data with R.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

3 days $1,818.64

Trivera Technologies

Securing Web Applications |

Explore OWASP Top Ten, Bug Hunting, Bug

Stomping & More

(TT8120)

Security experts agree that the least effective approach to security is "penetrate and patch". It is far more effective to "bake" security into an application throughout its lifecycle. After spending significant time examining a poorly designed (from a security perspective) web application, developers are ready to learn how to build secure web applications starting at project inception.

The final portion of this course builds on the previously learned mechanics for building defenses by exploring how design and analysis can be used to build stronger applications from the beginning of the software lifecycle. The Secure Web Application Development Overview is geared for web developers and technical stakeholders who need to produce secure web applications, integrating security measures into the development process from requirements to deployment and maintenance. This overview-level course explores core concepts and challenges in web application security, showcasing current, real-world examples that illustrate the potential consequences of not following these best practices. This course is also PCI Compliant.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

2 days $1,818.64

Focal Point Federal, LLC Contract # 47QTCA20D00DB Pg 8

Exploring the

OWASP Top 10

(TT8150)

The impact of exploited software is obvious. We are beyond the point where vulnerabilities must be addressed. The current OWASP Top 10 has become the most recognized source for defining the most significant vulnerabilities. This series of quick, hard-hitting sessions sets the context and charges through each of the OWASP vulnerabilities. Each virtual, instructor-led session provides a solid set of information for developers, testers, and other stakeholders about understanding, identifying, and mitigating a vulnerability. These short, intense sessions maximize the flow of information in an effective and interactive manner. Students who attend this course will gain an understanding of the recently updated OWASP Top 10. Each of these sessions provides useful insights, discussions, and, in many cases, demonstrations of the application vulnerabilities that are plaguing the industry.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per

Student.

2 Days $3,637.28

Trivera Technologies

Attacking and Securing Java / JEE Web Applications | JEE Secure Coding

(TT8320-J)

Attacking and Securing Java/JEE Web Applications is a lab-intensive, hands-on Java / JEE security training course that provides a unique coverage of Java application security. In this course, students begin with penetration testing and hunting for bugs in Java web applications. They then thoroughly examine best practices for defensively coding web applications, covering all the OWASP Top Ten as well as several additional prominent vulnerabilities (such as file uploads, CSRF and direct object references). Students will repeatedly attack and then defend various assets associated with fully functional web applications and services. This hands-on approach drives home the mechanics of how to secure JEE web applications in the most practical of terms.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

4 Days $4,546.60

Trivera Technologies

Secure Java / JEE Web Application

Development Lifecycle (SDL)

(TT8325-J)

Secure Java Web Application Development Lifecycle is a lab-intensive, hands-on Java / JEE security training course that provides 360-degree coverage of Java application security. In this course, students begin with penetration testing, hunting for bugs in Java web applications. They then thoroughly examine best practices for defensively coding web applications, covering all the OWASP Top Ten as well as several additional prominent vulnerabilities (such as file uploads, CSRF and direct object references). Students will repeatedly attack and then defend various assets associated with fully functional web applications and services. This hands-on approach drives home the mechanics of how to secure JEE web applications in the most practical of terms. Finally, students examine the controls (defenses) related to the phases that attackers work through when exploiting web applications. The course focuses on three specific activities that are interrelated and move the security process farther to the left in the development process. The course ends with an extensive discussion of what a mature application security presence would provide to the developers within an organization.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

5 days $4,546.60

Trivera Technologies

Secure .Net Web Application

Development Lifecycle (SDL)

(TT8325-N)

Secure .NET Web Application Development Lifecycle is a lab-intensive, hands-on security training course that provides 360-degree coverage of .NET application security. In this course, students begin with penetration testing, hunting for bugs in .NET web applications. They then thoroughly examine best practices for defensively coding web applications, covering all the OWASP Top Ten as well as several additional prominent vulnerabilities (such as file uploads, CSRF and direct object references). Students will repeatedly attack and then defend various assets associated with fully functional web applications and services. This hands-on approach drives home the mechanics of how to secure .NET web applications in the most practical of terms. Finally, students examine the controls (defenses) related to the phases that attackers work through when exploiting web applications. The course focuses on three specific activities that are interrelated and move the security process farther to the left in the development process. The course ends with an extensive discussion of what a mature application security presence would provide to the developers within an organization.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

5 days $909.32

Trivera Technologies Information

Assurance (STIG) Overview (TT8800)

Information Assurance Overview (STIG) is an essential course for technical leads, project managers, testing/QA personnel and other stakeholders who need to understand the issues and concepts associated with secure applications. During this one-day dynamic seminar, students learn the best practices for designing, implementing, and deploying secure applications as prescribed in the various STIGs. Students who attend Information Assurance Overview will leave the course armed with the required skills to understand software vulnerabilities (actual and potential) and defenses for those vulnerabilities. This course quickly introduces students to the various types of threats against their software and provides coverage of many core security-related technologies.

The concept and process of Threat Modeling is introduced as a key enabler for implementing effective and appropriate security for software and information assets.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

1 Day $4,546.60

Focal Point Federal, LLC Contract # 47QTCA20D00DB Pg 9

Application Security and Development

(STIG) (TT8810)

Application Security and Development (STIG) is a lab-intensive, hands-on application security training course essential for developers, designers, architects, QA, Testing, and other personnel who need to deliver secure applications within the DOD. In addition to teaching basic programming skills, this course digs deep into sound processes and practices that apply to the entire software development lifecycle. Further, it fills in the context, background, and best practices for fulfilling STIG requirements and needs. In this course, students thoroughly examine best practices for defensively coding web applications, including XML processing, rich interfaces, and both RESTful and SOAP-based web services. Students will repeatedly attack and then defend various assets associated with fully functional web applications and web services. This hands-on approach drives home the mechanics of how to secure web applications in the most practical of terms-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

5 Days $2,727.96

Trivera Technologies Database Security

(STIG) (TT8820)

Database Security (STIG) is an intense database security training course essential for DBAs, QA, testing, and other personnel who need to deliver secure database applications and manage secure databases within the DoD. In addition to teaching basic skills, this course digs deep into sound processes and practices that apply to the entire software development lifecycle. Perhaps just as significantly, students learn about current, real examples that illustrate the potential consequences of not following these best practices. Data, databases, and related resources are at the heart of the

DoD’s IT infrastructures and must be protected accordingly. This course fills in the context, background, and best practices for fulfilling STIG requirements and needs. Students repeatedly attack and then defend various assets associated with a fully functional database. This approach illustrates the mechanics of how to secure databases in the most practical of terms.-Minimum # of Students is 8 and the Maximun # is 20. Pricing is per Student.

3 Days $3,637.28

Trivera Technologies Introduction to

DevSecOps

(TTDV8400)

Introduction to DevSecOps is a comprehensive hands-on course designed to provide you with the skills needed to help you build your security automation framework to scan for vulnerabilities without human intervention. This course will teach you how to adopt security automation techniques to continuously improve your entire software development and security testing, learning about and working with open-source tools and techniques to integrate security testing tools directly into your CI/CD framework. Throughout this course, you will see how to implement security inspection at every layer, such as secure code inspection, fuzz testing, Rest API, privacy, infrastructure security, and web UI testing. With the help of practical examples, this course will teach you to implement the combination of automation and Security in DevOps. You will learn about the integration of security testing results for an overall security status for projects. By the end of this course, you will be confident implementing automation security in all layers of your software development stages and will be able to build your own in-house security automation platform throughout your mobile and cloud releases.Minimum # of Students is 8 and the Maximun

# is 20. Pricing is per Student.

4 Days $3,637.28

Focal Point Federal, LLC Contract # 47QTCA20D00DB Pg 10