A21-Appendix E S20-0046 Cyber Readiness Services - Task Order One.pdf

PDF 392 KB Posted

Attached to
S20-0046 Cyber Readiness
Solicitation number
W912HQ-20-R-0007
Issued by

View the file

Other files

Show all 11

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

Task Order One for IDIQ Solicitation W912HQ-20-R-0007 S20-0046-Cyber Readiness Services

1. IDIQ Task(s) invoked and TO-specific details: PWS para 3.25 (Conduct Cyber Readiness

Expert Evaluation) POP: 3-4 weeks commencing at award (presumably early Aug) Scope: Enterprise-level document review, to ensure USACE CCRI-related document follow DOD and Army best-practices Variable Tasks: Contractor Shall

Review and compare USACE CCRI-related plans, processes, procedures, and other documentation (approx. 84 documents) with DOD Security Technical Implementation Guides (STIGs) and Security Requirements Guide (SRG) mandated documentation o Include 9 of the 12 CCRI Technology areas (all except Traditional Security, Cross- Domain Solutions (CDS), and Releasable Space (REL) o Prepare list of all required documentation mentioned/required by STIGS/SRG for the technologies listed (except for Traditional Security STIG).

o Identify all missing or redundant documents IAW CCRI best practices o Document how to improve gaps between requirements and USACE documentation and areas that need improvement to reach DOD best practices o Provide recommended improvements to Government for approval o Make approved changes to documentation and submit to GOV POCs for approval.

Make corrections for approval.

Place of Performance: Virtual (from CTR premises) No travel required. Meetings conducted virtually.

Hours of work: Contracts and meetings with USACE POCs is expected to take place during normal USACE business hours of 0700-1730 EST on Mon – Friday except on holidays and when the Government facility/installations are closed due to local or national emergencies.

Security Clearance Required: UNCLASSIFIED/FOUO

KSAs required: (from Solicitation PWS Table 4.5): Team Lead and specialists qualified for above tasks

GFE: GOV provides virtual machine equivalent (referred to as CAN-PC disc) and CAC cards for issue to contractors. Contractor systems must have CAC and DVD readers, two-factor authentication, and full disk encryption for data-at-rest. Contractors must also have capability to provide static IP address for systems they use.

References:

JFHQ-DODIN for CCRI Program Documentation (CAC Required):

https://intelshare.intelink.gov/sites/jfhq-dodin/JD/SitePages/CCRI%20Program.aspx?RootFolder=%2Fsites%2Fjfhq%2Ddodin%2FJD%2FCCRIT LRDoc%2FSOPs&FolderCTID=0x012000EFC37B44092E29438A8A6C46019B0A3C&View=%7B3145

C0A6%2D8199%2D4F02%2D895B%2DDB556ED61753%7D

File details come from the government source that posted it. Updated .