Statement_of_Work.pdf

STATEMENT OF WORK

Title: Develop Critical Infrastructure Cyber-attack resilient workshops

FEMA Region II would like to develop a series of workshops to be conducted at various venues to identify public and private continuity and crisis management planner’s potential gaps in cyber incident response capabilities as it results on the dependency of critical infrastructure, such as a dam.

Project Objectives

The purpose of the Regional Preparedness Division is to increase cyber incident response capabilities among the whole of community. Dams have been a national security concern for years. The importance of the cybersecurity aspect was highlighted in 2016 when the Justice

Department indicted seven Iranians for not only conducting cyberattacks against American banks, but trying to compromise the small Bowman Dam north of New York City in 2013. A successful cyberattack on a major dam like the Hoover Dam could be devastating to tens of millions of people. The ability to run such systems remotely, as well as conduct maintenance and update software via the web itself, offers hackers all the access they need. Such networks are particularly tempting because they often control operations, and not merely information, potentially magnifying the impact of any attack on them.

We want to develop a workshop that delivers information how the public and private sectors can strengthen their cyber response preparedness capabilities. This workshop should be a combination of both presentation and scenario-based discussion that seeks to promote the exchange of ideas, improve information-sharing, communications and update each entities cyber response plans based on lessons learned.

Project Goals

Develop format and agenda for a 1-day workshop

Working with FEMA finalize topics for presentations and develop up to 3 short presentations (30 – 45 minutes)

Create workshop materials, to include Powerpoint Presentation, Workshop Participant

Manual, and Participant Feedback Form

Assist in the delivery of 5 workshops in FEMA’s Region II

Submit an Executive Summary of Discussions from each workshop, to include participant feedback.

Provide FEMA with recommendations on how to improve workshop for future deliveries by FEMA Regional staff.

Complete an AAR and a list of best practices at the completion of the 5 workshops.

SCOPE OF WORK

FEMA Region II desires to strengthen its partners in cybersecurity incident response capabilities and is looking to secure professional services to design, develop, coordinate, facilitate, evaluate and document a progressive cyber-focused incident response exercise, focusing on the resiliency and continuity of operations. This program will be used to test core capability levels and identify gaps through a series of 5 workshops, focusing on five discussion-based workshops. These workshops will play a vital role in strengthening cyber preparedness by allowing planners and stakeholders to test and validate plans and capabilities. These workshops will identify capability gaps, highlighting areas for improvement in cyber and continuity plans and procedures.

All exercise program activities must comply with Homeland Security Exercise and Evaluation

Program (HSEEP) requirements and utilize Incident Command System (ICS) principles as established in the National Incident Management System (NIMS). FEMA will provide venues, however, the contractor is responsible for all activity logistics including scheduling and setup, materials, audio/visual equipment, registration, sign in and feedback.

The contractor will develop workshop materials, including presentations, scenario based discussions, and participant feedback forms that FEMA can use to sustain the program after the contractor has concluded. The contractor will provide FEMA with a summary of the discussions and challenges identified by participants in each of the workings in a Rolling Summary of

Discussions, as well as a separate list of recommendations on how FEMA can improve the workshop for future deliveries.

General Support to all activities will include:

Assist in coordination of meetings with planning team, including taking meeting minutes

Provide staffing support and agenda planning

Deliverables: The contractor will prepare and provide the following information:

a) Meeting minutes from planning meetings

b) Workshop Participant Manual

c) Up to 3 Powerpoint presentations for preparedness or business continuity lectures

d) Powerpoint presentation to guide discussions

e) Participant Feedback Form

f) Conduct 5 workshops

g) Executive Summary of Discussions from 4 workshops

h) Final report of recommendations for FEMA to improve workshop delivery in future