MAS - RSI Systems Inc. - 47QTCA24D007A

GENERAL SERVICES ADMINISTRATION FEDERAL SUPPLY SERVICE

AUTHORIZED FEDERAL SUPPLY SCHEDULE PRICE

LIST

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order is available through GSA Advantage!™, a menu-driven database system. The INTERNET address for GSA Advantage!™ is:

http://www.GSAAdvantage.gov.

Schedule Title: Multiple Award Schedule Federal Supply Group: Information Technology Highly Adaptive Cybersecurity Services

Contract Number: 47QTCA24D007A

Contract Period: April 1, 2024 through March 31, 2029

For more information on ordering from Federal Supply Schedules click on the GSA Schedules link at www.gsa.gov

Contractor: RSI Systems, Inc 10531 4S Commons Drive Suite 527 San Diego, CA 92127

Business Size: Minority-Owned Business, Woman Owned Small Business and Asian- Pacific American

Telephone Number: 858-999-3030 (Office)

Website: https://www.rsisystems.com

E-mail: john@rsisecurity.com

Contract Administration: John Shin, Managing Director http://www.gsaadvantage.gov/ http://www.gsa.gov/

CUSTOMER INFORMATION:

1a. Table of Awarded Special Item Number(s):

SIN SIN

Description

54151HACS Highly Adaptive Cybersecurity Services OLM Order-Level Materials (OLMs)

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. N/A

1c. If the Contractor is proposing hourly rates a description of all corresponding commercial job titles, experience, functional responsibility, and education for those types of employees or subcontractors who will perform services shall be provided. Please see Labor Category Descriptions/Qualifications below starting on page 5.

2. Maximum Order: $500,000.00

3. Minimum Order: $100.00

4. Geographic Coverage (delivery area): All 48 States and District of Columbia

5. Point(s) of production (city, county, and state or foreign country): Same as company address

6. Discount from list prices or statement of net price: Government net prices (discounts already deducted).

7. Quantity discounts: 2% discounts off GSA Rates on single orders at $250,000 or greater

8. Prompt payment terms: 2% discount if payments made within 10 days otherwise Net 30 Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions

9. Foreign items (list items by country of origin): None

10a. Time of Delivery (Contractor insert number of days): Specified on the Task Order

10b. Expedited Delivery. Contact Contractor

10c. Overnight and 2-day delivery. Contact Contractor

10d. Urgent Requirements. Contact Contractor

11. F.O.B Points(s): Destination

12a. Ordering Address(es): Same as Contractor

12b. Ordering procedures: For supplies and services, the ordering procedures, information on Blanket Purchase Agreements (BPA’s), are found in Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment address(es): Same as company address

14. Warranty provision: N/A

15. Export Packing Charges (if applicable): N/A

16. Terms and conditions of rental, maintenance, and repair (if applicable): N/A

17. Terms and conditions of installation (if applicable): N/A

18. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable): N/A

19. Terms and conditions for any other services (if applicable): N/A

19a. List of service and distribution points (if applicable): N/A

20. List of participating dealers (if applicable): N/A

21. Preventive maintenance (if applicable): N/A

22a. Environmental attributes, e.g., recycled content, energy efficiency, and/or reduced pollutants:

N/A

22b. If applicable, indicate that Section 508 compliance information is available on Electronic and Information Technology (EIT) supplies and services and show where full details can be found (e.g. contactor’s website or other location.) The EIT standards can be found at: N/A

23. Unique Entity Identification Number: FPA2A5QB2JN6

24. Notification regarding registration in System for Award Management (SAM): SAM registration is active and current.

Final Pricing: The rates shown below include the Industrial Funding Fee of 0.75%.

SIN(s) Labor Category 1 April 2024 to 31 March

1 April 2025 to 31 March

1 April 2026 to 31 March

1 April 2027 to 31 March

1 April 2028 to 31 March

54151HACS

Project Manager

$114.86 $117.73 $120.68 $123.69 $126.78

54151HACS

Chief Information Security Officer

$184.53 $189.15 $193.87 $198.72 $203.69

54151HACS

Cybersecurity Analyst III

$124.69 $127.80 $130.99 $134.27 $137.62

54151HACS

Cybersecurity Analyst II

$117.70 $120.64 $123.66 $126.75 $129.92

54151HACS

Cybersecurity Analyst I

$103.74 $106.33 $108.99 $111.71 $114.50

54151HACS

Senior Penetration Tester

$116.71 $119.63 $122.62 $125.68 $128.83

54151HACS

Penetration Tester

$103.74 $106.33 $108.99 $111.71 $114.50

54151HACS

Senior Security Assessor

$184.53 $189.15 $193.87 $198.72 $203.69

54151HACS

Security Assessor

$129.67 $132.92 $136.24 $139.65 $143.14

54151HACS

Technical Writer

$159.60 $163.59 $167.68 $171.87 $176.16

RSI Systems, Inc.

GSA Contract MAS Schedule

Labor Category Descriptions/Qualifications

Commercial Job Title: Project Manager

Minimum level of experience - Three (3) years in every increasing level of responsibility in cyber security projects.

Functional Description - Oversees all aspects of a specific cyber security project, leading a team on projects or a significant segment of large and complex projects. Analyze new and complex project-related problems and create innovative solutions that normally involve the schedule, technology, methodology, tools, solution components, and financial management of the project. Provide applications systems analysis and long and short-range plans for application selection, budgeting, systems development, systems maintenance, and production activities for necessary support resources.

Minimum education - Bachelor’s degree in computer sciences or information technology. PMP and CISSP highly desired.

Commercial Job Title: Chief Information Security Officer (CISO) Minimum Experience: Ten (10) years of experience in various levels of Information Security. Three years of recent experience functioning as a CISO.

Functional Responsibilities: The Chief Information Security Officer is responsible for determining enterprise information security standards. Develops and implements information security standards and procedures. Provides tactical information security advice and examining the ramifications of new technologies. Ensures that all information systems are functional and secure.

Minimum Education: Bachelor’s degree in Information Technology required Master Degree highly desirable. Processes a CISSP certification.

Commercial Job Title: Cybersecurity Analyst III Minimum level of experience – Five (5) years in cyber security projects focusing security assessments and risk management for enterprise networks.

Functional Description – Provides SME-level support assessing and reviewing the cybersecurity posture of enterprise networks. Directly engages with system stakeholders and leadership to ensure systems have been secured and are ready for assessment. Completes raw results analysis and reports on all security relevant findings, risk, and potential Plan of Action and Milestone (POA&Ms).

Minimum education - Bachelor’s degree in computer sciences or information technology. One or more of the following certifications is required: CISSP, GCIH, CEH.

Commercial Job Title: Cybersecurity Analyst II Minimum level of experience – Three (3) years in cyber security projects focusing security assessments and risk management for enterprise networks.

Functional Description – Provides support assessing and reviewing the cybersecurity posture of enterprise networks. Directly engages with system stakeholders and leadership to ensure systems have been secured and are ready for assessment. Completes raw results analysis and reports on all security relevant findings, risk, and potential Plan of Action and Milestone (POA&Ms).

Minimum education - Bachelor’s degree in computer sciences or information technology. One or more of the following certifications is required: CISSP, GCIH, CEH, Sec+.

Commercial Job Title: Cybersecurity Analyst I

Minimum level of experience – One (1) year experience in cyber security projects focusing security assessments and risk management for enterprise networks.

Functional Description – Provides support assessing and reviewing the cybersecurity posture of enterprise networks. Directly engages with system stakeholders and leadership to ensure systems have been secured and are ready for assessment. Completes raw results analysis and reports on all security relevant findings, risk, and potential Plan of Action and Milestone (POA&Ms) with mitigation strategies.

Minimum education - Bachelor’s degree in computer sciences or information technology. One or more of the following certifications is required: CISSP, GCIH, CEH, Sec+.

Commercial Job Title: Senior Penetration Tester Minimum level of experience – Five (5) years in Penetration Testing experience focusing exploiting, evading, pivoting through an enterprise network.

Functional Description – Provides SME-level support using and implementing Tools, Tactics, and Procedures (TTPs) consistent with cyber adversaries. The operator uses tools such as Kali Linux, Metasploit, and other exploitation frameworks to gain and maintain access of a target environment. The lead operator reviews testing results and completes a formal report and out-briefing for target leadership, including potential mitigation strategies.

Minimum education - Bachelor’s degree in computer sciences or information technology. One or more of the following certifications is required: CISSP, GPEN, GWAPT, OSCE, OSCP, CEH.

Commercial Job Title: Penetration Tester Minimum level of experience – Three (3) years in Penetration Testing experience focusing exploiting, evading, pivoting through an enterprise network.

Functional Description – Provides support using and implementing Tools, Tactics, and Procedures (TTPs) consistent with cyber adversaries. The operator uses tools such as Kali Linux, Metasploit, and other exploitation frameworks to gain and maintain access environment. The lead operator reviews testing results and completes a formal report and out-briefing for target leadership, including potential mitigation strategies.

Minimum education - Bachelor’s degree in computer sciences or information technology. One or more of the following certifications is required: CISSP, GPEN, GWAPT, OSCE, OSCP, CEH.

Commercial Job Title: Senior Security Assessor Minimum level of experience – Five (5) years in cyber security projects focusing on vulnerabilities and protecting high value assets.

Functional Description – Supports testing, test plan development, project management, contract administration, audit and other assessment functions throughout the engagement. Performs supporting business functions and content development to support any other team members working on the project.

Records the results of a penetration test and documents recommendations to improve the security of the applications. Understanding of full scope testing methodologies, including: enumeration, exploitation, evasion, pivoting, targeting, exfiltration.

Minimum education - Bachelor’s degree in computer sciences or information technology. One or more of the following certifications is required: CISSP, GWAPT, CEH, or OSCP.

Commercial Job Title: Security Assessor Minimum level of experience – Two (2) years in cyber security projects system focusing on vulnerabilities and protecting high value assets.

Functional Description – Supports scanning, scanning plan development, project management, contract administration, audit and other assessment functions throughout the engagement. Performs supporting business functions and content development to support any other team members working on the project. Records the results of a scans and documents recommendations to improve the security of the applications. Maintains any tools or platforms required to accomplish the scanning effort.

Minimum education - Bachelor’s degree in computer sciences or information technology. One or more of the following certifications is required: CISSP, GWAPT, CEH, GCIH or OSCP.

Commercial Job Title: Technical Writer Minimum level of experience – Four (4) years in cyber security projects system focusing documenting results and presenting the results to clients.

Functional Description: Gathers, analyzes and composes technical information. Conducts research and ensures the use of proper technical terminology. Translates technical information into clear, readable documents to be used by technical and non- technical personnel. Assists in collecting and organizing information required for preparation of user's manuals, training materials, installation guides, proposals, and reports. Edits functional descriptions, system specifications, user’s manuals, special reports, or any other customer deliverables and documents.

Minimum education - Bachelor’s degree in computer sciences, Business, English or information technology.