A23 Attachment 1 SOW.pdf

STATEMENT OF WORK (SOW)

1. Contract/Task Order Title. GrayKey or Equal Software License

2. Background. The Pentagon Force Protection Agency (PFPA) Investigations & Intelligence Division / Counterintelligence (IID/CI) preserves the operational integrity of the Office of the Secretary of Defense and others as authorized by DoDI 5240.05 through proactive counterintelligence activities conducted to identify, deceive, exploit, and disrupt intelligence collection by Foreign Intelligence Entities, internal criminal organizations, and other foreign adversaries. A variety of state and non-state actors have demon-strated the capacity and willingness to target US Government critical infrastructure.

3. Objectives. The purpose of this contract is to provide GrayKey software license from Magnet Foren-sics or its Equal. The current license expires March 22, 2025.

4. Scope. Provide for the reinstatement of the license for the below items.

Software to be procured:

1 x GrayKey License with a minimum of:

Unlimited Consent and BFU Extractions.

30 AFU, Instant Unlock or Brute Force Advanced actions Annual Action Credits Included: 30

General Description of the salient physical, functional or performance characteristics of the brand-name item that an “Equal” item must meet:

Provide full forensic acquisition capability for the latest generations of iOS as implemented on the latest Apple (iPhone 16 at this time) cellular telephones.

Provide full forensic acquisition capability for the latest generations of Android as implemented on the latest cellular telephones.

Must NOT require access to other computers or devices to complete extractions.

Must provide digitally sound extractions.

Must be able to generate reports from extraction with the ability to highlight particular items and include hash values to meet evidentiary rules.

Must provide regular updates to ensure functionality with the latest generations of mobile devices and operating systems.

Must have ability to access and extract evidence from mobile devices irrespective of device state.

Must access credentials stores like Keychain and Keystore to decrypt content.

5. Specific Tasks: License key(s) shall include digital delivery of software license and updates as re-quired for the optimal performance of the item. Contractor shall warrant any repairs / updates for the peri-od of the contract.

6. Performance Standards.

Performance Standard Acceptable Quality Level

(AQL)

Method of Surveillance

Deliver one (1) license for GrayKey digital extraction system

100% delivery Routine usage of licensed software.

7. Place of Performance. Work shall be performed at the contractor facilities unless otherwise agreed upon by the Government.

8. Period of Performance. One 12-month Base Period (beginning March 23, 2025) and three 12-month Option Periods

9. Security. Classification of the individual items in UNCLASSIFIED so no additional provisions are required.

10. Government-Furnished Equipment (GFE)/Government-Furnished Information (GFI). N/A

11. Other Pertinent Information or Special Considerations. N/A

a. Identification of Possible Follow-on Work. N/A

b. Identification of Potential Conflicts of Interest (COI). N/A

c. Identification of Non-Disclosure Requirements. N/A

d. Packaging, Packing and Shipping Instructions. Delivery of the license will be digital.

e. Inspection and Acceptance Criteria. Items will be inspected for full performance upon return.

12. Section 508 Accessibility Standards. The following Section 508 Accessibility Standard(s) (Technical Standards and Functional Performance Criteria) are applicable (if box is checked) to this acquisition.

Technical Standards

1194.21 - Software Applications and Operating Systems

1194.22 - Web Based Intranet and Internet Information and Applications

1194.23 - Telecommunications Products

1194.24 - Video and Multimedia Products

1194.25 - Self-Contained, Closed Products

1194.26 - Desktop and Portable Computers

1194.41 - Information, Documentation and Support

The Technical Standards above facilitate the assurance that the maximum technical standards are provid-ed to the Offerors. Functional Performance Criteria is the minimally acceptable standards to ensure Sec-tion 508 compliance. This block is checked to ensure that the minimally acceptable electronic and infor-mation technology (E&IT) products are proposed.

Functional Performance Criteria

1194.31 - Functional Performance Criteria

END OF SOW