NCCS Industry Day Slides FINAL 03_22_23.pptx

DHS Network Operations Security Center (NOSC) Network, Cloud, and Cybersecurity Services (NCCS) Industry Day March 22, 2023 11:30 a.m. – 1:00 p.m.

Hosted by DHS:

Office of Procurement Operations & Office of the Chief Information Officer Disclaimer: Information contained in this briefing is subject to change. Please review policy before proceeding with any action.

OFFICE OF PROCUREMENT OPERATIONS

Empower • Collaborate • Innovate • Procure Notes: Font sizes are recommended. However, PowerPoint will automatically adjust font size to fit content, as needed.

Welcome

Tisha Blue-Warren Office of Procurement Operations Industry Liaison

NCCS Industry Day Agenda

5 Minute Break

Rules of Engagement The information presented today is for informational purposes only.

This presentation does not constitute a request for quotes or proposals.

This presentation does not constitute a final version of the Government’s requirement and is not binding.

Please put your questions in the Q&A pod.

Any answers provided during this presentation may be subject to change.

Anticipate that the Industry Day slides and Q&As will be posted to Sam.gov NLT COB Tuesday, March 28, 2023.

DHS OCIO IT Operations Directorate Overview Chris Granger, Executive Director DHS OCIO Overview Executive’s Intent

NCCS Purpose and Overview Contract Purpose:

Procure the full range of program management, systems engineering and technical assistance, systems operations and maintenance, and other professional support services for the DHS information enterprise Wide Area Network (WAN) and Homeland Security Enterprise Network (HSEN) network, cloud/platform and critical system and application, and cybersecurity monitoring and analysis, incident management and coordination (including cybersecurity incident handling and incident response), and alert and notification functions for the expanding DHS NOSC and for select DHS components

Scope includes working with existing DHS component NOCs/SOCs (or NOSCs) and providing a flexible and scalable support model to accommodate potential further alignment and consolidation of additional operations center requirements in the DHS NOSC

Legacy DHS HQ / Information Enterprise Governance

DHS NOSC CONOPs Roadmap

NCCS Objectives Primary Objectives:

Evolve the DHS NOSC to build a best-in-class service node that meets DHS Cybersecurity Provider (CSP) and industrial doctrinal Center of Excellence service maturity standards Re-define the DHS HQ NOSC as the central hub of IT Service Management for DHS OCIO for all network infrastructure (WAN and select LAN); platform (including cloud), system, and application; and cybersecurity services for the DHS Homeland Security Enterprise Network (HSEN) at all classification levels and enclaves Unclass/SBU/CUI (A-LAN), Secret (B-LAN/HSDN), Top Secret (C-LAN), and D-LAN (SAP) Implementation Objectives:

Streamline functions and services by: elimination of redundant or overlapping services; synchronization and alignment of business processes; and consolidation of operating locations Modernize operations by: implementing a Common Operating Picture via unified dashboards and standardized platforms and tools; defining standardized (and scalable/variable) service support, cost, and security control catalogs; and enhanced automation of business functions and integration across technical platforms

NCCS Statement of Objectives Structure Task 1: Program Management Task 1.1: Staffing Objectives Task 1.2: Transition Planning and Management Objectives Task 1.3: PMO Support Objectives Task 1.3.1: NOSC Capability and Process Management Objectives Task 1.3.2: Service Delivery Support Objectives Task 1.3.3: Data Analytics and Performance Metrics Objectives Task 1.3.4: Knowledge Management Objectives Task 1.3.5: Data Call and Acquisition Support Objectives Task 1.3.6: Stakeholder Relationship and Service Management Support Objectives Task 1.3.7: Communications Support Objectives Task 1.3.8: Project Management Support Objectives

Task 1: Program Management (Continued) Task 1.3.9: Strategic Network Resilience and Security Objectives DHS CSP Program Support Cyber Risk Management and Security Modernization Support Zero Trust Implementation Network, Cloud/Platform, and Cybersecurity Tool Lifecycle Support Task 2: Monitoring & Analysis (M&A) and Incident Response Task 2.1: M&A and Incident Response Objectives Task 2.2: Network Operations Objectives Task 2.3: Change and Configuration Management Support Objectives Task 2.4: Service Delivery Implementation Objectives Task 2.5: Log Management and Analysis Support Objectives Task 2.6: Incident Assessment and Response Support Objectives Task 2.7: Email Security Objectives

Task 2: Monitoring & Analysis (M&A) and Incident Response (Continued) Task 2.8: Cybersecurity Threat Intelligence Support Objectives Task 2.9: Attack Sensing & Warning Objectives Task 2.10: Network Cybersecurity Infrastructure Content Development Objectives Task 2.11: Threat Hunting Objectives Task 2.12: Cyber Forensics and Malware Analysis Support Objectives Task 2.13: Evidence Management Objectives

Task 3: HSEN Tier 3 Engineering and O&M Support Task 3.1: HSEN Network Infrastructure Task 3.2: HSEN Cybersecurity Infrastructure Task 3.3: (Optional) SME Support

Task 4: Field Engineering Technical Services Fly-away / remote capability Flexible, scalable model

Vendor proposes Performance Work Statement with SLAs / KPIs / Metrics that are designed to achieve government objectives and improve HSEN resilience

DHS High-Level Suitability Process Ron Lafond, DHS NOSC Operations / NCCS COR Selection: Applicant selected for position; e-QIP completion; forms submission; and Fingerprinting

Checks: Criminal history; Financial history; Citizenship; previously completed investigations

Review: e-QIP acceptability (legibility, accuracy, completeness); Issue Resolution

EOD Decision: Favorable decision an applicant can start; Unfavorable decision an applicant cannot start

Investigation: Scheduled; field work completed; report of investigation back to DHS

Final Decision: Favorable decision an applicant continues to work; Unfavorable decision an applicant must be removed from contract

High Level Acquisition Strategy Gregory Clark, Office of Procurement Operations (OPO) Requirement Overview:

Base Year: One Year with Nine (9) Twelve-Month Option Years Transition-In: 6 Months Competition: Full and Open Phased Solicitation with Down-select Phase I – TS Facility Clearance, Mandatory Down-select Phase II – Proposal Evaluation Mix of T&M, LH, and FFP CLINs / Sub-CLINs Sub-contracting Goals

Proposed Evaluation Factors Phase II (In Order of Importance) Technical Approach Management Approach and Staffing Plan (to include key personnel) Past Performance Price

Notional Timeline Nicole Belanger, OPO

Release Draft SOO for Industry Comment

April 2023 Vendor One-on-One Meetings; Feedback on SOO to Government Revised SOO, Draft Solicitation Released

May 2023 Industry Questions Solicitation Finalized

Notional Timeline Nicole Belanger, OPO

Phase 1 Responses Due Mandatory Down-Select

July 2023 Phase 2 Participants Invited Final Proposal Submissions Due

August 2023 Contract Awarded

Q&A Session - Panel Gregory Clark, Contracting Officer, OPO Dustin Goetz, Program Manager, DHS HQ OCIO ITOD Ahmad Gharib, NOSC Branch Chief, DHS HQ OCIO ITOD Ron Lafond, DHS HQ OCIO ITOD NOSC Operations Manager / COR

Q&A Session - Panel Question 1. Is this a new requirement?

Question 2. What is the acquisition strategy? What are the next steps?

Question 3. Are there any opportunities for small businesses that you feel can meet the entire NOSC requirement(s)?

Question 4. Is there a timeline for this solicitation and whether this will be a full and open competition?

Question 5. Has there been any consideration into a multiple award type BPA or IDIQ that could include and involve some Small Business awards?

Q&A Session – Panel (Continued) Question 6. Some colleagues in industry are positing that the DHS NCCS requirement may get “broken up” and the DHS components will be moving forward with their own CND/SOC solution acquisitions. Do you know if it is possible for the DHS NCCS contract to be “broken up”?

Break (5 Minutes)

Q&A Session – Chat Pod Gregory Clark, Contracting Officer OPO HQ OCIO IT Operations Directorate

Q&A Pod Questions Question 1 Question 2 Question 3.

Question 4.

Question 5.

Question 6.

Question 7.

Question 8.

Question 9.

Question 10

Thank You for Attending the

DHS NOSC NCCS

Industry Day!

image2.jpeg image4.png image5.png image6.png image7.png image8.png image9.png image1.jpeg