II.D.iii. Attachment Statement of Work N6660424Q0596.pdf

v3.6_February2024

STATEMENT OF WORK (SOW)/PERFORMANCE WORK STATEMENT (PWS)

(Cybersecurity Training)

1.0 Background

The Naval Undersea Warfare Center Division Newport (NUWCDIVNPT) Cybersecurity

Program Manager (CWF PM) and Information Systems Security Manager (ISSM) are responsible for ensuring that the Government civilian Cybersecurity Workforce (CWF) practitioners are qualified to an industry baseline knowledge level, and specialization for operating systems (OS), with certifications in accordance SECNAV M-5239.2. These baseline and OS certifications are achieved via industry training courses, which provide a minimum qualification standard for the work roles and specialty areas within the Command’s Information

Systems (IS) portfolio.

1.1 Place of Performance

The contractor shall instruct the classes at a local hotel conference room within 10 miles of NUWCDIVNPT.

1.2 Authorized Users

This is a service contract for training. NUWCDIVNPT all codes cybersecurity workforce employees.

1.3 Sponsors

NUWCDIUVNPT. Funding is provided by Code 90 Overhead Budget.

1.4 Types of Funding

Funding for the Fiber Optic Training is provided by Code 90 Overhead Funding.

1.5 Period of Performance

Period of performance is 12 August 2024 – 30 September 2026.

2.0 Scope

Training is to be provided for cybersecurity workforce employees to obtain or update their required certification in accordance with SECNAV M-5239.2.

The award shall be for the Base Course, “Security + (with Exam)”. This course will be held before 30 September 2024. All training is to be conducted in a Face-to-Face Environment.

Procurement of additional classes will be scheduled on an individual basis directly with the contractor to the mutual agreement of the contractor and Code 1016. The contractor shall provide trainers qualified to facilitate the trainings. The contractor is responsible for providing all hardware, software, laptops and any other training materials (textbooks) necessary to teach the courses. For Security + classes, if exams are not administered the last afternoon of class, a voucher will be given to each student to schedule the exam on their own time. A training certificate for each individual shall be delivered upon class completion

2.1 Program or Systems Supported

Code 90 Training Program

2.2: The contractor shall conduct any assortment of the following courses:

• “Security + (with exam)” (5-Day Class)

• “CompTIA Advanced Security Practitioner (CASP +)” No Exam (5-Day Course)

• “Cloud +” (5-Day Course)

3.0 Applicable Documents

N/A

4.0 Technical Requirements:

Original Requirements and Options:

1. The original requirement is to hold the following (BASE COURSE)

CLIN 0001 “Security +” (with exam)

FY 25 OPTIONS:

CLIN 0002: “Security +” (With exam)

CLIN 0003: “Security +” (With exam)

CLIN 0004: “Security +” (With exam)

CLIN 0005: “CompTIA Advanced Security Practitioner” (CASP +) No Exam

CLIN 0006: “CompTIA Advanced Security Practitioner” (CASP +) No Exam

CLIN 0007: “Cloud +” No Exam

FY 26 OPTIONS:

CLIN 0008: “Security +” (With exam)

CLIN 0009: “Security +” (With exam)

CLIN 0010: “CompTIA Advanced Security Practitioner” (CASP +) No Exam

CLIN 0011: “Cloud +” No Exam

CLIN 0012: “Cloud +” No Exam

4.1.1 Instruct “Security +” course

The contractor will conduct the five-day course entitled “Security +”. The contractor shall provide all required course materials for a minimum of twenty (20) attendees per class. If exam is not administered on the last afternoon of class, participants will receive an exam voucher to take the Security + exam on their own time. Course Description: CompTIA Security + training covers all six domains with practice test papers, study materials and final exam preparation. You will learn the 6 domains of CompTIA Security +. They are: Threats, attacks, and vulnerabilities;

Technologies and tools; Architecture and design; Identity and access management; Rick management; Cryptography and PKI (Public Key Infrastructure). This course covers the major principles of network security and risk management. Students will learn: Installation and configuration of systems to secure applications, networks and devices; Learning to conduct threat analysis; Learning essential mitigation techniques and Managing risk mitigation activities.

5.0 Progress Reports

6.0 Government Furnished Information

7.0 Government Furnished Property

8.0 Quality Surveillance and Performance Standards

9.0 Information and Communication Technology (ICT) Accessibility Requirements

The Government has determined that this procurement is an exception to the Information and

Communication Technology (ICT) Accessibility Standards (36 C.F.R. Part 1194, Appendix A).

Notwithstanding that an exception exists, the Contractor may furnish items or services provided under this contract that comply with the ICT Accessibility Standards (36 C.F.R. Part 1194, Appendix A).

10.0 Security Compliance