CSS Tracking Number 832469866 Draft PWS.docx

PERFORMANCE WORK STATEMENT (PWS)

1. Contracting Officer’s Representative (COR).

a. Primary COR.

See DITCO Additional Text G1 - G1 Points of contact-POCs from Current Contract

b. Alternate COR.

Alternate COR.

c. Property Administrator

Name:

Organization:

DODAAC:

Address:

Phone Number:

Fax Number:

E-Mail Address:

2. Contract or Task Order Title. Department of Defense (DoD) Cyber Exchange and DoD Cyber Training.

3. Background

This contract will support the DoD Cyber Exchange and the DoD Cyber Training program. Elements of the overall program are incorporated in the specific tasks and subtasks outlined below. These tasks are consistent with DISA’s DoD-wide mission, the DISA Campaign Plan, and the DoD Cybersecurity Strategic Plan.

The DoD Cyber Exchange (DCE) provides one-stop access to cyber information, policy, guidance, and training for cyber professionals throughout the DoD, and the general public. These resources are provided to enable the user to comply with rules, regulations, best practices, and federal laws. DISA is mandated to support and sustain the DCE as directed by DoDI 8500.01 and DODD 8140.01. The DCE is supported by a team of government and contractor staff within DISA. The DCE web team is charged with Operations Management, Content Management and Web Master Functions, Environment Development and Network Engineering. The site’s content is provided by various Cyber subject matter area content owners, across the DoD through a change request and approval process coordinated and managed by the DCE web team.

The DoD Cyber Exchange consists of three distinct enclaves:

1. DoD Cyber Exchange Public: hosted in a public commercial cloud Impact Level (IL) 2 environment for public access.

2. DoD Cyber Exchange Non-secure Internet Protocol Router Network (NIPR): hosted in a NIPR commercial cloud IL 4 environment for DoD users with a Common Access Card (CAC).

3. DoD Cyber Exchange SIPR: hosted in Secret Internet Protocol Router Network (SIPR) commercial cloud IL 6 environment for DoD users with a SIPR Token.

DISA leverages the Federal Risk and Authorization Management Program (FedRAMP) approved Cloud Service Provider (CSP) under the Infrastructure as a Service (IaaS) model. The DoD Cyber Exchange maintains an Authorization to Operate (ATO), for each of the 3 environments listed above from the DISA Authorizing Official (AO) in accordance with the DoD Risk Management Framework (RMF) or future security frameworks that replace RMF.

The DCE serves as the front door for a large catalog of Cyber Training products used by DoD members. The DCE also contains over 40 other additional subject matter areas. Some examples include DISA Security Technical Implementation Guides (STIGs), Public Key Infrastructure (PKI), DoD Cloud Computing Security, Cross Domain Enterprise Solutions (CDES), Risk Management Framework (RMF), Cyber Policy & Guidance, Ports Protocols and Services Management (PPSM), Enterprise Mission Assurance Support Service (eMASS), and much more.

The DCE staff consists of six distinct functions: Operations & Maintenance, Content Management and Web Master, Environment Development, Network Engineering, Information Security Framework, and Innovation Development. In addition to operations and maintenance, specific skill sets are required to maintain common cyber practices across DoD. These skill sets include technical and administrative Information System Security Officers (ISSOs) skilled in various security policies, procedures, and certification activities, such as accreditation of information systems and technologies. These specific skill areas include DoD certification experience, as well as knowledge of the DoD and DISA connection approval process (CAP), Risk Management Framework (RMF), and the ATO submission/approval process.

The DoD Cyber Training (DCT) program develops and maintains cyber training and awareness products. This program includes the following:

1) Cyber role-based training aligned to the DoD Cyber Workforce Framework (DCWF)

2) Cyber Awareness Challenge

3) Cybersecurity awareness training courses

4) DISA Cybersecurity Awareness Campaign

5) Registrar services for Cyber training courses

1)DISA’s DoD Cyber Training program updates the 9 Cyber role-based training courses as outlined in DoD Directive 8140.01, Cyber Workforce Management. These are in-depth courses tailored for the DoD Cyber professional. This includes the knowledge, skills, abilities, tasks, and proficiency levels identified in the DCWF and on the DoD CIO’s content site hosted on the DoD Cyber Exchange.

2) Cyber Awareness Challenge and supplemental cybersecurity awareness training courses are also developed, updated, and maintained by this group. Cyber Awareness Challenge training and supporting products are updated annually with each fiscal year. Content updates are reviewed and approved at the DoD Chief Information (CIO) level through the Cyber Workforce Advisory Group (CWAG) meetings. Cybersecurity awareness course updates include the following courses: DoD Authorizing Official, DoD Social Networking Awareness, DoD Internet of Things Awareness, DoD Phishing & Social Engineering Awareness: Virtual Communication, Using Mobile Devices in a DoD Environment, DoD Privileged User Cybersecurity Responsibilities, DoD Personal Identifiable Information (PII) Identifying & Safeguarding PII, and DoD CyberProtect.

3) Registrar services for tool-based training is based on cyber hygiene tools acquired by the DoD from the commercial space. This training is focused on its application within the DoD and its computing environments. Examples of this type of training includes Assured Compliance Assessment Solution (ACAS) and End Point Security Solutions (ESS). The contractor shall provide registrar services for 300-400 classroom/events per fiscal year through the Cyber Training catalog hosted on DoD Cyber Exchange and hosted through Intelink’s IntelShare.

4) DoD Cyber Training program oversees two cybersecurity initiatives.

· The weekly Cybersecurity Awareness Refresher (CSAR) Campaign, mandated by the Deputy Secretary of Defense and supported by the DISA Director.

· The annual Cybersecurity Awareness Month (CSAM) Campaign held in October, in conjunction with the Department of Homeland Security's (DHS) effort to heighten awareness of cybersecurity.

During CSAM, weekly articles will be published on Dateline DISA, aligned with each week's theme. These articles will contain references and links to supplementary information related to the respective themes.

A dedicated section called "Cyber Corner" on Dateline DISA will be regularly updated to amplify cybersecurity awareness. Tailored Tips of the Week (TOW) will be provided, focusing on the four weekly themes in October, along with additional training resources and detailed documents on the respective topics. This space will also serve to promote the ongoing CSAR campaign.

DISA TV will showcase weekly themed cybersecurity awareness materials, such as videos, graphics, or a blend of both.

The DCE will feature a dedicated section for Cybersecurity Awareness Month throughout October. This section will include Tips of the Week and specially crafted articles tailored for the DoD audience. Additionally, weekly themed resources like training aids and videos will be accessible to acquaint users and organizations with the breadth of cybersecurity resources available on DoD Cyber Exchange.

4. Objectives This contract maintains key aspects of DISA’s mission to promote cybersecurity related training and cybersecurity awareness throughout the DoD. The goal is to provide and distribute baseline cyber training and awareness training to aid DoD cyber professionals. The specific objective of this task is to:

1) Update cyber training products and courseware.

2) Deliver cyber training hosted on the DCE Public, NIPR, and SIPR platforms and on the Joint Knowledge Online (JKO) Learning Management System (LMS).

3) Provide training registration services for cyber tools training.

4) Operate and maintain the DoD Cyber Exchange Public, NIPR, and SIPR platforms.

5) Provide cybersecurity awareness products and content to maintain the Cyber Corner platform to support the Cybersecurity Awareness Refresher (CSAR) Campaign and annual Cybersecurity Awareness Month (CSAM) Campaign.

5. Scope.

This task order will provide contractor support for the various aspects of the DoD Cyber Exchange and DoD Cyber Training mission requirements. It provides cyber training content and the delivery media necessary to produce high-quality cyber training products to DoD members. The contractor shall provide instructional system design, graphics design, multimedia, and technical services sustaining development, integration, and maintenance of cyber training products throughout their lifecycle. This task requires close coordination and collaboration with the DoD Cyber Exchange and the DoD Cyber Training programs. The following team efforts will result in the continued delivery of superior DoD Cyber Training:

a. Maintain and update existing cyber training products.

b. Deliver cyber role-based, tool-based, and cybersecurity awareness online training.

c. Provide Registrar services.

d. Maintain and operate the Cyber Exchange to distribute cyber documentation and resources.

e. Provide cybersecurity awareness products and content to maintain the Cyber Corner platform to support the Cybersecurity Awareness Refresher (CSAR) Campaign and annual Cybersecurity Awareness Month (CSAM) Campaign.

The contractor shall comply with the appropriate DoD-approved architectures, programs, standards, and guidelines including maintenance of an Authorization to Operate (ATO), for each of the three environments-Public, NIPR, and SIPR.

The Government may require surge support during the base or any option period, and surge modifications will be within the scope of the contract and provide increased support for the defined task areas of this PWS. Surge support over the life of the contract will not exceed 50% of the contractor’s total proposed cost/price for the base and all option periods, excluding any six-month extension of services pursuant to FAR 52.217-8.

6. Performance Requirements.

6.1 – Program and Task Order Management.

6.1.1 - Integration Management Control Planning.

The contractor shall provide the technical and functional activities at the task order level needed for the program management of this PWS. The contractor shall include productivity and management methods such as quality assurance, progress/status reporting, and program reviews at the task order/subtask level. The contractor shall provide a monthly status report (MSR) monitoring the quality assurance, progress/status reporting, status of government furnished property, and program reviews applied to the task order (as appropriate to the specific nature of the PWS). The contractor shall provide a monthly Contractor Strength Report which will include the roster of personnel supporting the contract, employees that are issued Common Access Cards, percent of FTE support for the task order, employees designated on or off site, labor category from proposal, and position. The contractor will notify the Contracting Officer Representative (COR) within 48 hours, when the contractor believes there is an issue that impacts performance, schedule, or cost.

6.1.2 Annual Projected Burn Rate of Dollars and Monthly Update of Actual Expenditures, Updated Projections, and Contractor Strength Report for the Period of Performance

The contractor shall provide in the Monthly Status Report (MSR) and in Quarterly Progress Reviews (QPRs) the following financial information:

a. Projected Monthly Cost for labor, planned travel expenses in support of ATOs, and ODCs for security products for DoD Cyber Exchange.

b. Actual Monthly Cost of the task order compared to the Projected Cost of the task order for remaining period of performance.

c. The contractor shall provide an explanation of differences between actual and projected expenditures.

Deliverables:

*Standard Distribution: 1 copy of the deliverable on the Deliverables SharePoint portal.

6.1.2 Task Order Management Plan, Transition Strategy, and Transition Plan

a. Task Order Management Plan. The contractor shall prepare the task order management plan (TOMP) describing the technical approach, organizational resources and management controls planned to meet the cost, performance, and schedule requirements throughout contract execution. The contractor shall include the description of management controls, key activity milestones, deliverables, schedules, assumptions, and other relevant information. The TOMP is a living document. As such, the contractor shall review and resubmit the TOMP annually at base year and option year awards.

b. Transition Strategy & Transition Plan: The purpose of having a transition plan is to layout the tasks and activities required to move efficiently from the incumbent contractor to a contractor awarded the follow-on contract. The contractor shall include an introduction or scope statement addressing background information on the project. The contractor shall include the relationship of the project to other projects and/or organizations or agencies, address maintenance resources required, identify the transition team's organization and responsibilities, as well as the tools, techniques, and methodologies needed to perform an efficient and effective transition. The contractor shall include deployment schedules, resource estimates, identification of special resources and staffing. The contractor shall also define management controls and reporting procedures, as well as the risks and contingencies. The contractor shall give special attention to minimizing operational risks. The contractor shall include an impact statement outlining the potential impact of the transition to the existing infrastructure, operations, and sustainment staff and to the user community. The contractor shall adhere to the following onboarding requirements from the date of award: Key Personnel shall be on boarded within 15 calendar days, 50% of remaining personnel shall be on boarded within 30 calendar days and 100% of personnel shall be on boarded within 45 calendar days.

Constraints (Area 2):

1. Work schedule: Monday-Friday and support DISA’s core hours 9 AM - 3 PM.

2. Secret Security Clearance for all employees accessing DISA HQ.

3. DoD Cyber Exchange webmasters need expert proficiency with WordPress.

4. System Administrators, Information Systems Security Officer (ISSO), and Content Managers supporting DoD Cyber Exchange-SIPR will need to acquire a SIPR token and access SIPRNet from DISA HQ, Fort Meade, MD and maintain a Secret Security Clearance.

5. System Administrators and Information Systems Security Officers (ISSO) must complete all training required for system access as directed by the Government. This currently includes Endpoint Security Solutions (ESS) and Assured Compliance Assessment Solution (ACAS) training. Training must be completed within 30 days from the beginning of the Period of Performance (POP).

6. Instructional Systems and Training Content Designers will need to complete the JKO Training Coordinator course and sign the Non-Disclosure Agreement (NDA) with JKO.

7. All employees receiving a Common Access Card (CAC) are required to complete mandatory training as listed in DISA’s Corporate Management Information System (CMIS).

Requirement (Area 3): The initial management plan to be developed and approved by the Government with annual updates. The Integrated Management Schedule (IMS) will be created and provided with biweekly updates as well as the monthly status updates on performance regarding quality assurance, progress/status of project regarding cost, schedule and performance.

Deliverables:

6.1.3 Technical Interchange Meeting (TIM)

The contractor shall host a TIM to ensure a common understanding between the contractor and the Government on the contract requirements. The contractor shall describe the technical approach, the organizational resources, and management controls to meet the cost, performance, resourcing, and schedule requirements throughout the period of performance.

Deliverable:

6.1.4 Quarterly Progress Reviews (QPR)

The contractor shall prepare and conduct QPR briefs following each quarter. Appropriate members of the contractor’s technical team will meet within 15 calendar days of the end of each quarter with the appointed Government COR, either in person or via teleconference or a combination of both. The purpose of these meetings will be to discuss progress, request assistance, and address issues raised during the execution of the task.

The contractor shall include in the QPR presentation:

· A list of newly hired personnel, as well as a list of personnel who have left the task order since the last QPR, with corresponding dates of arrival/departure.

· A list of personnel possessing 8570/8140 certifications and expiration dates.

· Task order financials and invoice history.

· Reports on task deliverables, projects with start and end dates, reporting across quarters, website statistical trend charts and statistics, summary of content requests, service desk statistics, and the quarterly broken link report.

The contractor will document proceedings in Quarterly Review Notes and report their occurrence, along with any additional meetings, in the Monthly Status Reports (MSRs).

Deliverables:

6.1.5 Cooperation/Coordination with Other contractors. This requirement requires a cooperative effort from and between multiple Government and contractor organizations. The COR on this contract shall be the administrative coordinator and direct the contract efforts in cooperative efforts. The contractor shall work with these other contractors to accomplish Government requirements, goals, and objectives as efficiently and effectively as possible. This may include sharing or coordinating information resulting from the work required by this PWS or previous Government efforts, and/or working as a team to perform tasks in concert Cooperative efforts under this requirement shall remain within the scope of this PWS, any and all changes to the scope of work shall be accomplished through a written contract modification.

6.2 Courseware and Training Development/Updates. The contractor shall provide qualified curriculum development experts to maintain the planning, development, and update of web-based/online courseware. The training content focuses on cyber, cybersecurity awareness, and cybersecurity tools. The contractor shall update materials and pilot the courses to technical experts, trainers, and knowledgeable users to maintain courseware validation/evaluation. All DISA-approved contractor generated course materials shall become the intellectual property of DISA. All training and awareness materials shall be performance-based, to the extent possible, maximizing hands-on exercises and student involvement as is practical for the topics covered. All computer-based products shall comply with Section 508 of the Rehabilitation Act (keyboard accessible, closed captioning, contain show text options, audio narration, transcript, etc.), and be tested using the latest version of the Job Access with Speech (JAWS) screen reader, unless exempted from compliance with this Act by appropriate waiver. JAWS is a commercial proprietary screen reader software product from Freedom Scientific that enables a blind or visually impaired user to read the text that is displayed on the computer screen with a speech synthesizer or braille display. The contractor shall logically split the training into modules, as appropriate. Upon approval from the Government, the contractor shall update and maintain courses based on survey results and other relevant feedback. The contractor shall maintain these training products for the lifetime of the contract.

6.2.1 DCWF Student Self-Paced Online Courses Maintenance/Updates. The following criteria define the updates of DCWF Cyber Role-based courses: A DCWF Cyber Role-based course shall be updated such that it will be taken as a student self-paced course hosted online via the DoD Cyber Exchange and Joint Knowledge Online (JKO). A DCWF Cyber Work Role includes the online content for the current 9 (nine) roles. Update the 9 DCWF Cyber Role-based courses hosted on DoD Cyber Exchange and JKO, with SCORM packages based on changes to the DoD CIO approved Knowledge, Skills, Abilities, and Tasks (KSATs), policy updates, and feedback from the users.

The source documentation for the development of these nine courses is the approved DCWF course content that has been reviewed and approved through the Public Affairs Office (PAO), OPSEC, and Foreign Disclosure Office (FDO).

a. Length: Minimum 40 hours (for the average student) of student self-paced online instruction per course to adequately teach the learning objectives, and cover the Knowledge, Skills, Abilities and Tasks (KSATs) for each DCWF course.

b. DCWF courses are mapped to the DoD Cyber Workforce Framework, including the Learning Objectives, and aligned to the Tasks and Knowledge, Skills, and Abilities that are defined in the DoD Cyber Workforce Framework and hosted on DoD Cyber Exchange.

c. The government shall approve all training development milestones and project plans. The government may identify additional KSATs to be included in the course (current examples would include IPV6 in any course that covers IP routing concepts, and Zero Trust concepts and topics in the appropriate courses.) The contractor shall ensure all courses consist of smaller modules as appropriate to the subject area modules that enable a student to stop and resume training between topics throughout the course while it is hosted on the JKO LMS environment.

1. Annually, the Government shall determine the courses to be updated and jointly plan the updates throughout the contract POP. Updates will be based on student feedback, changes in policy, SME input, contractor recommendations, and government assessment. Changes to the course will be approved through an agile working group and a mutually agreed to change management process. Changes will occur on regular intervals (to be mutually agreed to) and ad-hoc based on the type of change. Ad-hoc changes would be for relatively simple changes that are deemed to be significant enough to warrant a change in the near term and not wait until the regular intervals. The Government anticipates that all products will use a combination of still photography, text, animation, video, audio, and contemporary development software such as Articulate, Adobe Creative Cloud, or similar.

2. Courses shall be designed to provide an interactive experience for the student. This will include demonstrations of key concepts, demonstration exercises, practice exercises for students, and knowledge checks. All products shall be designed to be browser-based and delivered via the DoD Cyber Exchange NIPR at cyber.mil.and SCORM compliant for distribution on the JKO LMS for delivery to the DoD cyber workforce. The LMS products shall be in the SCORM or the Experience Application Programming Interface (xAPI) format, based on the requirements identified by the Government. For more information on SCORM and Experience API, view this website (https://www.adlnet.gov/news/scorm-and-experience api-roadmap).

3. The contractor shall provide technical experts to address issues relating to the installation and use of the WBT products on LMSs. The products shall be browser-based and conform to the requirements of the Federal Desktop Core Configuration (FDCC)/Standard Desktop Configuration (SDC).

4. The DCWF WBTs shall be compatible with three browsers, as identified by the Government. The final products shall undergo functionality testing utilizing the current DISA Net baseline (to include operating system and browsers). The contractor shall reply to student inquires to the help desk by providing standard FAQs or appropriate response if the questions does not fit an established FAQ. The contractor shall respond to 90% of student inquires within 1 business day. The contractor is not responsible to provide tutoring of students. The contractor shall provide metrics to include student demographics such as the organization, affiliation, military, civilian, or contractor, the number of students who start a course vs complete a course, and overall rating of the quality of the course.

5. The mechanism for metrics shall be automated to avoid manual collection of data. Metrics can be built into the course, post course survey, or an LMS if applicable. The contractor shall design and build into each course a student end of course survey. Questions for the survey will be jointly determined between the government and contractor during the design phase of the course. The mechanism for data collection of the survey shall be automated to avoid manual collection of data. Survey questions can be modified as the need arises as part of the annual 30% update to the courses. The contractor shall ensure all products developed or updated shall relate to Federal standards such as the National Institute of Standards and Technology (NIST) Special Publication 800-16 and the Committee on National Security Systems (CNSS) Training Standards. The contractor will collect the DCWF registration metrics. This includes, but is not limited to, gathering metrics from the JKO portal on a weekly, monthly, quarterly, and annual basis. Additionally, they will present the data in graphical form within a PowerPoint presentation.

d. The contractor shall provide developers with technical expertise in developing student self-paced online training and have demonstrated experience and expertise in the subject matter for the course they are developing. A minimum of one member of the development team for each course shall have a degree in instructional design, or hold commercial certifications related to instructional design and online student self-paced training.

e. Within the DoD Cyber Workforce Framework, currently, training content exists for the following 9 (nine) Cyber Roles and are available through the JKO LMS:

1. Cyber Defense Analyst

2. Cyber Defense Infrastructure Support Specialist

3. Vulnerability Assessment Analyst

4. Network Operations Specialist

5. Systems Administrator Windows

6. System Administrator Linux

7. Systems Security Analyst

8. Database Administrator

9. Security Architect This existing training content for these nine (9) Cyber Roles shall be reviewed for annual updates each year. The contractor shall update a course whenever a major policy change occurs that affects the course. The Government shall determine the courses to be updated and jointly plan the updates throughout the contract period. The contractor shall update all courses per POP identified by the Government.

Deliverables:

*Standard Distribution: 1 copy of the deliverable on the Deliverables SharePoint portal. Beta course launched on hidden link on DoD Cyber Exchange. Final Delivery tested on JKO’s Nemesis sandbox and formally launched on JKO LMS.

6.2.1.2 DCWF Student Self-Paced Online Course Development/Updates (OPTIONAL). The objective of this sub-task is to develop and update DCWF additional courses, if required. The contractor shall develop and provide DoD-specific training material for implemented capabilities as identified by the Government. The contractor shall develop a recommended training package with appropriate training material for approval by the Government. Training packages will consist of training documentation course outline, course learning objectives, test bank of review questions, operational scenarios, storyboards, Frequently Asked Questions, and instructor/content developer notes. The contractor shall develop, and update training materials based on lessons learned and approved configuration changes. The Government anticipates training materials developed that will be at the classified and unclassified levels as appropriate. The contractor shall apply a thorough quality assurance process to training materials prior to delivery. The Government shall approve all documentation, software/media used for training. The documentation, software/media will become the property of the Government upon delivery. The contractor shall be responsible for updating the training content. The contractor shall deliver updated training content with every major software upgrade. The contractor shall maintain training materials for the life of the contract.

6.2.2 Video Capture of Cyber Classroom Instruction. (OPTIONAL) The objective of this sub-task is to capture video of training courses for posting online, in a modular eLearning format. The contractor shall record in high definition, using current industry standard recording procedures and equipment. The contractor shall provide video editing and the applicable Section 508 compliance for this type of delivery format, to ensure the videos are effective and viewable by all students. The contractor shall include closed captioning scripts (WebVTT), transcripts, and all other applicable Section 508 requirements, as identified by the section 508 policy for this type of delivery format. The classes to be video captured will be delivered by the contractor in accordance with sub-task 6.3 of this contract. The Government estimates the number of hours of video recordings per year to be 300. Video Capture is priced per 1 hour of video capture. Video Capture will be ordered in 1-hour increments.

Deliverables:

*Standard Distribution: 1 copy of the deliverable on the Deliverables SharePoint portal. Beta course launched on hidden link on DoD Cyber Exchange.

6.2.3 Cybersecurity Awareness Training WBT Development/Updates. The objective of this sub-task is to develop and update WBT products. The Government anticipates that all products will use a combination of still photography, text, animation, video, and audio. The Government shall determine the number of multimedia training products and the duration of each individual product based on the subject matter. For planning purposes, the contractor shall expect to update annually up to 200 substantive screens. The Government shall determine the courses to be updated and jointly plan the updates throughout the contract period.

All products shall be designed to be delivered via the DoD Cyber Exchange and the JKO LMS for delivery to the DoD cyber audience. The LMS products shall be in the SCORM or the Experience Application Programming Interface (xAPI) format, based on the requirements identified by the Government. For more information on SCORM and Experience API, view this website (https://www.adlnet.gov/news/scorm-and-experience-api-roadmap). The contractor shall provide technical experts to address issues relating to the installation and use of the WBT products on the LMS. The Government shall approve all product design. The products shall be browser-based and conformant to the requirements of the Federal Desktop Core Configuration (FDCC)/Standard Desktop Configuration (SDC). The final products shall undergo functionality testing on the LMS utilizing the current DISA Net baseline (to include operating system and browsers). The WBT shall be compatible with the three most currently popular browsers, as identified by the Government. WBT courses shall be mobile browser compatible with industry standard mobile tablet platforms (iOS, Android) as identified by the Government. The contractor shall ensure all courses consist of smaller modules as appropriate to the subject area. The contractor shall ensure all products developed or updated shall relate to Federal standards such as the National Institute of Standards and Technology (NIST) Special Publication 800-16 and the Committee on National Security Systems (CNSS) Training Standards.

Deliverables.

*Standard Distribution: 1 copy of the deliverable on the Deliverables SharePoint portal. Beta course launched on hidden link on DoD Cyber Exchange. Final Delivery tested on JKO’s Nemesis sandbox and formally launched on JKO LMS.

6.2.4 Cybersecurity Awareness Training WBT Development/Updates (OPTIONAL). The contractor shall develop and update WBT products per PoP as identified by the Government.

*Standard Distribution: 1 copy of the deliverable on the Deliverables SharePoint portal. Beta course launched on hidden link on DoD Cyber Exchange. Final Delivery tested on JKO’s Nemesis sandbox and formally launched on JKO LMS.

6.2.4.1 Cyber Training Screens Development/Updates (OPTIONAL). For projects that arise that require less than a full WBT individual screens can be ordered to accomplish the update and development required for the project. The contractor shall develop, and update cybersecurity awareness training products and screens per POP as identified by the Government. Screens will be priced by a single quantity of one screen and can be ordered in the quantity required for the project with a maximum of 200 screens per POP.

Deliverables.

6.2.5 WBT Cyber Awareness Challenge Development/Updates. The objective of this sub-task is to develop and update the Cyber Awareness Challenge training product. This course includes the online version, as well as a two supplemental group facilitator guide documents. The current version of the WBT is located on the publicly facing DoD Cyber Exchange website. This product will include a combination of still photography, text, animation, video, and audio.

For planning purposes, the contractor shall expect to update a quarter of the course annually, with a complete redesign of the entire course once every four years. The course will launch at the beginning of every fiscal year on 1 October. The course was completely redesigned in 2023 (FY24 version). Options and downloads available for this course shall include:

a. Launch directly from the DoD Cyber Exchange-Public and NIPR

b. Disc downloads for hosting on an individual’s computer

c. Web-Based Training (WBT) download for hosting on a web server in a network environment

d. Shareable Content Object Reference Model (SCORM) download for hosting on a Learning Management System (LMS)

e. A SCORM version to launch on JKO.

f. A link to JKO on DoD Cyber Exchange SIPR

g. Facilitator Guide, briefing download, and handouts option for download to accompany the eLearning version on DCE Cyber Exchange NIPR.

The course shall be compatible with the current DoDNet Microsoft Windows baseline, Linux, current release of Apple Mac OS X, current release of iOS and Android OS for mobile devices. The course shall be compatible with all major web browsers as defined by the Government prior to the start of the development. The Government shall approve all product design. The final products will undergo functionality and compatibility testing.

The learning objectives and requirements for this course are gathered annually during several DoD joint working group meetings. The contractor shall attend and provide guidance during all requirements gathering meetings. The contractor shall provide technical experts to address DoD mission partners issues relating to the installation and use of the Cyber Awareness Challenge products. The contractor shall provide support for up to fifteen (15) Government organizations for LMS implementation and troubleshooting of Cyber Awareness Challenge as requested by the government. The contractor shall provide an after-action report to the Government on the resolution. The products shall be browser-based and conformant to the requirements of the FDCC/ SDC. This product shall relate to Federal standards such as the National Institute of Standards and Technology (NIST) Special Publication 800-16 and the CNSS Training Standards. The supplemental group facilitator guide documents include two alternative delivery methods.

One guide allows an instructor to facilitate using the WBT product to a group of learners. The other guide is a PowerPoint presentation used in the place of the WBT for a group of learners. The contractor shall update these two documents to match any content updates made to the WBT.

Deliverables:

minutes

*Standard Distribution: 1 copy of the deliverable on the Deliverables SharePoint portal. Beta course launched on hidden link on DoD Cyber Exchange. Final Delivery tested on JKO’s Nemesis sandbox and formally launched on JKO LMS.

6.2.6 Develop content for the Cybersecurity Campaigns and Cybersecurity Training. The contractor shall develop Cybersecurity distributive media including pamphlets, brochures, posters, flyers, tri- fold, and other similar materials by DISA. The contractor shall provide the training materials in an industry standard digital format approved by the Government (i.e., PDF, DOCX, etc.). The Government estimates the number of products to be developed to be up to twelve per year. The Government shall provide specific products and topics required over the course of the contract period of performance. The contractor shall deliver all materials as a draft for Government review and revision prior to final submission. The contractor shall deliver all materials through the PAO/OPSEC media and FDO portals for approval before posting on DoD Cyber Exchange and final release.

Deliverables:

6.2.7 Cybersecurity Campaign Strategic Communications. The contractor shall provide subject matter expertise in the area of strategic communications. Strategic communications support shall include the development and implementation of artifacts to publicize and inform stakeholders in the adoption and use of cybersecurity training products within the DoD. The team shall be responsible for the life-cycle communications process, including stakeholder analysis, key message development, distribution, and measurement. The team shall coordinate with agency representatives, including mission partner engagement and public affairs, to develop and disseminate program content to appropriate internal and external audiences. The team shall provide graphics development and presentations.

Deliverables:

6.3 Course Content Delivery and Instruction. The contractor shall provide SMEs who are experienced online course designers with technical expertise and have demonstrated expertise in the topic or course they are developing content for in the realm of cybersecurity. The course content will be hosted on DoD Cyber Exchange and the JKO LMS. The contractors responsible for submitting content on the JKO LMS will be required to complete the JKO Online Training Coordinator course and sign a Non-Disclosure Agreement (NDA) before accessing the JKO LMS. The contractor shall ensure the continuity of content developers for the duration of this TO.

6.3.1 DCWF Cyber Role Based Course Delivery. The contractor shall deliver the content as a student self-paced online web-based training (WBT) course to be hosted on DoD Cyber Exchange NIPR training catalog and hosted on JKO.

The contractor shall provide a monthly analysis of student feedback for each DCWF role-based course using the JKO Report Builder. Current courses on JKO are: Windows Server Administrator, Linux Server Administrator, Network Operations Specialist, Systems Security Analyst, Cyber Defense Analyst, Cyber Defense Infrastructure Support Specialist, Vulnerability Assessment Analyst, Database Administrator, Security Architect, and other Cyber Roles as identified and developed as described in section 6.2.1 DCWF Role-based Courses.

To complete the monthly analysis from the JKO Report Builder, course designers will need to complete the JKO Report Builder course which is approximately 10 minutes in length and sign the JKO Non-Disclosure Agreement in order to access the survey data on JKO.

Deliverables:

6.4 Cyber Training Registration Services. The contractor shall support DISA by performing administrative and logistical tasks required for the implementation of DoD cyber online training delivery to DoD components, which includes the DoD cyber workforce. The contractor shall provide registrar services for 300-400 classroom/events per fiscal year. The number of classes per activity may vary depending upon the approved budget.

The contractor shall provide the logistical, administrative and…