MAS - Compass Federal Consulting LIMITED Liability Company - 47QTCA20D00DK

10 Colebrick Court Shamong, NJ 08088

PHONE 703-624-2796

EMAIL peter@compass-federal.com WEB SITE www.compass-federal.com

COMPASS FEDERAL CONSULTING

GENERAL SERVICES ADMINISTRATION

Federal Supply Service Authorized Federal Supply Schedule Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order is available through GSA Advantage!™, a menu-driven database system. The INTERNET address for GSA Advantage!™ is: http://www.GSAAdvantage.gov.

Multiple Award Schedule Solicitation (47QSMD20R0001)

SIN 54151HACS: Highly Adaptive Cybersecurity Services (HACS) Contract Number: 47QTCA20D00DK

FOR MORE INFORMATION ON ORDERING FROM FEDERAL SUPPLY

SCHEDULES

click on the FSS Schedules button at http://www.gsa.gov/schedules-ordering

Contract Period: August 10, 2020 through August 9, 2025

Contractor: Compass Federal Consulting Limited Liability Company 10 Colebrick Ct Shamong, NJ 08088

Business Size: Small Business Telephone: 703-624-2796 Web Site: http://compass-federal.com/ E-mail: peter@compass-federal.com Contract Administration: Peter Rath http://www.gsa.gov/schedules-ordering http://sera-brynn.com/ http://sera-brynn.com/

WEB SITE www.compass-federal.com

COMPASS FEDERAL CONSULTING

CUSTOMER INFORMATION:

1a. Table of Awarded Special Item Number(s) with appropriate cross-reference to page numbers:

SIN SIN Description 54151HACS Highly Adaptive Cybersecurity Services (HACS)

Includes the following Subgroups:

High Value Asset (HVA) Assessments HACS Risk and Vulnerability Assessments (RVA)

Penetration Testing Incident Response

Cyber Hunt

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. This price is the Government price based on a unit of one, exclusive of any quantity/dollar volume, prompt payment, or any other concession affecting price. Those contracts that have unit prices based on the geographic location of the customer, should show the range of the lowest price, and cite the areas to which the prices apply. – N/A Offering Services Only

1c. If the Contractor is proposing hourly rates a description of all corresponding commercial job titles, experience, functional responsibility and education for those types of employees or subcontractors who will perform services shall be provided. If hourly rates are not applicable, indicate “Not applicable” for this item. – See Pages 6 through 11

2. Maximum Order: $500,000.00

3. Minimum Order: $100.00

4. Geographic Coverage (delivery Area): CONUS

5. Point(s) of production (city, county, and state or foreign country): Same as company address

6. Discount from list prices or statement of net price: Government net prices (discounts already deducted).

WEB SITE www.compass-federal.com

7. Quantity discounts: 1%>$500,000

8. Prompt payment terms: Net 30 days. Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange other concessions.

9a. Notification that Government purchase cards are accepted up to the micro-purchase threshold: Yes

9b. Notification whether Government purchase cards are accepted or not accepted above the micro-purchase threshold: Yes

10. Foreign items (list items by country of origin): None

11a. Time of Delivery (Contractor insert number of days): Specified on the Task Order

11b. Expedited Delivery. The Contractor will insert the sentence “Items available for expedited delivery are noted in this price list.” under this heading. The Contractor may use a symbol of its choosing to highlight items in its price list that have expedited delivery: Contact Contractor

11c. Overnight and 2-day delivery. The Contractor will indicate whether overnight and 2-day delivery are available. Also, the Contractor will indicate that the schedule customer may contact the Contractor for rates for overnight and 2-day delivery:

Contact Contractor

11d. Urgent Requirements. The Contractor will note in its price list the “Urgent

Requirements” clause of its contract and advise agencies that they can also contact the Contractor’s representative to effect a faster delivery: Contact Contractor

12. F.O.B Points(s): Destination

13a. Ordering Address(es): Same as Contractor

13b. Ordering procedures: For supplies and services, the ordering procedures, information on Blanket Purchase Agreements (BPA’s) are found in Federal Acquisition Regulation (FAR) 8.405-3.

14. Payment address(es): Same as company address

15. Warranty provision.: Contractor’s standard commercial warranty.

16. Export Packing Charges (if applicable): N/A

17. Terms and conditions of Government purchase card acceptance (any thresholds above the micro-purchase level): Purchase Cards accepted at all levels

18. Terms and conditions of rental, maintenance, and repair (if applicable): N/A

19. Terms and conditions of installation (if applicable): N/A

20. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable): N/A

20a. Terms and conditions for any other services (if applicable): N/A

21. List of service and distribution points (if applicable): N/A

22. List of participating dealers (if applicable): N/A

23. Preventive maintenance (if applicable): N/A

24a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants: N/A

24b. If applicable, indicate that Section 508 compliance information is available on

Electronic and Information Technology (EIT) supplies and services and show where full details can be found (e.g. contactor’s website or other location.) The EIT standards can be found at: www.Section508.gov/.

25. Data Universal Numbering System (DUNS) number: 078541469

26 Notification regarding registration in System for Award Management (SAM) database:

Registered in SAM http://www.section508.gov/

GSA PRICE LIST (All pricing is per hour)

Labor Category Title Identify Required Licenses or

Certifications (State "None" if not required)

Price Offered to GSA (including

IFF)

Program Manager PMP $215.37

Information Security Project Manager - Senior PMP $176.48

Information Security Project Manager Intermediate None $143.58

Information Security Project Manager Junior None $114.86

Information Security Subject Matter Expert (SME) None $239.29 Information Security Engineer Lead None $191.44

Information Security Engineer Senior None $162.72

Information Security Engineer Intermediate None $129.22

Information Security Engineer Junior None $100.50 Information Security Analyst - Lead None $177.71

Information Security Analyst - Senior None $138.79 Information Security Analyst - Intermediate None $114.86

Information Security Analyst - Junior None $90.93 Senior Security Tech Writer None $119.65 Security Tech Writer None $95.72 Penetration Tester - Lead None $215.37 Penetration Tester - Senior None $177.08

Penetration Tester - Intermediate None $143.58 Penetration Tester - Junior None $119.65

Labor Descriptions and Education

Labor Category Years of

Professional Experience

Minimum Education Description

Program Manager 15 Bachelors

Serves as the authorized interface with the client on large, complex IT Programs. Accountable for team oversight to ensure successful performance and delivery. Responsible for managing all staff, developing and maintaining project schedules/scope, communicating policies and goals to the project team. Authorized to interface with client contracting officer (or COR) on behalf of the company. May supervise multiple Project or Task Managers to ensure client needs are clearly communicated and met.

Information Security Project Manager - Senior 10 Bachelors

Serves as the project manager for a large or complex IT project or group of related tasks. Ensures the timely and successful performance of the project by managing scope, schedule, resources, deliverables and communications through the creation and maintenance of required reports and communication materials. Responsible for team members performance on a given project. May take and implement guidance from authorized client representatives.

Information Security Project Manager Intermediate 5 Bachelors

Serves as the project manager for IT projects or group of related tasks.

Ensures the timely and successful performance of the project by managing scope, schedule, resources, deliverables and communications through the creation and maintenance of required reports and communication materials. Responsible for team members performance on a given project.

May take and implement guidance from authorized client representatives.

Information Security Project Manager Junior 2 Bachelors

Reports to a more senior project manager or program manager. Supports the manager on IT projects or group of related tasks. Ensures the timely and successful performance of the project by managing scope, schedule, resources, deliverables and communications through the creation and maintenance of required reports and communication materials.

Responsible for team members performance on a given project. May take and implement guidance from authorized client representatives.

WEB SITE www.compass-federal.com

COMPASS FEDERAL CONSULTING

Information Security Subject Matter Expert (SME) 10 Bachelors

Provides significant experience and guidance to large or complex IT projects related to the individual's subject matter expertise. Produces and/or reviews detailed deliverables, expressing experts opinions based on years of successful history. Delivers presentations and expert opinions to staff and upper management.

Information Security Engineer Lead 8 Bachelors

Has ability to work independently on technical IT tasks and projects and has experience leading project teams consisting of 2 or more individuals.

Usually recognized as a subject matter expert and able to conduct in person and written presentations to senior management. Provides team leadership and expertise to any security engineering project, including but not limited to: Risk Assessments, Vulnerability Scanning, Risk Management, Intrusion Detection and Prevention, Configuration Management, Firewalls, Load Balancers, Security Information and Event Management (SIEM), Forensics, VPN, Penetration Testing, NIST SP 800-series and FISMA compliance, Assessment & Authorization, Security control assessments, PKI, Data Loss Prevention (DLP), routers and switches.

Information Security Engineer Senior 5 Bachelors

Has ability to work independently on technical IT tasks and projects. Usually recognized as a subject matter expert and able to conduct in person and written presentations to senior management. Provides team leadership and expertise to any security engineering project, including but not limited to:

Risk Assessments, Vulnerability Scanning, Risk Management, Intrusion Detection and Prevention, Configuration Management, Firewalls, Load Balancers, Security Information and Event Management (SIEM), Forensics, VPN, Penetration Testing, NIST SP 800-series and FISMA compliance, Assessment & Authorization, Security control assessments, PKI, Data Loss Prevention (DLP), routers and switches.

Information Security Engineer Intermediate 3 Bachelors

Typically works under the supervision of a lead, senior engineer or project manager. Provides expertise to any security engineering project, including but not limited to: Risk Assessments, Vulnerability Scanning, Risk Management, Intrusion Detection and Prevention, Configuration Management, Firewalls, Load Balancers, Security Information and Event Management (SIEM), Forensics, VPN, Penetration Testing, NIST SP 800-series compliance, Assessment & Authorization, Security control assessments, PKI, Data Loss Prevention (DLP), routers and switches.

WEB SITE www.compass-federal.com

COMPASS FEDERAL CONSULTING

Information Security Engineer Junior 1 Bachelors

Typically works under the supervision of a lead, senior engineer or project manager. Provides expertise to any security engineering project, including but not limited to: Risk Assessments, Vulnerability Scanning, Risk Management, Intrusion Detection and Prevention, Configuration Management, Firewalls, Load Balancers, Security Information and Event Management (SIEM), Forensics, VPN, Penetration Testing, NIST SP 800-series compliance, Assessment & Authorization, Security control assessments, PKI, Data Loss Prevention (DLP), routers and switches.

Information Security Analyst - Lead 8 Bachelors

Has ability to work independently on technical IT tasks and projects and has experience leading project teams consisting of 2 or more individuals.

Usually recognized as a subject matter expert and able to conduct in person and written presentations to senior management. Provides team leadership and expertise to any security project, including but not limited to: Risk Assessments, Vulnerability Scanning, Risk Management, Intrusion Detection and Prevention, Configuration Management, Firewalls, Load Balancers, Security Information and Event Management (SIEM), Forensics, VPN, Penetration Testing, NIST SP 800-series and FISMA compliance, Assessment & Authorization, Security control assessments, PKI, Data Loss Prevention (DLP), routers and switches. Provides requirements gathering, analysis and recommendations.

Information Security Analyst - Senior 5 Bachelors

Has ability to work independently on technical IT tasks and projects and has experience leading project teams consisting of 2 or more individuals.

Usually recognized as a subject matter expert and able to conduct in person and written presentations to senior management. Provides team leadership and expertise to any security project, including but not limited to: Risk Assessments, Vulnerability Scanning, Risk Management, Intrusion Detection and Prevention, Configuration Management, Firewalls, Load Balancers, Security Information and Event Management (SIEM), Forensics, VPN, Penetration Testing, NIST SP 800-series and FISMA compliance, Assessment & Authorization, Security control assessments, PKI, Data Loss Prevention (DLP), routers and switches. Provides requirements gathering, analysis and recommendations.

WEB SITE www.compass-federal.com

COMPASS FEDERAL CONSULTING

Information Security Analyst - Intermediate 3 Bachelors

Typically works under the guidance of a lead or senior analyst, or project manager. Has ability to work independently on technical IT tasks and projects and provides relevant expertise to any security project, including but not limited to: Risk Assessments, Vulnerability Scanning, Risk Management, Intrusion Detection and Prevention, Configuration Management, Firewalls, Load Balancers, Security Information and Event Management (SIEM), Forensics, VPN, Penetration Testing, NIST SP 800-series and FISMA compliance, Assessment & Authorization, Security control assessments, PKI, Data Loss Prevention (DLP), routers and switches.

Provides requirements gathering, analysis and recommendations.

Information Security Analyst - Junior 1 Bachelors

Typically works under the guidance of a lead or senior analyst, or project manager. Has ability to work independently on technical IT tasks and projects and provides relevant expertise to any security project, including but not limited to: Risk Assessments, Vulnerability Scanning, Risk Management, Intrusion Detection and Prevention, Configuration Management, Firewalls, Load Balancers, Security Information and Event Management (SIEM), Forensics, VPN, Penetration Testing, NIST SP 800-series and FISMA compliance, Assessment & Authorization, Security control assessments, PKI, Data Loss Prevention (DLP), routers and switches.

Provides requirements gathering, analysis and recommendations.

Senior Security Tech Writer 5 Bachelors

Gathers information on specific client requirements, reviews existing documentation, conducts interviews, analyzes results and creates new (or edits existing) security documentation to meet client requirements. Works independently utilizing significant relevant experience to write and/or edit reports, manuals, policies, procedures, guidelines, specifications or any other relevant security documentation, following government format requirements.

Security Tech Writer 2 Bachelors

Gathers information on specific client requirements, reviews existing documentation, conducts interviews, analyzes results and creates new (or edits existing) security documentation to meet client requirements. Works in conjunction with senior staff to write and/or edit reports, manuals, policies, procedures, guidelines, specifications or any other relevant security documentation, following government format requirements.

WEB SITE www.compass-federal.com

COMPASS FEDERAL CONSULTING

Penetration Tester - Lead 15 Bachelors

Provides team leadership and expertise to any penetration testing or vulnerability assessment activities, including responsibility for team members, security tool selection, assessment methodology, deliverable creation and debriefings. Has deep expertise in network, web application, High-value asset, Phishing, Wireless and database vulnerability scanning techniques and exploits. Conducts network mapping and asset identification scans, utilizes exploitation techniques and produces reports showing the areas that are vulnerable and the remediation activities the client should take to ensure remediation and risk reduction. Ensures compliance with all applicable NIST Standards. This labor category covers all security related specialty engineering functions under engineering services and all information assurance functions under computer systems development and computer systems support.

Penetration Tester - Senior 8 Bachelors

Provides team leadership and expertise to any penetration testing or vulnerability assessment activities, including responsibility for team members, security tool selection, assessment methodology, deliverable creation and debriefings. Has deep expertise in network, web application, High-value asset, Phishing, Wireless and database vulnerability scanning techniques and exploits. Conducts network mapping and asset identification scans, utilizes exploitation techniques and produces reports showing the areas that are vulnerable and the remediation activities the client should take to ensure remediation and risk reduction. Ensures compliance with all applicable NIST Standards. This labor category covers all security related specialty engineering functions under engineering services and all information assurance functions under computer systems development and computer systems support.

Penetration Tester - Intermediate 5 Bachelors

Typically works under the supervision of Pen Test Lead, Project Manager or Senior team member, providing support for scanning reaction and debriefings. Has relevant expertise in network, application and database vulnerability scanning techniques and exploits, including network and asset mapping, exploit techniques and recommended remediation actions.

Ensures compliance with all applicable NIST Standards. This labor category covers all security related specialty engineering functions under engineering services and all information assurance functions under computer systems development and computer systems support.

LABOR CATEGORY QUALIFICATION EQUIVALENCIES

When considering the qualifications of an individual against the minimum requirements of the labor categories, substitutions for the education and experience requirements may be made as shown in the table below.

Allowable Substitutions of Education versus Experience The minimum education and experience for a labor category will be met when the educational equivalencies in the tables below are considered.

Additional relevant educational achievements in excess of requirements can be substituted for experience requirements:

Required Education for the Labor Category

Actual Education Obtained by the Employee

Additional Years of Experience Credited the Employee

MA/MS Ph.D 3 BA/BS Ph.D 5

BA/BS MA/MS 2

HS/GED BA/BS 4

Additional years of experience in excess of requirements can be substituted for educational requirements:

Required Education for the Labor Category

Actual Education Obtained by the Employee

Additional Years of Experience Needed for Educational Requirements Equivalency

HS/GED Some High School 3 BA/BS Tech-Inst / Military Training /

Associates Degree

BA/BS HS/GED 5

Penetration Tester - Junior 1 Bachelors

Typically works under the supervision of Pen Test Lead, Project Manager or Senior team member, providing support for scanning reaction and debriefings. Has some expertise in network, application and database vulnerability scanning techniques and exploits. Ensures compliance with all applicable NIST Standards. This labor category covers all security related specialty engineering functions under engineering services and all information assurance functions under computer systems development and computer systems support.

For more information on ordering from Federal Supply Schedules