ATTACHMENT 1 STATEMENT OF OBJECTIVES

Defense Threat Reduction Agency

Operations and Nuclear Support Directorate, Assessments Division

8725 John J. Kingman Road

Fort Belvoir, VA 22060-6201

STATEMENT OF OBJECTIVES

DoD RED TEAM July 8, 2011

1. BACKGROUND/INTRODUCTION

The Defense Threat Reduction Agency (DTRA), Operations Enterprise (OP), Operations and Nuclear Support (ON) Directorate, Operations and Nuclear Support Assessments DoD Red Team (ONAR) Branch performs threat based red team vulnerability analysis of DoD and non DoD assets, operations, facilities and personnel. The DoD Red Team uses the full spectrum of identified adversarial capabilities, limited only by U.S. Constitutional, State, local, and Host Nation laws and restrictions mandated by the customer to perform assessments.

2. SCOPE

The DoD Red Team performs assessments from an adversarial perspective and uses the full spectrum of identified adversarial capabilities, limited only by restrictions mandated by the customer and legal, safety, and security constraints, to demonstrate exploitation of identified vulnerabilities. They provide a unique assessment capability in that it emulates an independent, multidisciplinary adversary and performs all assessments entirely from an adversarial perspective. Adversarial perspectives used by the Team range from foreign intelligence services to a well-funded terrorist organization. DoD Red Team provides a unique assessment as they provide a true “outside looking in” perspective.

To support Red Team assessments and operational efficiency, the DoD Red Team is structured into four entities: DoD Red Team Leadership, White Cell, Red Cell and Red Fusion Cell.

The Red Team Leadership, consisting of a Branch Chief, Deputy Branch Chief, Program Manager and Deputy Program Manager, is responsible for both the day to day and long-term operation of the DoD Red Team, including the resourcing, prioritization, scheduling and conduct of DoD Red Team Assessments.

The White Cell performs all required coordination, acting as the liaison between the customer, DoD Red Team Partners, and the Red Cell. The White Cell’s primary functions include ensuring the safety, security and legality of operations, coordinating the Red Cell requests, and maintaining assessment process credibility.

The Red Cell consists of various collectors employed to gather the information based on established objectives. This data forms the basis of the assessments and subsequent assessment activities.

The Red Fusion Cell is a subset of the Red Cell. It serves as the center for analyzing and fusing data collected in accordance with the objectives provided by the White Cell. The Red Fusion Cell also develops required plans to document assessment methodologies.

The White Cell, Red Cell and Red Fusion Cell are all comprised entirely of contractors. In addition, the Program Manager and Deputy Program Manager within the DoD Red Team Leadership are also contractor positions.

3. APPLICABLE DOCUMENTS

3.1. DoDD 5105.62: Defense Threat Reduction Agency, 28 November 2005

3.2. DoDI 3000.08: Balanced Survivability Assessments, 5 January 2010

3.3. DoDD O-5100.30: DoD Command and Control, 5 January 2006

3.4. DoDD O-5100.44: Defense and National Leadership Command Capability (DNLCC) (U), 9 July 2008

3.5. National Military Command System Concept of Operations, 14 April 2009

3.6. DTM 09-012, Interim Policy Guidance for DoD Physical Access Control, 8 December 2009

3.7. Standard Operating Procedures (SOP) 2-1, DoD Red Team, 26 January 2011 (Classified)

4. OBJECTIVES

The objective of this requirement is to obtain contractor support for the White Cell, Red Cell, Red Fusion Cell, and positions within the DoD Red Team Leadership necessary to conduct Red Team Assessments and provide technical support in accordance with DODI 3000.08, Balanced Survivability Assessments, January 5, 2010.

5. REQUIREMENTS

5.1 Provide contractor personnel subject matter experts (SMEs) to conduct Red Team Vulnerability Assessments.

5.2 Perform an adversarial Open Source analysis of DoD strategic and operational level protection strategies.

5.3 Maintain a comprehensive, consolidated electronic calendar of all meetings, training, travel, etc., associated with all DoD Red Team Programs, customers, partners, and stakeholders.

5.4 Prepare and staff assessment plans, policies, and procedures, including Assessment Program Plans, Assessment Ground Rules and Restrictions, Memorandums of Understanding/Agreement, Concept of Operations Plans, Operations Plans, Operations Orders, Fragmentary Orders, Warning Orders, Standard Operating Procedures, Information Papers, Legal, Safety, and Security Briefs, and other papers and briefings required to support red team operations, assessments, and programs.

5.5 Comply with all DTRA and ONA mandatory training requirements including deployment training, security training, computer based training, and quarterly and annual division training. Red Cell personnel will not attend training designated as “insider information” by the Chief or Deputy Chief, DoD Red Team.

6. LABOR CATEGORIES

6.1 Red Team Program Manager

The Program Manager (PM) shall lead a dynamic team of subject matter experts focused on conducting program vulnerability assessments. The PM provides direct daily supervision of all analysts' efforts in executing functions to fully explore alternatives in plans, operations, concepts, organizations, and capabilities in the context of the operational environment and from the perspective of adversaries and other related groups. The PM is responsible for the content and packaging of all deliverables developed by the assessment team and works in support of the Branch Chief to ensure level of effort and distribution of labor meets the demand for support

6.2 Red Team Deputy Program Manager

The Deputy Program Manager (DPM) assists the Program Manager and will lead a dynamic team of subject matter experts focused on conducting program vulnerability assessments. The DPM provides direct daily supervision of all analysts' efforts in executing functions to fully explore alternatives in plans, operations, concepts, organizations, and capabilities in the context of the operational environment and from the perspective of adversaries and other related groups. The DPM assists the PM in developing, editing, and producing all deliverables created by the assessment team and works in support of the Branch Chief to ensure level of effort and distribution of labor meets the demand for support. The DPM is responsible for format and oversight of product development.

6.3 White Cell Project Lead

The White Cell Project Lead is responsible for the overall conduct and management of designated vulnerability assessment programs. As such, the White Cell Project Lead provides advice and guidance to Branch leadership and project staff on all matters pertaining to statutory and regulatory requirements and other administrative directives. The White Cell Project Lead also recommends improvements to work products and resolves technical work problems, developing solutions that are innovative and precedent setting. The White Cell Project Lead interfaces with customers, Federal, state and local government agencies, other external organizations, and higher authorities, for projects assigned.

6.4 White Cell Project Coordinator

The White Cell Project Coordinator provides day-to-day support and administration of designated vulnerability assessment programs, to include the safety, legal, and security aspects. The Project Coordinator Prepares correspondence, writes Program Plans, Final Draft Concept of Operations Plans, Operations Orders, Fragmentary Orders, Warning Orders, prepares Ground Rules, and identifies resource requirements. The Project Coordinator ensures all documentation is compliant with statutory and regulatory requirements and other administrative directives.

6.5 Red Fusion Cell Manager

The Red Fusion Cell Manager leads a dynamic team of subject matter experts focused on conducting program vulnerability assessments. The Red Fusion Cell Manager provides direct daily supervision of all Red Cell analysts' efforts to emulate adversarial information collection and operational strategies to support assessments. The Red Fusion Cell Manager is responsible for the content and packaging of all deliverables developed by the assessment team and works in support of the Branch Chief to ensure level of effort and distribution of labor meets the demand for support.

6.6 Red Cell Intelligence Analyst

The Red Cell Intelligence Analyst is responsible for the overall conduct and management of specific vulnerability assessments, to include gathering information based on program objectives, identifying gaps in information gathering, and prioritizing courses of action pertaining to the assessment. The Red Cell Intelligence Analyst provides assessment data to the White Cell Project Lead ensuring all statutory and regulatory requirements and other administrative directives are met. The Red Cell Intelligence Analyst is responsible to research, review, edit, plan, prepare, integrate and publish all-source terrorism and foreign intelligence service intelligence studies, plans, and/or products relating to specific programs. The Red Cell Intelligence Analyst will assume the duties of the core subject matter expert (SME) in intelligence analysis and production in a variety of complex data topics related to various threats to national security.

6.7 Assessment Specialist

Assessment Specialists conduct on-site assessments as directed by the Red Cell. These are Part Time positions and can be used as assessment schedule requires.

6.7 Red Team Partner Liaison

The Red Team Partner Liaison serves as an on-site Liaison Officer to Red Team Partners for ONAR. As such, the individual provides support in all aspects of assessments operations and training. The Red Team Partner Liaison serves as the corporate memory for assessment methodology and is responsible for developing and coordinating collection priorities and strategies, evaluating collection effectiveness, and recommending realignment of resources when appropriate. The Red Team Partner Liaison coordinates, validates and manages standing, ad hoc, and crisis-related collection requirements. Red Team Partner Liaison is responsible for allocating collection efforts against the requirements and regularly solicits Project Leaders to ensure collection against prioritized requirements. The Red Team Partner Liaison is responsible for maintaining and accounting for all DTRA provided equipment and supplies provided to the partner organization.

6.8 Program Assistant

The Program Assistant performs a wide variety of common administrative functions, such as managing, preparing, editing, and distributing assigned tasking and correspondence, mail distribution, filing, report control, record management, customer service, and other related administrative functions. The Program Assistant provides assistant security officer services for a classified facility, plans and carries out projects to review organization operation, and identifies, analyzes, and recommends actions to improve personnel maintenance, training, safety, and administrative operations.

6.9 Technical Editor

The Program Assistant performs a wide variety of technical editing functions, including templates, training report preparation, and archiving reports and documents.

7. CONTRACTOR PERSONNEL QUALIFICATIONS

All Operational Positions identified are “Deployable” and must meet and maintain the following criteria.

7.1 Knowledge, skills, and abilities to ensure well balanced, safe operations. At a minimum, personnel shall have expertise in one or more of the following areas:

· Terrorist Operations (Planning, Execution and Management)

· Intelligence (Collection, Fusion, Analysis)

· Information Operations (Knowledge to affect, but not limited to, communications, security, logistics, transportation, and supply systems)

7.2 Accept worldwide deployments which include high threat permissive areas resenting some risks to personal safety.

7.3 Submit to immunization for worldwide travel.

7.4 Be able to travel on short notice, work non-standard hours and take on-call duty.

7.5 Obtain an Official Passport.

7.6 Possess effective oral and written communication skills.

7.7 Be proficient with Microsoft Office and common office software applications.

7.8 Be capable of operating in all operational and physical environments and work c Closely with USG military and/or civilian personnel.

8.

PLACE OF PERFORMANCE

All positions except Red Team Partner Liaisons are located in the Washington DC area. Red Team Partner Liaison positions are located in North Carolina, Colorado, and Florida. All work will be performed in Government provided space.

9.

TRAVEL

The contractor will be required to travel in their performance of duties and as directed by DTRA. The Contractor shall provide a detailed estimate of any desired travel in advance to the COR in writing via memorandum or email. All travel shall be in accordance with the Joint Travel Regulation (JTR) and all travel shall be approved by the COR in writing via memorandum or e-mail prior to the contractor incurring any travel expenses and prior to any departure. All travel costs associated with the performance of work will be reimbursed in accordance with the Federal Travel Regulations (FTR). No profit or fee shall be added. Costs incurred for transportation and per diem (lodging, meals and incidental expenses) will be billed in accordance with the regulatory implementation of Public Law 99-234, FAR 31.205-46 Travel Costs, and the contractor’s cost accounting system.

10.

SECURITY

10.1 The contractor shall possess a DSS TOP SECRET with an SCI capability Facility Clearance and employees working on this program must be U.S. citizens, and will require a minimum of a DoD TOP SECRET clearance with an SCI caveat to provide the required support. Clearances must be in place prior to contract award. A Visitor Request must be provided for each contractor employee working on this contract who will require access to any DTRA site. TOP SECRET must be granted by the Defense Security Service (DSS). The contractor shall comply with all terms of the DD 254, and the National Industrial Security Program Operating Manual (NISPOM), DoD 5220.22-M, NATIONAL INDUSTRIAL SECURITY PROGRAM, and any revisions to that manual. The contractor shall provide all forms and information, apply for clearances and shall be responsible for any expense incurred in obtaining TOP SECRET security clearances for the contractor employees.

10.2 Contractors shall comply with all DoD requirements for marking, handling, storing and transporting classified documents, working papers, notes, media, etc. (herein referred to as documents) while in the possession of the contractor. This includes any document the contractor may generate in performance of task orders associated with this contract.

10.3 Contractor shall demonstrate sound and proven Operations Security practices, ensuring unclassified/sensitive information associated with the performance of the contract will be properly protected at all times.

10.4 The contractor shall adhere to all access control policies and procedures for the facility where they are performing. Contractor personnel shall wear security identification badges at all times while in DTRA facilities as access cards and Identification Cards (IDs) are presented upon request at all entry control points. Lost or stolen IDs or badges shall be verbally reported immediately, and followed up in writing, within 24 hours of incident to the DTRA Contracting Officer Representative.

10.5 Before any Contractor employee performs work at DTRA, the Contractor shall verify and submit written proof of security clearance information (Visit Authorization Letter [VAL]) to the DTRA Security Office. The VALs for collateral security clearance shall be typewritten, contain the information specified in paragraphs 6-103, 6-104 and 6-105 of the NISPOM, and be submitted to the DTRA Security Support Branch (Visitor Control). The term of the VAL shall be for the term of the contract. The Contractor shall provide proof of U.S. citizenship for all contracted employees prior to entering the DTRC.

10.6 The contractor must be responsible for safeguarding all Government property provided for contractor use. At the end of each work period, all Government property, equipment and materials must be secured.

ATTACHMENT 1

HDTRA1-11-R-0024