A21-Appendix E S20-0046 Cyber Readiness Services - Task Order One.pdf
PDF 392 KB Posted
- Attached to
- S20-0046 Cyber Readiness
- Solicitation number
- W912HQ-20-R-0007
View the file
Other files
Show all 11
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Task Order One for IDIQ Solicitation W912HQ-20-R-0007 S20-0046-Cyber Readiness Services
1. IDIQ Task(s) invoked and TO-specific details: PWS para 3.25 (Conduct Cyber Readiness
Expert Evaluation) POP: 3-4 weeks commencing at award (presumably early Aug) Scope: Enterprise-level document review, to ensure USACE CCRI-related document follow DOD and Army best-practices Variable Tasks: Contractor Shall
Review and compare USACE CCRI-related plans, processes, procedures, and other documentation (approx. 84 documents) with DOD Security Technical Implementation Guides (STIGs) and Security Requirements Guide (SRG) mandated documentation o Include 9 of the 12 CCRI Technology areas (all except Traditional Security, Cross- Domain Solutions (CDS), and Releasable Space (REL) o Prepare list of all required documentation mentioned/required by STIGS/SRG for the technologies listed (except for Traditional Security STIG).
o Identify all missing or redundant documents IAW CCRI best practices o Document how to improve gaps between requirements and USACE documentation and areas that need improvement to reach DOD best practices o Provide recommended improvements to Government for approval o Make approved changes to documentation and submit to GOV POCs for approval.
Make corrections for approval.
Place of Performance: Virtual (from CTR premises) No travel required. Meetings conducted virtually.
Hours of work: Contracts and meetings with USACE POCs is expected to take place during normal USACE business hours of 0700-1730 EST on Mon – Friday except on holidays and when the Government facility/installations are closed due to local or national emergencies.
Security Clearance Required: UNCLASSIFIED/FOUO
KSAs required: (from Solicitation PWS Table 4.5): Team Lead and specialists qualified for above tasks
GFE: GOV provides virtual machine equivalent (referred to as CAN-PC disc) and CAC cards for issue to contractors. Contractor systems must have CAC and DVD readers, two-factor authentication, and full disk encryption for data-at-rest. Contractors must also have capability to provide static IP address for systems they use.
References:
JFHQ-DODIN for CCRI Program Documentation (CAC Required):
https://intelshare.intelink.gov/sites/jfhq-dodin/JD/SitePages/CCRI%20Program.aspx?RootFolder=%2Fsites%2Fjfhq%2Ddodin%2FJD%2FCCRIT LRDoc%2FSOPs&FolderCTID=0x012000EFC37B44092E29438A8A6C46019B0A3C&View=%7B3145
C0A6%2D8199%2D4F02%2D895B%2DDB556ED61753%7D
File details come from the government source that posted it. Updated .