SOW.pdf
PDF 411 KB Posted
- Attached to
- DECIDE Platform Cybersecurity Exercise Federal contract opportunity
- Solicitation number
- 80NSSC24876302Q
About this file
This document is a Statement of Work (SOW) for a DECIDE Platform Cybersecurity Exercise to be provided by the vendor, Norwich University Applied Research Institutes Ltd. The key details are:
The vendor will deliver a customized cybersecurity tabletop exercise utilizing the DECIDE Platform. This includes preplanning meetings with the client, up to two 1-hour training sessions for participants, facilitation of the live exercise, and delivery of an After-Action Report with recommendations within 21 business days. The planning process is expected to take 3-4 months. The exercise will be delivered in-person or virtually, with the option for the client to provide their own facilitation. The related federal contract opportunity is a sole-source solicitation by NASA/NSSC for these services, citing Norwich University Applied Research Institutes Ltd. as the sole provider of the DECIDE Platform Cybersecurity Exercise. The anticipated NAICS code is 541611, and the procurement will be conducted under FAR Parts 12 and 13.
View the file
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Statement of Work
DECIDE Platform Cybersecurity Exercise
DELIVERABLES
Vendor will provide the services described below to create and execute one (1) tabletop exercise utilizing the DECIDE® Platform.
PREPLANNING
• Vendor and Client shall complete the exercise planning and design process in a collaborative partnership.
• Vendor and Client shall hold regular planning meetings that include a discussion of the Client's technical and strategic security initiatives, current decision-making in relation to security practices, specific exercise goals and objectives, existing training/education, and incident response plans.
• Vendor and Client will hold milestone meetings to keep to the timeline agreed upon in the SOW.
TRAINING
• Vendor will provide up to two (2) one-hour DECIDE Platform facilitated training sessions for participants prior to the exercise on a date(s) TBD.
• Vendor will provide the Client exercise Facilitator/Controller training if the Client chooses to do their own facilitation.
EXERCISE
• On a date and time to be determined mutually by the Client and Vendor, Vendor will deliver an in-person or virtual customized DECIDE Cyber Incident Response Exercise for the Client.
• MS Teams or other communications backchannel will be used by the exercise team (Vendor and client trusted agent(s)).
AFTER-ACTION REPORT
Vendor will immediately provide raw data from the exercise to the Client and produce an After Action Report (AAR) with actionable recommendations within 21 business days of exercise execution.
TIMELINE
The planning process will take 3-4 months as dictated by size, scope, and complexity.
DELIVERABLES
• One fully customized cybersecurity exercise
• Planning meetings – milestone and weekly touchpoints
• Live facilitated training (x2) for exercise participants
• MSEL design and upload to DECIDE Platform
• Exercise documentation
• Facilitated in-person or virtual exercise
• Post-exercise raw data reports
• After-Action Report with recommendations
File details come from the government source that posted it. Updated .