Attachment III - Statement of Work - Task Order 1v4 Final.pdf

Statement of Work:

CGCYBER FY24 Q4 Cyber Training

1.0 Introduction

The United States Coast Guard (USCG) must ensure the security of our cyberspace, maintain superiority over our adversaries, and safeguard our Nation’s critical maritime infrastructure. Continuous cyber security training for our Cyber professionals is a key pillar of maintaining a force ready to accomplish that vision. This task order will provide the known cyber training, exams and annual maintenance certifications for the next two quarters.

2.0 Tasks Required

The contractor must provide all trainings, exams, and annual maintenance fee vouchers listed in section

2.1. Trainings, exams, and annual maintenances certifications must remain available for use without expiring for a period of one year after purchase date. Below are the task areas for this task order:

2.1 Cyber Training Courses, Exams, and Annual Maintenance Certifications

The following trainings must have the option to be taken as virtual-live or on-demand as detailed:

Training/Exam/Annual Maintenance Certification Vendor

Specific Training

Quantity Delivery

CompTIA A+ Course No 8 Virtual-Live CompTIA A+ Exam No 8 Exam Advanced Threat Hunting - Antisiphon No 1 Virtual-Live CompTIA Advanced Security Practitioner (CASP+) Course No 4 Virtual-Live CompTIA Advanced Security Practitioner (CASP+) Exam No 4 Exam ISC2 Certified Cloud Security Professional (CCSP) Course

No 5 Virtual-Live

ISC2 Certified Cloud Security Professional (CCSP) Exam No 5 Exam Certified Information Systems Auditor (CISA) Course No 4 Virtual-Live Certified Information Systems Auditor (CISA) Exam No 4 Exam CISCO Certified Network Associate (CCNA) Course No 1 Virtual-Live CISCO Certified Network Associate (CCNA) Exam No 1 Exam Certified Information Security Manager (CISM) Course No 1 Virtual-Live Certified Information Security Manager (CISM) Exam No 1 Exam Certified Information Systems Security (CISSP) Course No 15 Virtual-Live Certified Information Systems Security (CISSP) Exam No 15 Exam CompTIA Cybersecurity Analyst (CYSA+) Course No 30 Virtual-Live CompTIA Cybersecurity Analyst (CYSA+) Exam No 30 Exam Hack The Box Academy Seat Yes 22 On demand Hack The Box Dedicated Lab Seat Yes 35 On demand Hack The Box Pro-Lab Seat Yes 26 On demand Interactive Disassembler (IDA) Pro Course No 1 Virtual-Live IT Infrastructure Library (ITIL) Foundations Course No 3 Virtual-Live

IT Infrastructure Library (ITIL) Foundations Exam No 3 Exam Magnet Axiom Training Annual Pass (TAP) Yes 15 On demand CompTIA Network+ (NET+) Course No 5 Virtual-Live CompTIA Network+ (NET+) Exam No 5 Exam OFFSEC Enterprise Seat Yes 24 On demand Project Management Professional (PMP) Course No 7 Virtual-Live Project Management Professional (PMP) Exam No 7 Exam Red Team Apprentice Course (RTAC) Yes 5 Virtual-Live Red Team Journeyman Course (RTJC) Yes 3 Virtual-Live CompTIA Security+ (SEC+) Course No 36 Virtual-Live CompTIA Security+ (SEC+) Exam No 36 Exam SpecterOps Red Team Course Yes 7 Virtual-Live

Splunk Education Credits Yes Units

On Demand

ISC2 Annual Maintenance Cert (AMC) No 80 AMC ISACA Annual Maintenance Cert (AMC) No 15 AMC CompTIA Annual Maintenance Cert (AMC) No 45 AMC

- Trainings must include authorized course material such as course book and practice exam, and any standard course material required to successfully complete the course.

2.2 Communications with Program Office Point of Contact and Project Management

The contractor must notify Program Office of any student that does not show or is late for training the day it occurs upon discovering the absence. The contractor must respond to emails within a timely manner between 0800 -1700 Monday through Friday, Eastern Standard/Daylight Time, excluding Federal Holidays.

2.3 Virtual-Live Event Technical Support

The contractor must ensure that the training providers deliver interactive meeting technology, software, and support for large group meetings across the United States for cybersecurity trainings. The training providers must provide technical support in the event students have technical issues with using meeting technology.

2.4 Training Course and Exam Distribution

2.4.1 Virtual-Live Courses: Within 10 days of award, the contractor shall provide an initial schedule of available classes and open seats for each requested course for the period of performance. The final version of the schedule is due within 7 days after the post award kickoff meeting. The contractor is responsible for maintaining an adequate supply of cyber training vouchers and/or relationships with training providers such that the Coast Guard has access to required training within 30 days of the COR submitting a Request for Class (RFC). This RFC identifies the course, required/preferred dates and number of students. After the Coast Guard submits an RFC, the contractor is responsible for working with the training provider to secure the class seats. The class does not have to be exclusively dedicated to training Coast Guard personnel. The vendor is expected to find innovative ways to partner with training providers in order to efficiently maximize use of open seats in existing scheduled training.

2.4.2 On-demand Courses, Exams, and Annual Maintenance Certifications: The on-demand courses, exams and annual maintenance certifications identified in section 2.1 must be available within 30 days of contract award. The contractor must ensure the training provider provides students access to exam vouchers on the first day of the training course’s start date.

2.5 Training Surveys

The contractor must collect training surveys from each of the students at the conclusion of a course.

Survey example is included in Appendix A. These surveys are due to the COR no later than 30 days after completion of the course.

3.0 Monthly Training Summary

The contractor shall provide a monthly training summary to the Program Office. The report must contain:

number of trainings used, remaining trainings available, total number of trainings purchased on the task order, daily attendance of student roster, description of any significant findings and events, trainings that did not meet expectations, problems encountered, suggested solutions, and identify the staff or subcontractors utilized in carrying out the task order.

3.1 Monthly Class Schedule

The contractor shall provide a monthly report showing a schedule of available classes and open seats for each requested course that has training vouchers remaining for the period of performance.

4.0 Place of Performance

Work by the contractor will be performed off-site.

5.0 Normal hours of operation: The contractor must be available for conference calls and meetings with the Program Office staff between 0800 and 1700 Monday through Friday, Eastern Standard/Daylight Time, excluding Federal Holidays.

6.0 Period of Performance.

The period of performance for this task order is 20 September 2024 – 19 March 2025.

7.0 Security

Any contract deliverables developed by the contractor must not be discussed outside the Program Office.

Contractors who are on-site for meetings, interviews, and research will be escorted by government staff.

8.0 Post-Award Kickoff Meeting

The contractor must attend the Post-Award Kickoff Meeting with the Program Office within 10 days of task order award. The meeting will cover the contract objectives, expectations and deliverables, review the training list, and the scheduling process for trainings, exams, and annual maintenance fees.

9.0 Government Acceptance Period

The COR will review deliverables prior to acceptance and provide the contractor with an e-mail that provides documented reasons for non-acceptance. If the deliverable is acceptable, the COR will send an e-mail to the Contractor notifying that the deliverable has been accepted.

The COR will have the right to reject or require correction of any deficiencies found in the deliverables that are contrary to the information contained in the Contractor’s accepted proposal. In the event of a rejected deliverable, the Contractor will be notified in writing by the COR of the specific reasons for rejection. The Contractor may have an opportunity to correct the rejected deliverable and return it per delivery instructions. The COR will have 3 business days to review deliverables and make comments.

The Contractor must have 3 business days to make corrections and redeliver.

10.0 Report Deliverables

ITEM

SOW

REFERENCE

DELIVERABLE / EVENT DUE BY

DISTRIBUTION

1 3.0 Monthly Training Summary

Monthly, NLT the 5th

Contracting Officer's Representative & Contracting Officer

2 2.5 Training Surveys 30 days after end of course

Contracting Officer's Representative

3 3.1 Class Schedule Monthly, NLT the 5th Contracting Officer's Representative

4 3.1 Initial Class Schedule

Draft: 10 days after TO award Final: 7 days after post award kickoff

Contracting Officer's Representative

Appendix A: Training Survey Format