Attachment_1_Statement-of-Work.pdf

CONTRACTOR SUPPORT

FOR THE U.S. COAST GUARD OFFICE OF INFORMATION ASSURANCE &

SPECTRUM POLICY VOUCHER PROGRAM

STATEMENT OF WORK

1.0 GENERAL.

1.1 SCOPE.

The purpose of this contract is to purchase Information Assurance (IA) professional certification exam vouchers (in accordance with DoD 8507.1, DoD IA Workforce) from one source and once purchased have the capability to issue, track and report the status of the vouchers via a secure web accessible application. This includes support for all products identified in section 5.0 of the SOW.

1.2 BACKGROUND.

The U.S. Coast Guard network operates on DoD’s Global Information Grid and is therefore required to follow DoD’s IA Workforce requirements per DoD 8570.1 and DoD 8570.01M. In 2009, the U.S. Coast Guard Chief Information Officer (CIO) signed policy implementing the Coast Guard’s IA Professional Certification Program.

The IA Professional Certification Program is managed by the Chief Information Security Officer’s (CISO) Office at CG Headquarters. The program requires CG personnel (i.e. Civilian and Military) in IA positions to obtain an IA professional certification per DoD and CG polices. IA professional certification exam vouchers are required from multiple vendors (Per Section 5.1). In addition annual maintenance fees (AMF) are required from the same vendors. This process is currently managed manually by the CG CISO Office. Exam and AMF vouchers are procured from vendors as needed. Once received the vouchers are added to a spreadsheet for tracking and then emailed to the CG IA Professional at which time the CG IA Professional schedules the exam or pays the AMF.

1.3 CONTRACTOR PERSONNEL.

The Contractor shall provide qualified personnel to perform all requirements specified in this contract.

1.4 KEY PERSONNEL. Not Applicable.

1.5 SECURITY. Not Applicable.

1.6 PERIOD OF PERFORMANCE.

This contract has a five year ordering period from date of award.

1.7 PLACE OF PERFORMANCE. Contractor’s Facility.

1.8 HOURS OF OPERATION. Not Applicable.

1.9 TRAVEL.

Travel is not authorized under this contract.

1.10 KICK-OFF MEETING.

A kick-off meeting shall be held with the Contracting Officer (KO), Contracting Officer’s Representative (COR) and CISO Representative within five (5) days after contract award. Meeting shall be held at U.S. Coast Guard

Headquarters in Washington, DC or via teleconference.

1.11 PROJECT PLAN. Not Applicable.

1.12 STATUS REPORTS.

The contractor shall provide a monthly status report no later than the fifth business day of the month to the CISO Representative via electronic mail per guidelines set in SOW Section 1.14. This report shall include a summary of all exam vouchers distributed to individual certification candidates with proof of preparatory course; monitoring of unused vouchers; reporting of exam results; and reporting compliance activity of certification attainment.

1.13 STATUS MEETINGS. The Contractor shall be available for status meetings as requested by the COR.

Status meetings may be held at U.S. Coast Guard Headquarters in Washington, DC or via teleconference.

1.14 GENERAL REPORT REQUIREMENTS.

The Contractor shall provide all written reports in electronic format with read/write capability using applications that are compatible with Coast Guard Standard Workstation (Windows 10 and Microsoft Office Applications) within 48 hours of request by COR. Additional report requirements may be specified in each task order awarded under this contract.

2.0 GOVERNMENT TERMS & DEFINITIONS.

2.0.1 COR – Contracting Officer’s Representative

2.0.2 KO – Contacting Officer

2.0.3 CISO – Chief Information Security Officer

2.0.4 SOW – Statement of Work

2.0.5 USCG – United States Coast Guard

2.0.6 DoD – Department of Defense

3.0 GOVERNMENT FURNISHED RESOURCES. Not Applicable

4.0 CONTRACTOR FURNISHED PROPERTY.

The Contractor shall furnish all materials and services necessary to fulfill the requirements of task orders awarded under this contract.

5.0 REQUIREMENTS. The contractor shall provide certification exam vouchers, tracking and reporting support for the specified period of performance in paragraph 1.6. Once procured, the vouchers shall be managed via a secure web application. The secure web application shall have the following functionality:

5.0.1 Compatible with Internet Explorer 11

5.0.2 Secure log-on

5.0.3 Ability to send email notifications to members receiving vouchers

5.0.4 Track issuance of vouchers by members CG email address and Unit

5.0.5 Status of all procured and issued vouchers

5.0.6 Ability to run adhoc reports, to track vouchers issued and who they were issued to for specific time periods for each category of voucher, show total vouchers available and the number that were consumed by voucher type. Reports should be able to be run bi-weekly.

5.0.7 Vouchers must be valid for one year from date of purchase

5.0.8 Ability to recall and reissue a voucher

5.1 VOUCHERS

The contractor shall provide exam certification and annual maintenance fee vouchers (per DoD 8570.1 and DoD 8570.01M) to be ordered through task orders awarded under this contract. Current certification vouchers to include:

Vendor Voucher Vendor Voucher

COMPTIA Security+ ISC

Net+ Certified Information System Security Professional (CISSP)

A+ Certified Authorization Official (CAP)

Advanced Security Practitioner (CASP)

Systems Security Certified Practitioner

(SSCP)

CE Tokens Information Systems Security Management Professional (CISSP-ISSMP)

CASP, Security+, Network+ CE Tokens

SANS

Institute

GIAC Certified Incident Handler (CIH) Exam Voucher

ISACA Certified Information Security Manager

(CISM)

GIAC Security Leadership (GSLC) Exam Voucher

Certified Information Systems Auditor

(CISA)

GIAC Security Essentials (GSEC) Exam Voucher

CISA Annual Maintenance Fee (AMF)

GIAC Certified Intrusion Analyst (GCIA) Exam Voucher

GIAC GSLC

EC

Council

Certified Ethical Hacker (CEH)

5.2 VOUCHER MAINTENANCE

The Contractor shall manage vouchers issued under individual task orders. Management efforts to include:

meeting exam voucher prerequisite requirements, distribution of exam vouchers to individual certification candidates; monitoring of unused vouchers; reporting of exam results; and reporting compliance activity of certification attainment.

6.0 REFERENCES. None

7.0 DELIVERABLES.

Deliverable Due Date

Contract Kick-Off Meeting NLT five (5) days after contract award

Monthly Status Reports NLT fifth (5th) business day of each month

Certification Exam Vouchers NLT Five (5) days after receipt of funded delivery order