Attachment 1_State of Work (7 June 2023).pdf

Attachment 1, Statement of Work

STATEMENT OF WORK

18 CS/SCXP, Kadena Air Base, Okinawa, Japan

Virtual IT Certification Training

7 June 2023

1. SCOPE

1.1 Intent: The contractor must provide IT certification training support advancement of IT and cybersecurity skills and certifications matching industry levels for 18 CS personnel through attendance of virtual online courses.

2. REFERENCES

CompTIA, ISACA, ISC2, and Cisco System websites

3. REQUIREMENTS

3.1 Location: The courses must be REAL TIME/LIVE virtual-online and CANNOT be in-person due to lack of accessible transportation for some 18 CS members and some members working night shift. Also, many companies are ineligible to be allowed onto the Air Base to supply in-person training. The training will be Japan Standard Time (JST), and members will stay here in Okinawa Japan.

Kadena Air Base (KAB)

Okinawa, Japan

3.2 Schedule: Classes will start 0800-1630 (JST). The course length depends on the course selected, but 5 days is the minimum number of days the course length will be. After the contract award, classes will be spread throughout the year in a group or individual training format and commit 5-12 workdays, majority of classes being the 40-hour work week.

3.3 Number of Students: 64 students will attend. Every member will have prior experience with IT, although the amount of experience will be varying. Furthermore, members may lack basic understanding of the content of the class they are deciding to attend. We recommend partnering with a company that is thorough in their classes. The number of students per course is listed:

Security+: 16 members, CISM: 14 members, CISSP: 11 members, CCNA: 23 members.

3.4 Materials The certification boot camps/virtual courses will be provided. Members attending classes will utilize their own laptops/computers/tablets to attend the live online class. It is up to the member to utilize an adequate device. Zoom, Microsoft Teams, etc., shall be used.

Members will also utilize their own commercial internet to access the class.

3.5 Exam Vouchers: A minimum of one (1) Exam Voucher(s) will be given to each student at the end of each boot camp that will be good to use for to one year MINIMUM from attendance of the certification boot camp/course.

3.6 Exam Passing Guarantee: Members attending the courses are responsible for their success in passing the exam. However, this contract is created to heavily prepare them for the exam.

3.7 Course Content: The courses will be comprehensive and taught to the latest version of the different exams provided. The vendor will supply course outlines so we know what will be covered in their training. CompTia Security+ Certification Boot Camp, CISM Prep Course, CISSP Certification Boot Camp and CCNA Routing & Switching Prep Course include an E- Book and Exam Bundle. The courses include all required study materials and practice exams to ensure adequate exam preparation for students.

3.8 Course Description:

CompTIA Security+ Certification Boot Camp (16 members)

Issued by: Computing Technology Industry Association (CompTIA)

Description: The CompTIA Security+ certification exam will verify the successful candidate has the knowledge and skills required to assess the security posture of an enterprise environment and recommend and implement appropriate security solutions; monitor and secure hybrid environments, including cloud, mobile, and IoT; operate with an awareness of applicable laws and policies, including principles of governance, risk, and compliance; identify, analyze, and respond to security events and incidents

Topics Covered: Attacks, Threats, and Vulnerabilities, Architecture and Design, Implementation, Operations and Incident Response, & Governance, Risk and Compliance

Required Exams: Security+

Course Length: 5 days

CISM (Certified Information Security Manager) Prep Course (14 members)

Issued by: Information Systems Audit and Control Association (ISACA)

Description: Data breaches, ransomware attacks and other constantly evolving security threats are top-of-mind for today’s IT professionals. With a Certified Information Security Manager® (CISM®) certification, you’ll learn how to assess risks, implement effective governance and proactively respond to incidents.

Topics Covered: Information Security Governance, Information Security Risk Management, Information Security Program, Incident Management

Required Exams: CISM

CISSP Certification Boot Camp (11 members)

Issued by: (ISC)2

Description: The Certified Information Systems Security Professional (CISSP) is the most globally recognized certification in the information security market. CISSP validates an information security professional’s deep technical and managerial knowledge and experience to effectively design, engineer, and manage the overall security posture of an organization.

Topics Covered: Security and Risk Management, Asset Security, Security Architecture and Engineering, Communication and Network Security, Identity and Access Management (IAM), Security Assessment and Testing, Security Operations, and Software Development Security

Required Exams: CISSP

CCNA Routing & Switching Prep Course (23 members)

Issued by: Cisco Systems, Inc.

Description: CCNA certification proves you have what it takes to navigate the ever-changing landscape of IT. Designed for agility and versatility, CCNA validates that you have the skills required to manage and optimize today's most advanced networks.

Topics Covered: Network Fundamentals, Network Access, IP Connectivity, IP Services, Security Fundamentals, and Automation and Programmability

Required Exams: CCNA

3.9 Contact Hours: Courses available range between 40-72 hours, depending on the course.

3.10 Government Furnished Equipment: N/A

3.11 Customer Support does not have to be 24/7 but is preferred. Customer support includes but is not limited to email, chat, phone, etc. Customer support should be very available during the courses and can respond after the course is over.

3.12 Helpdesk ticket. The contractor must respond to all submitted helpdesk ticket no longer than 72 hours. This is required so that students can request for support in the event of having problems with accessing the class website, content, or having any other questions that may occur when out of class.

3.13 Courses will be taught by instructor(s) (minimum 1 instructor per course) that possess accreditations in the Information Technology/Cybersecurity field to prove legitimacy before awarding of the contract. The company is required to have experience working with the US Government/US Military (Air Force, Space Force, Marine Corps, Army, Navy, Coast Guard).

3.14 Certification of Completion or equivalent to prove that the course was completed is required to provide to the members that attend the class.

3.15 The training needs to be compatible with any internet browser (Chrome, Safari, Edge, Firefox). There are no other security requirements other than a potential access code to get into the class. That is also not required.