ICPS__Relevancy_Assessment_Matrix_30May18.pdf

Section M Attachment 1

ICPS RELEVANCY ASSESSMENT MATRIX

Mission Protection

Very Relevant To be considered very relevant, the Offeror must show experience in all performance items listed below (A, B, C, D, E, F and G) in a contract with an annual amount >$2 million.

Relevant To be considered relevant, the Offeror must show experience in three performance items; (A, B, C, and D) and one of E, F, or G with an annual amount >$1 million.

Somewhat Relevant To be considered somewhat relevant, the Offeror must show experience in at least (A, B, and C) and (D or E) below in contract with an annual amount >$500 thousand.

Not Relevant Does not meet the criteria of Very Relevant, Relevant, or Somewhat Relevant.

Section M Attachment 1

A. Expertise, as verified through past experience, in developing and integrating advanced Intrusion Detection System/Intrusion Prevention System (IDS/IPS) capabilities.

B. Expertise, as verified through past experience, in performing analysis of alternatives (AoA) and generating clear courses of action as solutions to complex networking-related problems.

C. Expertise, as verified through past experience, in creating/enhancing hardware, software, and user interfaces for Information Operations Platform (IOP) or other cyber defense systems.

D. Expertise, as verified through past experience, in implementing Security

Information and Event Management (SIEM) technology in support of three “use” cases: advanced threat detection; basic security monitoring; and investigation and incident response.

E. Expertise, as verified through past experience, in preparation of Risk

Management Framework (RMF) or DoD Information Assurance Certification and Accreditation Process (DIACAP) artifacts that led to the certification and accreditation Authorization to Operate (ATO) or re-accreditation of a DoD Network.

F. Expertise, as verified through past experience, in developing and maintaining hardware and software components of systems utilizing agile methodologies (e.g. Scrum, Kanban, JIRA/Confluence software, etc.).

G. Expertise, as verified through past experience, in developing tactics, techniques, and procedures (TTPs) and developing and conducting operator and maintainer training venues for cyber defense platforms.