MAS - Macnew Consulting LLC - 47QTCA22D005Y

Macnew Consulting LLC || 47QTCA22D005Y

GENERAL SERVICES ADMINISTRATION

Federal Supply Service

Authorized Federal Supply Schedule Price List

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order are available through GSA

Advantage!®, a menu-driven database system. The INTERNET address GSA

Advantage!® is: GSAAdvantage.gov.

Multiple Award Schedule

FSC Group: Information Technology FSC Class: Leave Blank

Contract number: 47QTCA22D005Y

Contract period: March 18,2022- March 17,2027

Contractor:

Macnew Consulting, LLC

10811 Gainsborough Road

Potomac, MD 20854 - 2511

Phone: 510-367-5216 www.macnewconsulting.com

Contract administration source:

Uche Newman

Phone: 510-367-5216

E-mail: uche@macnewconsulting.com

Business size: Small Business

List Socioeconomic status: Small business, Woman Owned business, Women Owned (WOSB), Women Owned (EDWOSB), SBA Certified Small Disadvantaged business, SBA Certified 8(a) Firm

For more information on ordering from Federal Supply Schedules go to the GSA

Schedules page at GSA.gov.

This is the MOST RECENTLY awarded Contractor Initiated Modification and does NOT include any Mass Modifications

Prices Shown Herein are Net (discount deducted) http://www.macnewconsulting.com/ mailto:uche@macnewconsulting.com

TABLE OF CONTENTS

General Contract Details p.1

Customer Information p.3

GSA Offering & SCLS p.6

Company Information p.11

CUSTOMER INFORMATION

1a. Table of awarded special item number(s) with appropriate cross-reference to item descriptions and awarded price(s).

SINs Recovery SIN Title

54151S 54151SRC Information Technology Professional Services

OLM OLMRC Order-Level Materials

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. This price is the Government price based on a unit of one, exclusive of any quantity/dollar volume, prompt payment, or any other concession affecting price. Those contracts that have unit prices based on the geographic location of the customer, should show the range of the lowest price, and cite the areas to which the prices apply. See Page 6

1c. If the Contractor is proposing hourly rates, a description of all corresponding commercial job titles, experience, functional responsibility and education for those types of employees or subcontractors who will perform services shall be provided. If hourly rates are not applicable, indicate “Not applicable” for this item. See Page 6

2. Maximum order: $500,000.00

3. Minimum order: $100

4. Geographic coverage (delivery area). Domestic.

5. Point(s) of production (city, county, and State or foreign country). 10811 Gainsborough Road

Potomac, MD 20854 - 2511

6. Discount from list prices or statement of net price. Basic discount 3% from the awarded commercial price list or GSA Net Prices are shown on the attached GSA Pricelist. Negotiated discount has been applied and the IFF has been added.

7. Quantity discounts. None.

8. Prompt payment terms. Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions. None.

9. Foreign items (list items by country of origin). Not Applicable.

10a. Time of delivery. (Contractor insert number of days.) To Be Determined at the Task Order level.

10b. Expedited Delivery. Items available for expedited delivery are noted in this price list. Contact

Contractor.

10c. Overnight and 2-day delivery. Contact Contractor.

10d. Urgent Requirements. Contact Contractor.

11. F.O.B. point(s). Destination.

12a. Ordering address(es). Same as contractor.

12b. Ordering procedures: For supplies and services, the ordering procedures, information on Blanket

Purchase Agreements (BPA’s) are found in Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment address(es). Same as contractor.

14. Warranty provision. Not Applicable.

15. Export packing charges, if applicable. Not Applicable.

16. Terms and conditions of rental, maintenance, and repair (if applicable). Not Applicable.

17. Terms and conditions of installation (if applicable). Not Applicable.

18a. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable). Not Applicable.

18b. Terms and conditions for any other services (if applicable). Not Applicable.

19. List of service and distribution points (if applicable). Not Applicable.

20. List of participating dealers (if applicable). Not Applicable.

21. Preventive maintenance (if applicable). Not Applicable.

22a. Special attributes such as environmental attributes (e.g., recycled content, energy efficiency, and/or reduced pollutants). Not Applicable.

22b. If applicable, indicate that Section 508 compliance information is available on Electronic and

Information Technology (EIT) supplies and services and show where full details can be found (e.g.

contractor’s website or other location.) The EIT standards can be found at: www.Section508.gov/.

Not Applicable.

23. Unique Entity Identifier (UEI) number. FSA1SS3W41B9

24. Notification regarding registration in System for Award Management (SAM) database. Contractor registered and active in SAM.

http://www.section508.gov/

TERMS AND CONDITIONS APPLICABLE TO INFORMATION TECHNOLOGY (IT)

PROFESSIONAL SERVICES (SPECIAL ITEM NUMBER 54151S)

SIN 54151S Information Technology Professional Services

54151S IT Professional Services and/or labor categories for database planning and design; systems analysis, integration, and design; programming, conversion and implementation support; network services, data/records management, and testing.

NOTE: Subject to Cooperative Purchasing

Cooperative Purchasing: Yes

Set Aside: No

FSC/PSC Code: DA01

Maximum Order: $500,000

NAICS

Number Description Business Size

541511 Custom Computer Programming Services $30 million

541512 Computer Systems Design Services $30 million

541513 Computer Facilities Management Services $30 million

541519 Other Computer Related Services $30 million

Instructions:

1. Specific Instructions for SIN 54151S - Information Technology Professional Services:

* All services shall be billed in arrears in accordance with 31 U.S.C. 3324.

GSA OFFERINGS

SIN Labor Category GSA Price

(w/IFF)

54151S IT Business Analyst $84.04

54151S IT Risk Analyst II $91.88

54151S Information Assurance Specialist $106.81

54151S IT Program Control Specialist $124.48

54151S IT Project Manager $150.04

54151S Information Assurance Analyst IV $162.93

54151S IT Security Specialist III $101.08

54151S IT Security Subject Matter Expert III $171.52

54151S Enterprise Architect III $192.84

54151S IT Security Subject Matter Expert V $247.75

Labor Category Labor Category Description Minimum Education

Minimum Years of Experience

IT Business Analyst

Uses available computer systems resources and personnel to carry out analysis to support management's quest for performance improvement to determine the most useful business solution. Critically evaluates information gathered from multiple sources, reconcile conflicts, decompose highlevel information into details, abstract up from low-level information to a general understanding, and distinguish user requests from the underlying true needs. Bachelor's degree

Three (3) years of related experience.

IT Risk Analyst II

Broad experience and expert understanding of IT Risk Management (Information Security, Business Continuity and Disaster Recovery, and Supply Chain Information Risk Management). Technical experience and expert understanding of: Risk, vulnerability and threat assessments, Third party, cloud and internal risk management, Readiness and compliance assessments , Information security strategy, architecture and framework design, Information security program mplementations, Network security engineering and architecture and Tools and technology implementations (e.g., firewall and application level firewalls, data leakage prevention, digital rights management, IDS / IPS, etc.). Should have a broad understanding and experience with industry standards, frameworks, and regulations including but not limited to: Bachelor's degree

Three (3) years of experience in IT Security.

Education

Minimum Years of Experience

ISO 27000 series, COBIT, NIST SP 800-53, PCI DSS, HIPAA, GLBA, state privacy and data breach notification laws

Information Assurance Specialist

Provides guidance for Information Assurance (IA), including advice on adherence to regulatory requirements, such as Federal Information Security Management Act of 2002 (FISMA). Responsible for interpreting IA requirements using DoD, FISMA, and NIST guidelines. Responsible for policy compliance, internal policy development, and strategic planning. May be responsible for monitoring vulnerability management compliance and requirements communications. Performs IA consulting, assessment, documentation and IA compliance program development.

Supports programs to comply with or follow FISMA, OMB A- 130, NIST Publications, and DoD and agency requirements and guidelines. Prepares and updates Assessments and Authorization packages including System Security Plan (SSP), Information Technology Contingency Plan (ITCP), Information Security Continuous Monitoring Plans (ISCM) Plans and Privacy Impact Assessments (PIA). Prepares and conducts Security Test and Evaluation (ST&E) for supported systems. Analyzes results of ST&E to produce Plan of Action and Milestones (POA&M). Prepares quarterly FISMA compliance reports as required. Performs Security Risk Assessments and supports Continuous Monitoring and Ongoing Authorization Programs. Bachelor's degree

Five (5) years of related experience.

IT Program Control Specialist

Responsible for coordinating and ensuring tasks, technical, schedule, and cost requirements are met. Preparation and analysis of financial statements, development of project schedules, using costaccounting and labor-reporting systems, working knowledge of contract and subcontract management. Proficient in the use of spreadsheets and project management tools. Manages financial and/or administrative aspects of assigned contracts and deliverables. Tracks and validates all client financial information, establishes and maintains master contract files, prepares and monitors status of all deliverables, tracks contract values and reports on Government payments.

Manages task funding reports, revenue preparation and projections for all active task orders. Bachelor's degree

Five years of contract management experience including government contract programs.

IT Project Manager

Serves as point of contact with client on project activities.

Ensures that all required resources including personnel, production standards, IT infrastructure, and facilities are available for project implementation. Responsible for the effective management of funds and personnel and is accountable for the quality and timely delivery of projects.

PMP

Certification + Bachelor's degree or equivalent experience

Six (6) years of related experience.

Information Assurance Analyst

IV

Performs IA consulting, assessment, documentation and IA compliance program development. Supports programs to comply with or follow FISMA, OMB A-130, NIST Publications, and DoD and agency requirements and guidelines. Prepares and updates Assessments and

Bachelor’s degree in a directly related curriculum from

Eight (8) years of related experience.

Education

Minimum Years of Experience

Authorization packages including System Security Plan (SSP), Information Technology Contingency Plan (ITCP), Information Security Continuous Monitoring Plans (ISCM) Plans and Privacy Impact Assessments (PIA). Prepares and conducts Security Test and Evaluation (ST&E) for supported systems. Analyzes results of ST&E to produce Plan of Action and Milestones (POA&M). Prepares quarterly FISMA compliance reports as required. Performs Security Risk Assessments and supports Continuous Monitoring and Ongoing Authorization Programs an accredited institution

IT Security Specialist III

The Security Specialist III may identify or resolve highly complex issues to prevent cyberattacks on information systems or keep computer information systems secure from interruption of service, intellectual property theft, network viruses, data mining, financial theft, or theft of sensitive customer data, allowing business to continue as normal.

The Security Specialist designs, installs, and manages security mechanisms that protect networks and information systems against hackers, breaches, viruses, and spyware.

This individual responds to incidents, investigates violations, and recommends enhancements to plug potential security gaps. Level 3 is competent in subject matter and concepts and may lead individuals assisting in the work. Bachelor's degree

Four (4) years of related experience.

IT Security Subject Matter Expert III

Provides technical and security management services in the area of information systems security, systems security analysis, web application security analysis, IT security evaluations, assessments of IT security controls, documentation support, or database administration.

Advises on IT Assessments and Authorizations (A&A), Continuous Monitoring, Contingency planning/Disaster Recover (DR) and Information System Security Office (ISSO) support services. Leads discussions with senior leadership and government stakeholders to gather and validate requirements, conduct reviews and identify business process improvements. Advises on critical infrastructure decisions. Coordinates and tracks risks, accreditation status and reporting status for all project teams. Possesses extensive experience in reviewing security documentation and architecture and identifying security architecture and implementation gaps, vulnerabilities, and risks; providing advice and guidance in the addressing deficiencies. Has knowledge of Risk Management Framework, Security Control Security Assessments. Possesses ability to apply extensive knowledge of a variety of IT field’s concepts, practices, and procedures. Designs contingency plans of information Systems in order to maintain appropriate levels of protection and meet requirements for minimizing operations impact to a customer's organization. Follows and ensuring compliance with federal security regulations and

Master's degree in Computer Science, Information Systems or related Technical discipline

Eight (8) years of progressively responsible experience in security and risk management, asset security, security engineering, communication and network security, identity and access management, security assessment and testing, security operations, or software development security.

Education

Minimum Years of Experience guidelines while making improvement recommendations to the customer.

Enterprise Architect III

Designs, builds and oversees the implementation of security architectures, security engineering life cycle, infrastructure & network, in support on an organization's security program. Plans, researches and designs robust security architectures for IT projects. Performs vulnerability testing, risk analyses and security assessments. Researches security standards, security systems and authentication protocols. Develops requirements for local area networks (LANs), wide area networks (WANs), virtual private networks (VPNs), routers, firewalls, and related network devices. Designs public key infrastructures (PKIs), including use of certification authorities (CAs) and digital signatures.

Prepares cost estimates and identifies integration issues.

Reviews and approves installation of firewall, VPN, routers, IDS scanning technologies and servers. Defines, implements and maintains enterprise security policies and procedures.

Oversees security awareness programs and educational efforts. Responds immediately to security-related incidents and provide a thorough post-event analysis. Updates and upgrades security systems as needed. Performs architecture review and risk & impact assessment for the critical information assets. Provides technical supervision for (and guidance to) a security team.

Master's degree in Computer Science, Information Systems or related Technical discipline

Ten (10) years of related experience.

Industry recognized Cyber Certification.

IT Security Subject Matter Expert V

Provides technical and security management services in the area of information systems security, systems security analysis, web application security analysis, IT security evaluations, assessments of IT security controls, documentation support, or database administration.

Advises on IT Assessments and Authorizations (A&A), Continuous Monitoring, Contingency planning/Disaster Recover (DR) and Information System Security Office (ISSO) support services. Leads discussions with senior leadership and government stakeholders to gather and validate requirements, conduct reviews and identify business process improvements. Advises on critical infrastructure decisions. Coordinates and tracks risks, accreditation status and reporting status for all project teams. Possesses extensive experience in reviewing security documentation and architecture and identifying security architecture and implementation gaps, vulnerabilities, and risks; providing advice and guidance in the addressing deficiencies. Has knowledge of Risk Management Framework, Security Control Security Assessments. Possesses ability to apply extensive knowledge of a variety of IT field’s concepts, practices, and procedures. Designs contingency plans of information Systems in order to maintain appropriate levels of protection and meet requirements for minimizing operations impact to a customer's organization. Follows and Master's degree

Twelve (12) years of progressively responsible experience in security and risk management, asset security, security engineering, communication and network security, identity and access management, security assessment and testing, security operations, or software development security.

Education

Minimum Years of Experience ensuring compliance with federal security regulations and guidelines while making improvement recommendations to the customer.

Service Contract Labor Standards: The Service Contract Labor Standards (SCLS), formerly known as the Service Contract Act (SCA), is applicable to this contract as it applies to the entire Multiple Award

Schedule (MAS) and all services provided. While no specific labor categories have been identified as being subject to SCLS/SCA due to exemptions for professional employees (FAR 22.1101, 22.1102 and

29 CRF 541.300), this contract still maintains the provisions and protections for SCLS/SCA eligible labor categories. If and / or when the contractor adds SCLS/SCA labor categories to the contract through the modification process, the contractor must inform the Contracting Officer and establish a SCLS/SCA matrix identifying the GSA labor category titles, the occupational code, SCLS/SCA labor category titles and the applicable WD number. Failure to do so may result in cancellation of the contract.

COMPANY INFORMATION

The complexity of security risks is on the rise and becoming more difficult to manage every day. Macnew

Consulting offers an enterprise-wide strategy and services that can help organizations proactively reduce their risk exposure. Macnew Consulting analyzes and manages the current and future risks to systems, infrastructures, information and operations caused by man-made threats and natural hazards.

Macnew Consulting provides innovative, efficient and effective advisory services that improve Business

Support Services in the areas of Information Assurance, Business Continuity Management, and IT

Operations Improvement.