9 - SOW.docx
DOCX document 19 KB Posted
- Attached to
- Red Team Training Federal contract opportunity
- Solicitation number
- N0017820Q6857
View the file
Other files for this federal contract opportunity
| File | Type | Posted |
|---|---|---|
| 9 - SOW.docx | DOCX document | |
| 9 - SF30.pdf | ||
| 9 - SF18.pdf |
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
NAVAL SEA SYSTEMS COMMAND (NAVSEA) RED TEAM (RT) TRAINING
STATEMENT OF WORK (SOW)
1.0 BACKGROUND
The NAVSEA RT requires specific designed training on the proper tactics, techniques and procedures, discussed as tradecraft in the remainder of this document, for National Security Agency (NSA) certified and United States Cyber Command (USCYBERCOM) accredited DOD Red Teams. Currently, there are 10 C&A DOD Red Teams. The NAVSEA Red Team (SEA-RT) is a C&A Red Team and as such, the role of the team is to operate as the adversary to test network defenses implemented throughout the DODIN. Since the DODIN is a unique network environment not found in any other organization, specific tradecraft techniques are implemented to ensure the operators reduce the risk of being identified by DODIN defenders.
| 2.0 | APPLICABLE DOCUMENTS |
| 2.1 | NSA Certification; and |
| 2.2 | USCYBERCOM Accreditation |
3.0 REQUIREMENTS
| 3.1 | The contractor shall provide the unique classes identified and shall be representative on the requirements levied on DOD C&A teams to improve their tradecraft taught to elude DODIN defenders. |
| 3.1.1 | The class shall be representative of the standard training package provided to the Army’s Threat Systems Management Office (TSMO) operators and meets NSA Certification requirements. |
| 3.1.2 | The contractor shall also provide the requirements identified for a practical application-training environment. This environment shall compliment and build upon the requirements outlined in each section and provide operators unique protocols and protections seen in the DODIN. |
| 3.2 | The contactor shall provide the Red Team Apprentice Course for 10 students to include the Job Qualifications Requirements (JQR) documentation for each student or equivalent training course. |
| 3.2.1 | The contractor shall provide the course over a five (5) day period for a total of 40 hours in length. |
| 3.2.2 | The contractor shall provide the virtual range infrastructure. |
| 3.2.3 | The course shall be presented either virtually or at the contractor site in Huntsville, AL., and provide the students the tools required to complete the course. |
| 3.2.4 | The JQR shall, at a minimum, document the learning objectives and goals students must complete to become a qualified apprentice operator. |
| 3.2.5 | The contactor shall also track, certify, and update the JQR as students complete the objectives and goals for the duration of the contract. |
| 3.3 | The contractor shall provide the Red Team Journeyman Course for six (6) students with the Job Qualifications Requirements documentation for each student. |
| 3.3.1 | The contractor shall provide the course over a ten (10) day period for a total of 80 hours in length. |
| 3.3.2 | The contractor shall provide the virtual range infrastructure. |
| 3.3.3 | The course shall be presented either virtually or at the contractor site in Huntsville, AL., and provide the students the tools required to complete the course. |
| 3.3.4 | The course shall, at a minimum, document the learning objectives and goals students must complete to become a qualified apprentice operator. |
| 3.3.5 | The contactor shall also track, certify, and update the JQR as students complete the objectives and goals for the duration of the contract. |
| 3.4 | The contractor shall provide 10 users access to the Battlegrounds Advanced training environment for 365 days. |
| 3.4.1 | The Battlegrounds Advanced training environment shall be operational 99.9% for one year beginning at the contract award. |
| 3.4.2 | The 365-day subscription shall start when the contractor delivers the credentials to the TPOC. |
| 3.4.3 | The contractor shall create, manage, and delete user accounts as requested by the TPOC. |
| 3.4.4 | The contractor shall switch users between scenario-based or class packs as directed by the TPOC. |
| 3.4.5 | The contractor shall provide course specific toolsets/lab environments. |
| 3.4.6 | The contractor shall provide support for adding tools sets (2 requests per month) required by the TPOC during the subscription period. |
| 3.5 | The contractor shall coordinate with the Technical Point of Contact (TPOC) identified below to schedule the courses within 120 days of contract award. |
| 4.0 | GOVERNMENT-FURNISHED PROPERTY/MATERIAL/INFORMATION (GFP/GFM/GFI) |
No Government-furnished property, material, or information will be provided with this contract.
5.0 SECURITY
The performance of this contact is unclassified.
6.0 TRAVEL
No travel is anticipated.
7.0 TECHNICAL POINT OF CONTACT
TPOC information will be provided at time of award.
File details come from the government source that posted it. Updated .