MAS - 8 Consulting LLC - 47QTCA24D00CD

GENERAL SERVICES ADMINISTRATION FEDERAL SUPPLY SERVICE

AUTHORIZED FEDERAL SUPPLY SCHEDULE PRICE LIST

On-line access to contract ordering information, terms and conditions, up-to-date pricing, and the option to create an electronic delivery order is available through GSA Advantage!™, a menu- driven database system. The INTERNET address for GSA Advantage!™ is: http://www.GSAAdvantage.gov.

Schedule Title: Multiple Award Schedule Federal Supply Group: Highly Adaptive Cybersecurity Services (HACS)

Contract Number: 47QTCA24D00CD

Price list current as of Mass Modification #21

Contract Period: July 8, 2024 through July 7, 2029

For more information on ordering from Federal Supply Schedules click on the GSA Schedules link at www.gsa.gov

Contractor: 8 Consulting, LLC 1263 North Buchanan Street Arlington, VA 22205

Business Size: SBA HUBZone Certified

Website: www.8consultingllc.com

E-mail: john.wouters@8consultingllc.com

Contract Administration: JohnWouters, CEO

CUSTOMER INFORMATION:

1a. Table of Awarded Special Item Number(s):

1b. Identification of the lowest priced model number and lowest unit price for that model for each special item number awarded in the contract. N/A

1c. If the Contractor is proposing hourly rates a description of all corresponding commercial job titles, experience, functional responsibility, and education for those types of employees or subcontractors who will perform services shall be provided. Please see Labor Category Descriptions/Qualifications below starting on page 6.

2. Maximum Order: $500,000.00

3. Minimum Order: $100.00

4. Geographic Coverage (delivery area): Domestic

5. Point(s) of production (city, county, and state or foreign country): Same as company address

6. Discount from list prices or statement of net price: Government net prices (discounts already deducted).

7. Quantity discounts: 1% for tasks over $2,000,000

8. Prompt payment terms: NET 30. Information for Ordering Offices: Prompt payment terms cannot be negotiated out of the contractual agreement in exchange for other concessions

9. Foreign items (list items by country of origin): None

10a. Time of Delivery (Contractor insert number of days): Specified on the Task Order

10b. Expedited Delivery. Contact Contractor

10c. Overnight and 2-day delivery. Contact Contractor

10d. Urgent Requirements. Contact Contractor

11. F.O.B Points(s): Destination

12a. Ordering Address(es): Same as Contractor

12b. Ordering procedures: For supplies and services, the ordering procedures, information on Blanket Purchase Agreements (BPA’s), are found in Federal Acquisition Regulation (FAR) 8.405-3.

13. Payment address(es): Same as company address

14. Warranty provision: N/A

15. Export Packing Charges (if applicable): N/A

16. Terms and conditions of rental, maintenance, and repair (if applicable): N/A

17. Terms and conditions of installation (if applicable): N/A

18. Terms and conditions of repair parts indicating date of parts price lists and any discounts from list prices (if applicable): N/A

19. Terms and conditions for any other services (if applicable): N/A

19a. List of service and distribution points (if applicable): N/A

20. List of participating dealers (if applicable): N/A

21. Preventive maintenance (if applicable): N/A

22a. Environmental attributes, e.g., recycled content, energy efficiency, and/or reduced pollutants: N/A

22b. If applicable, indicate that Section 508 compliance information is available on Electronic and Information Technology (EIT) supplies and services and show where full details can be found (e.g. contactor’s website or other location.) The EIT standards can be found at: N/A

23. Unique Entity Identification Number: NH98BTLDU1R3

24. Notification regarding registration in System for Award Management (SAM): SAM registration is active and current.

Final Pricing: The rates shown below include the Industrial Funding Fee of 0.75%.

SIN(s)

Labor Category

July 8, 2024 to July 7, 2025

July 8, 2025 to July 7, 2026

July 8, 2026 to July 7, 2027

July 8, 2027 to July 7, 2028

July 8, 2028 to July 7, 2029

8 Consulting, LLC GSA Contract MAS Schedule Labor Category Descriptions/Qualifications

Cybersecurity Program Manager

Minimum Years Experience: Seven (7) years of progressively responsible experience in Government contracting environment. Two years (of the required six years) in managing large complex cybersecurity related projects including subordinate groups in diverse locations with demonstrated capability in the overall management of cyber contracts of similar type or complexity.

Minimum Education: Bachelor’s degree in a recognized Computer Sciences or Information Security, business or other related discipline.

Functional Responsibilities: Serves as the contract manager and administrator over the entire cyber program. Acts as the primary interface and point of contact with Government project authorities and representatives on technical and contract administration issues. Manages and controls financial and administrative aspects of the project with respect to contract requirements, enforces work standards, and assigns schedules. Cybersecurity Program Manager provides expertise in the areas of cybersecurity strategy, selection of cybersecurity personnel, assessment of cybersecurity tooling, project planning, implementation, and continuous process improvement. Maintains program level oversight for cybersecurity projects in the areas of High Value Asset Assessments, Risk and Vulnerability Assessments, Penetration Tests, Incident response ongoing efforts, and Cyber Threat Hunt projects.

Cybersecurity Project Manager

Functional Responsibilities: Serves as the central point of contact for delivery of cybersecurity projects and interfaces with system stakeholders. Analyzes and identifies standards, security requirements, estimated costs, and schedules. Coordinates development, quality assurance, configuration management, documentation support, software maintenance, and daily supervision of subordinates. Participates in the selection and day to day management of contract cybersecurity personnel, manages assessment of cybersecurity tooling and solutions, Prepares reports and delivers briefings on the status of task assignments to contract management personnel and technical points of contact. Reviews work of subordinates, resolves discrepancies, prioritizes work, and accommodates changes. Specializing cybersecurity strategy, project planning, implementation, and continuous process improvement.

Cybersecurity Technical Writer/Editor

Minimum Years Experience: Three (3) years professional experience in a position requiring development of structured written materials and visual aids.

Minimum Education: Bachelor’s degree in information systems, management, mathematics, engineering, or related field.

Functional Responsibilities: Writes and prepares cybersecurity policy and technical documentation using outlines and resource material provided by functional analysts and computer personnel. Consolidates, formats, requires and edits documentation written by technical personnel. Interprets documentation standards and instructions listed in the Statement of Work and produces documents that conform to instructions. Applies knowledge of cybersecurity related standards and terms to policies and publications. Verifies that documentation conforms to overall security standards and contractual requirements.

Cybersecurity Senior Systems Engineer

Functional Responsibilities: Applies knowledge of cybersecurity risk management framework to provide oversight, management and reporting of Assessment and Authorization efforts. Experience implementing risk and vulnerability assessment, control assessment and incident response. Implement security procedures and ensure compliance with government and IT security policies.

Cybersecurity System Manager

Minimum Years Experience: Six (6) years of experience in defining security programs or processes for the protection of sensitive or classified information, with an emphasis on PHI.

Minimum Education: Bachelor’s Degree in computer science, information systems management, mathematics, engineering, or related field.

Functional Responsibilities: Analyzes and defines security requirements for information protection. Identifies and develops security policies for entire programs and collections of system with an emphasis on the Risk Management Framework. Examines the sensitivity of information, performs vulnerability and risk assessments on the basis of defined sensitivity and information flow.

Cybersecurity SME Analyst

Minimum Years Experience: Three (3) years, with at least two years (of the required three years) of experience in specific subject matter expertise.

Minimum Education: Bachelor’s degree in a recognized technical, engineering, scientific, managerial, business, or other related discipline.

Functional Responsibilities: Subject matter expert for the identification, development and prioritization of cybersecurity operations requirements, processes, procedures, and governing laws such as the Privacy Act, FISMA, and NISPOM. Manages, develops, and implements the federal Risk Management Framework(RMF). Perform assessment and authorization activities including risk and vulnerability assessment, incident response, control assessments, and configuration management. Gathers and organizes technical information about an organization's mission goals and needs, existing products, and ongoing programs in area of expertise.

Cybersecurity SME Analyst II

Functional Responsibilities Subject matter expert for the identification, development and prioritization of cybersecurity operations requirements, processes, procedures, and governing laws such as the Privacy Act, FISMA, and NISPOM. Manages, develops, and implements the federal Risk Management Framework (RMF). Perform assessment and authorization activities including risk and vulnerability assessment, incident response, control assessments and configuration management. Gathers and organizes technical information about an organization's mission goals and needs, existing products, and ongoing programs in area of expertise.

Cybersecurity SME Analyst III

Minimum Years Experience: Seven (7) years, with at least four years (of the required seven years) of experience in cybersecurity related subject matter expertise.

Minimum Education: Bachelor’s degree in a recognized technical, engineering, scientific, managerial, business, or other related discipline.

Functional Responsibilities:

Subject matter expert for the identification, development and prioritization of cybersecurity operations requirements, processes, procedures, and governing laws such as the Privacy Act, FISMA, and NISPOM. Manages, develops, and implements the federal Risk Management Framework (RMF). Perform assessment and authorization activities including risk and vulnerability assessment, incident response, control assessments and configuration management. Gathers and organizes technical information about an organization's mission goals and needs, existing products, and ongoing programs in area of expertise.

Cybersecurity SME Engineer

Functional Responsibilities:

Subject matter expert on specific cybersecurity technologies, tactics. techniques and procedures in support of penetration, threat hunt and/or incident response activities Designs, develops, engineers, evaluates and implements cybersecurity solutions in accordance with requirements. Responsible for the examination of security objectives, integration and implementation systems, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security procedures, tools, programs, and policies such as FISMA, and NISPOM.

Cybersecurity SME Engineer II

Subject matter expert on specific cybersecurity technologies, tactics. techniques and procedures in support of penetration, threat hunt and/or incident response activities Designs, develops, engineers, evaluates and implements cybersecurity solutions in accordance with requirements. Responsible for the examination of security objectives, integration and implementation systems, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security procedures, tools, programs, and policies such as FISMA, and NISPOM.

Cybersecurity SME Engineer III

Minimum Years Experience: Seven (7) years, with at least four years (of the required seven years) of experience in cybersecurity related subject matter expertise.

Minimum Education: Bachelor’s degree in a recognized technical, engineering, scientific, managerial, business, or other related discipline.

Functional Responsibilities: Subject matter expert on specific cybersecurity technologies, tactics. techniques and procedures in support of penetration, threat hunt and/or incident response activities. Designs, develops, engineers, evaluates and implements cybersecurity solutions in accordance with requirements Designs, develops, engineers, evaluates and implements compliant solutions to requirements. Responsible for the examination of security objectives, integration and implementation systems, networks, and data through the planning, analysis, development, implementation, maintenance, and enhancement of information systems security procedures, tools, programs, and policies such as FISMA, and NISPOM.

Cybersecurity SME II

Minimum Years Experience: Three (3) years of experience in defining security programs or processes for the protection of sensitive or classified information.

Minimum Education: Bachelor’s degree in computer science, information systems management, mathematics, engineering, or related field.

Subject matter expert in the area of risk and vulnerability assessment, incident response, configuration management, control assessments, and disaster recovery. Conduct analysis and define security requirements for information system protection. Defines and develops security policies for entire programs and collections of system. Analyzes the sensitivity of information, performs vulnerability and risk assessments on the basis of defined sensitivity and information flow. Manages security teams.

Cybersecurity SME III

Minimum Years Experience: Six (6) years of experience in defining security programs or processes for the protection of sensitive or classified information.

Minimum Education: Bachelor’s degree in computer science, information systems management, mathematics, engineering, or related field.

Functional Responsibilities: Subject matter expert in the area of risk and vulnerability assessment, incident response, configuration management, control assessments, and disaster recovery. Conduct analysis and define security requirements for information system protection. Defines and develops security policies for entire programs and collections of system. Analyzes the sensitivity of information, performs vulnerability and risk assessments on the basis of defined sensitivity and information flow. Manages security teams.

image1.jpeg