ATTACHMENT 1 RED SOO.doc

Defense Threat Reduction Agency

Operations and Nuclear Support Directorate, Assessments Division

8725 John J. Kingman Road

Fort Belvoir, VA 22060-6201

STATEMENT OF OBJECTIVES

DoD RED TEAM August 25, 2011

BACKGROUND/INTRODUCTION

The Defense Threat Reduction Agency (DTRA), Operations Enterprise (OP), Operations and Nuclear Support (ON) Directorate, Operations and Nuclear Support Assessments DoD Red Team (ONAR) Branch performs threat based DoD Red Team vulnerability analysis of DoD and non DoD assets, operations, facilities and personnel. The DoD Red Team uses the full spectrum of identified adversarial capabilities, limited only by Federal Constitutional, State, local, and Host Nation laws and restrictions mandated by the customer to perform assessments.

SCOPE

The DoD Red Team performs assessments from an adversarial perspective and uses the full spectrum of identified adversarial capabilities, limited only by restrictions mandated by the customer and legal, safety, and security constraints, to demonstrate exploitation of identified vulnerabilities. They provide a unique assessment capability in that it emulates an independent, multidisciplinary adversary and performs all assessments entirely from an adversarial perspective ranging from foreign intelligence services to a well-funded terrorist organization. DoD Red Team provides a unique assessment as they provide a true “outside looking in” perspective.

To support Red Team assessments and operational efficiency, the DoD Red Team is currently structured into four functional areas: DoD Red Team Leadership, White Cell, Red Cell and Red Fusion Cell. The Government Branch Chief and Deputy Branch Chief are members of the DoD Red Team Leadership. Contractor support is required for all members of the three structured cells and for the Program Manager and Deputy Program Manager for the Red Team Leadership.

APPLICABLE DOCUMENTS

DoDD 5105.62: Defense Threat Reduction Agency, 28 November 2005

DoDI 3000.08: Balanced Survivability Assessments, 5 January 2010

DoDD O-5100.30: DoD Command and Control, 5 January 2006

DoDD O-5100.44: Defense and National Leadership Command Capability (DNLCC) (U), 9 July 2008

National Military Command System Concept of Operations, 14 April 2009

DTM 09-012, Interim Policy Guidance for DoD Physical Access Control, 8 December 2009

Standard Operating Procedures (SOP) 2-1, DoD Red Team, 26 January 2011 (Classified)

4.

OBJECTIVES

The objective of this requirement is to obtain contractor support for the four functional areas, White Cell, Red Cell, Red Fusion Cell, and positions within the DoD Red Team Leadership necessary to conduct Red Team Vulnerability Assessments and provide technical support in accordance with DODI 3000.08, Balanced Survivability Assessments, January 5, 2010.

To support Red Team assessments and operational efficiency, the DoD Red Team is currently structured into four entities: DoD Red Team Leadership, White Cell, Red Cell and Red Fusion Cell.

The Red Team Leadership, consisting of a Branch Chief, Deputy Branch Chief, Program Manager and Deputy Program Manager, is responsible for both the day to day and long-term operation of the DoD Red Team, including the resourcing, prioritization, scheduling and conduct of DoD Red Team Assessments.

The White Cell performs all required coordination, acting as the liaison between the customer, DoD Red Team Partners, and the Red Cell. The White Cell’s primary functions include ensuring the safety, security and legality of operations, coordinating the Red Cell requests, and maintaining assessment process credibility.

The Red Cell consists of various collectors employed to gather the information based on established objectives. This data forms the basis of the assessments and subsequent assessment activities.

The Red Fusion Cell is a subset of the Red Cell. It serves as the center for analyzing and fusing data collected in accordance with the objectives provided by the White Cell. The Red Fusion Cell also develops required plans to document assessment methodologies.

The White Cell, Red Cell and Red Fusion Cell are all comprised entirely of contractors. In addition, the Program Manager and Deputy Program Manager within the DoD Red Team Leadership are also contractor positions.

5.

MINIMUM REQUIREMENTS FOR DEPLOYMENT

All positions require a TS/SCI and any position required to deploy must meet and maintain the following criteria:

5.1 At a minimum, personnel shall have expertise in one or more of the following areas:

· Terrorist Operations (Planning, Execution and Management)

· Intelligence (Collection, Fusion, Analysis)

· Information Operations (Knowledge to affect, but not limited to, communications, security, logistics, transportation, and supply systems)

5.2 Accept worldwide deployments which include high threat permissive areas presenting some risks to personal safety.

5.3 Submit to immunization for worldwide travel.

5.4 Be able to travel on short notice, work non-standard hours and take on-call duty.

5.5 Obtain an Official Passport.

5.6 Be capable of operating in all operational and physical environments and work closely with United Stated Government (USG) military and/or civilian personnel.

6.

PLACE OF PERFORMANCE

All positions except Red Team Partner Liaisons are located in the Washington DC area. Red Team Partner Liaison positions are located in North Carolina, Colorado, and Florida. All work will be performed in Government provided space.

7. GOVERNMENT FURNISHED PROPERTY OR EQUIPMENT (GFP/GFE)

7.1 For on-site contractor personnel performing Contract efforts, the Government will provide work space, computer, telephone, CAC cards, DTRA e-mail accounts, access to Government file servers, CBNET access and other available Government support as required.

7.2 The contractor is authorized the use of Government vehicles for local travel in the performance of official Government business. The contractor personnel operating Government vehicles shall have a valid drivers license and shall comply with all applicable Fort Belvoir, federal, state, and local driving laws. The contractor will be held liable if one of their employees is found to be negligent in the use of a Government vehicle.

7.3 The contractor shall not use Government equipment for personal use to include computers, copiers, and facsimile equipment. This equipment will only be used by the contractor under the provisions of this contract.

7.4 The contractor shall submit requests for replacement of Government-furnished equipment to the COR for processing. Such requests must specify the reason for the replacement request.

7.5 Any accommodations not identified in this section are the responsibility of the contractor for their personnel in the performance of their job (i.e. special needs such as special chairs, wheelchairs and computer peripherals).

8.

TRAVEL

The contractor will be required to travel in their performance of duties and as directed by DTRA. The Contractor shall provide a detailed estimate of any desired travel in advance to the COR in writing via memorandum or email. All travel shall be in accordance with the Joint Travel Regulation (JTR) and all travel shall be approved by the COR in writing via memorandum or e-mail prior to the contractor incurring any travel expenses and prior to any departure. All travel costs associated with the performance of work will be reimbursed in accordance with the Federal Travel Regulations (FTR).

9.

SECURITY

9.1 The contractor shall possess a DOD TOP SECRET clearance with an SCI caveat Facility Clearance and employees working on this program must be U.S. citizens, and will require a DOD TOP SECRET clearance with an SCI caveat granted by the Defense Security Service (DSS) to provide the required support. Clearances must be in place prior to contract award. A Visit Authorization Letter (VAL) must be provided for each contractor employee working on this contract who will require access to any DTRA site. The VALs for collateral security clearance shall be typewritten, contain the information specified in paragraphs 6-103, 6-104 and 6-105 of the NISPOM, and be submitted to the DTRA Security Support Branch (Visitor Control). The term of the VAL shall be for the term of the contract. The Contractor shall provide proof of U.S. citizenship for all contracted employees prior to entering the DTRC. The contractor shall comply with all terms of the DD 254 (Attachment 3), and the National Industrial Security Program Operating Manual (NISPOM), DoD 5220.22-M, NATIONAL INDUSTRIAL SECURITY PROGRAM, and any revisions to that manual. The contractor shall provide all forms and information, apply for clearances and shall be responsible for any expense incurred in obtaining TOP SECRET/SCI security clearances for the contractor employees.

9.2 The contractor will produce some SECRET and/or TOP SECRET documents in performance of this contract. The contractor shall comply with all DoD requirements for marking, handling, storing and transporting classified documents, working papers, notes, media, etc. (herein referred to as documents) while in the possession of the contractor. This includes any document the contractor may generate in performance of this contract.

9.3 The contractor shall demonstrate sound and proven Operations Security practices, ensuring unclassified/sensitive information associated with the performance of the contract will be properly protected at all times.

9.4 The contractor shall adhere to all access control policies and procedures for the facility where they are performing. Contractor personnel shall wear security identification badges at all times while in DTRA facilities as access cards and Identification Cards (IDs) are presented upon request at all entry control points. Lost or stolen IDs or badges shall be verbally reported immediately, and followed up in writing, within 24 hours of incident to the DTRA Contracting Officer Representative.

9.5 The contractor must be responsible for safeguarding all Government property provided for contractor use. At the end of each work period, all Government property, equipment and materials must be secured.

10.

DELIVERABLES

10.1 Assessment Progress Report (CDRL A001)

During the assessment phase, team members and partners identify and gather information, perform initial analysis, conduct on-site assessments, conduct formal analysis, and develop and conduct assessment courses of action. The team also prepares and distributes progress reports on all actions taken during this phase.

10.2 Assessment Outbriefing and Assessment Final Report (CDRL A002)

During the post-assessment phase, the contractor shall prepare briefings and reports of all assessment activities and conduct a “hot wash” of these products with all stakeholders in order to ensure all issues are addressed and resolved. Team members will be required to provide briefings to the customer and finalize and distribute reports as required by the Program Plan. The final briefing and report identifying assessment status, findings, and mitigation strategies for all vulnerabilities and identified exploitable conditions shall be prepared and presented.

10.3 Open Source Study of DoD Protection Strategies (CDRL A003)

The results of the Research associated with the adversarial Open Source analysis of DoD strategic and operational level protection strategies will be used as foundational information to determine adversarial understanding of DoD Protection strategies, not to determine compliance with the measures. This report will be updated annually. Specific objectives of this report include:

· Identify various organizations responsible for development and implementation of protection strategies.

· Identify strategic and operational level doctrine, plans, and guidance of protection strategies and missions.

· Identify deployed and planned technologies used for protection.

10.4 DoD Red Team Standard Operating Procedure (Draft) (CDRL A004) The contractor shall provide a draft, comprehensive Standard Operating Procedure establishing the guidelines for conducting DoD Red Team assessments. The contractor shall update the Standard Operating Procedure annually.

10.5 Personnel Recruitment, Retention, and Surge Support Plan (CDRL A005)

The contractor shall establish and maintain a Personnel Recruitment, Retention, and Surge Support Plan and update this plan annually. The contractor must be able to furnish additional “Surge” personnel within 90 days of Government notification of the additional surge requirements.

10.6 Semiannual Review Slides, Charts and Reports (CDRL A006) The contractor shall provide slides charts and reports, etc. as necessary to present the contract performance data, for personnel readiness/issues, financial data, and any other relevant programmatic issues for the semi-annual program review.

10.7 Monthly Status and Progress Report (CDRL A007) The contractor shall provide a monthly Schedule and Status Report not later than 15 days after the end of each month. The report shall include the status of the program tasks and any significant accomplishments and/or difficulties during the reporting period.

10.8 Funds and Man-Hours Expenditure Report (CDRL A008) The contractor shall provide a monthly Funds and Man-Hours Expenditure Report not later than 15 days after the end of each month, beginning after the end of the first full Calendar month of the contract order. The Funds and Man-Hours Expenditure Report shall include total hours expended for the month by labor categories and ACRN, and total hours used to date by labor categories and ACRN.

10.9 Funds Available for Deobligation Report (CDRL A009) The contractor shall provide a Funds Available for Deobligation Report not later than 90 days before the expiration of the Base period of performance and expiration of each exercised option period of performance the contractor shall submit a Closeout Funds Available for Deobligation Report and Final Invoice. The Funds Available for Deobligation report must contain:

Contractor Name and contact information of the Preparer of the report; Contract Number; Contract Type; Amount of Funds on this Contract by Fiscal Year of funds and by ACRN; Amount Expended by ACRN; Total funds remaining on each ACRN that are not required and can be deobligated.

ATTACHMENT 1

HDTRA1-11-R-0024