Attachment 1_Statement of Work.pdf

Statement of Work

For

Instructor-Led IT training and Certification Services

1. Scope. This SOW defines the requirements for comprehensive instructor-led training and associated certification services for Special Operations Command Central’s Communications Directorate. The training aims to address skill gaps and achieve specific certifications to enhance team performance and optimize mission capabilities.

This requirement is for 24 personnel to receive accelerated information technology certification training and boot camps, such as Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), CompTIA Cybersecurity Analyst (CySA+), Certified Information Security Manager (CISM), Cisco Certified Network Associate (CCNA), Cisco Certified Network Professional (CCNP), Project Management Professional (PMP), Microsoft and VMware certifications, Network Automation, and Amazon Web Services (AWS) training.

The objective of this training is to address identified skills gaps, enhance team performance, optimize mission capabilities, and achieve specific industry-recognized IT certifications. This training and certification are critical to strengthening our security posture, meeting service component career field compliance (DoD 8570/8140) requirements, protecting sensitive data, and improving network reliability. Upon successful completion of the training, participants shall possess the necessary knowledge and skills to effectively perform their IT and cybersecurity roles and pass the respective certification exams.

Specific objectives include, but are not limited to, the ability to: (1) Comprehend and apply the eight domains of information security, including security and risk management, asset security, security architecture and engineering, communication and network security, identity and access management, security assessment and testing, security operations, and software development security. (2) Understand and apply cloud security architecture, design, operations, and service orchestration across various cloud platforms and service models. (3) Perform behavioral analytics on the network and devices to prevent, detect, and combat cybersecurity threats through continuous security monitoring. (4) Develop, implement, and manage enterprise information security programs, focusing on information security governance, information risk management, information security program development and management, and information security incident management.

2. Applicable Documents. None

3. Requirements. The following services are required:

Training Delivery: All training shall be instructor-led, interactive, and include practical exercises, labs, and real-world scenarios relevant to military and government IT operations, including exam preparation strategies and practice tests.

Each certification shall propose a detailed training schedule, including start and end dates for each course, recognizing the need for flexibility to accommodate operation requirements.

The training shall be conducted via a secure, online virtual training platform or mission depending, can conduct training on-site at a SOCCENT provided facility.

The online platform must support live instructor interaction, screen sharing, virtual lab environments, and secure access for all participants. Contractor must specify technical requirements for participant access (e.g., internet speed, software).

Instructors: The contractor shall provide qualified instructors for each training courses. All instructors must hold, at a minimum, the certification they are teaching or a higher-level certification in the same domain.

Certification Exam: Provide and administer the official certification exam onsite at SOCCENT, online, or an agreed upon certification location by the participant upon completion of the training. This includes providing exam redemption codes to each participant.

Materials: Provide all necessary training materials, including student guides, lab exercises (if applicable), and any other resources required for the courses.

Including, but not limited to the courses below:

Cisco Certified Network Associate (CCNA): Training shall cover the following topics: Introduction to networking and network fundamentals, switching and LAN concepts, routing and WAN technologies, security and automation.

Project Management Professional (PMP): Training shall cover the following topics: Introduction to project management and initiation, project planning, project execution and monitoring, project closing.

Cisco Certified Network Professional (CCNP): Training shall cover the following topics: Architecture and virtualization, infrastructure, security, automation.

Certified Information Systems Security Professional (CISSP): Training shall cover the following topics: Security and Risk Management, Asset Security, Architecture and Engineering, Communication and Network Security, Identity and Access Management (IAM), Security Assessment and Testing, Security Operations, Software Development Security, Domain Recap.

Certified Cloud Security Professional (CCSP): Training shall cover the following topics: Cloud Concepts, Architecture and Design, Cloud Data Security, Cloud Platform and Infrastructure Security, Cloud Application Security and Operations, Legal, Risk, Compliance.

CompTIA Cybersecurity Analyst (CySA+): Training shall cover the following topics: Security operations, vulnerability management, incident response and management, reporting and communication.

Certified Information Security Manager (CISM): Training shall cover the following topics: Information security governance, information risk management, information security program, information security incident management.

Microsoft Training: [Specify Microsoft Training Course Here, e.g., Microsoft Azure Administrator, Microsoft 365 Security Administration] Training shall cover the topics required to [Describe Learning Objectives Specific to the Microsoft Course].

VMware Training: Training shall cover the topics required to introduction to vSphere and installing ESXi, deploying and configuring vCenter, configuring networking and storage.

Network Automation: Training shall cover the principles and practices of network automation, including scripting, APIs, and configuration management tools.

Amazon Web Services (AWS): Training shall cover the following topics: AWS Architectural foundations, building scalable and reliable solutions, managing multi-region and multi account architectures.

Redemption Codes: Provide individual exam redemption codes for each participant to cover the cost of the certification exam and training course.