Section_M_Attachment_1-_ICPS__Relevancy_Assessment_Matrix.pdf

Section M Attachment 1

ICPS RELEVANCY ASSESSMENT MATRIX

Mission Protection

Very Relevant To be considered very relevant, the offeror must show experience in performance items:

(A, B, C, D, E and F) from the list below in a contract with an annual amount >$2 million.

Relevant To be considered relevant, the offeror must show experience in performance items:

(A, B, C) and (two of D, E, or F) from the list below in a contract with an annual amount >$1 million.

Somewhat Relevant To be considered somewhat relevant, the offeror must show experience in performance items: (A, B, and C) and (one of D, E, or F) from the list below in a contract with an annual amount >$500 thousand.

Not Relevant Does not meet the criteria of Very Relevant, Relevant, or Somewhat Relevant.

Section M Attachment 1

A. Expertise, as verified through past experience, in performing analysis of alternatives and generating clear courses of action as solutions to complex networking-related problems.

B. Expertise, as verified through past experience, in developing tactics, techniques, and procedures (TTPs) and developing and conducting operator and maintainer capability familiarization venues for cyber defense platforms.

C. Expertise, as verified through past experience, in managing enterprise risk through the implementation of the National Institute of Standards and Technology’s Risk Management Framework process to assess and authorize systems for use on DoD networks.

D. Expertise, as verified through past experience, in implementing Security Information and Event Management (SIEM) technology in support of three “use” cases: advanced threat detection; basic security monitoring; and investigation and incident response.

E. Expertise, as verified through past experience, in creating/enhancing hardware, software, and user interfaces for the AF’s Information Operations Platform (IOP) or other similar cyber defense systems.

F. Expertise, as verified through past experience, in developing, integrating, and modernizing advanced IDS/IPS systems and capabilities (including hardware and software) utilizing agile methodologies (e.g. Scrum, Kanban, JIRA/Confluence software, etc.).