E1 Modification to M0068125Q00030001.pdf

M937375655138

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

The purpose of this amendment is to revise the Statement of Work, to include additional specs for the ISC410 ISC/SCADA Security training.

1. CONTRACT ID CODE PAGE OF PAGES

J 1 4

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 17-Dec-2024

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X M0068125Q0003

X 9B. DATED (SEE ITEM 11)

12-Dec-2024

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer is extended, X is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

17-Dec-2024

CODE

REGIONAL CONTRACTING OFFICE-MCIWEST

P O BOX 555027

CAMP PENDLETON CA 92055-5027

M00681 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

M0068125Q0003

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 1449 - CONTINUATION SHEET

DELIVERIES AND PERFORMANCE

The following Delivery Schedule item for CLIN 0001 has been changed from:

DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

30-SEP-2025 5 MARINE CORPS LOGISTICS BASE

BARSTOW

MARINE CORPS LOGISTICS BASE

BARSTOW BLDG. 236

BARSTOW CA 92311-5050

(760) 577-6600 FOB: Destination

M93737

To:

DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

03-FEB-2025 5 MARINE CORPS LOGISTICS BASE

BARSTOW

MARINE CORPS LOGISTICS BASE

BARSTOW BLDG. 236

BARSTOW CA 92311-5050

(760) 577-6600

M93737

The following Delivery Schedule for CLIN 0002 has been added:

DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

03-FEB-2025 5 N/A

The following have been modified:

STATEMENT OF WORK

Statement of Work (SOW) Statement of Work (SOW) Sans ICS410

Marine Corps Logistics Base (MCLB) Barstow, California 92311Annual FRCS Training

Background With the push to secure our Facility Related Control Systems from potential enemies, training is essential to understand the risks involved and develop adequate systems controls and measures. The requirements of the Facilities Department to develop projects that meet RMF and Authority to Operate said systems require trained personnel to operate, manage and monitor our systems. This training is the first step in developing the program to meet the Marine Corps requirement to secure our control system.

Objectives ICS410: ICS/SCADA Security Essentials provides a foundational set of standardized skills and knowledge for industrial cybersecurity professionals. The course is designed to ensure that the workforce involved in supporting and defending industrial control systems is trained to keep the operational environment safe, secure, and resilient against current and emerging cyber threats. The installation needs ISC410 ISC/SCADA Security training in an online format that includes:

• An understanding of industrial control system components, purposes, deployments, significant drivers, and constraints.

• Hands-on lab learning experiences to control system attack surfaces, methods, and tools

• Control system approaches to system and network defense architectures and techniques

• Incident-response skills in a control system environment

• Governance models and resources for industrial cybersecurity professionals.

• Better understand various industrial control systems and their purpose, application, function, and dependencies on network IP and industrial communications

• Work with control network infrastructure design (network architecture concepts, including topology, protocols, and components) and their relation to IEC 62443 and the Purdue Model.

• Run Windows command line tools to analyze the system looking for high-risk items

• Run Linux command line tools (ps, ls, netstat, ect) and basic scripting to automate the running of programs to perform continuous monitoring of various tools

• Work with operating systems (system administration concepts for Unix/Linux and/or Windows operating systems)

• Better understand the systems' security lifecycle

• Better understand information assurance principles and tenets (confidentiality, integrity, availability, authentication, non-repudiation)

• Use your skills in computer network defense (detecting host and network-based intrusions via intrusion detection technologies)

• Implement incident response and handling methodologies

• Map different ICS technologies, attacks, and defenses to various cybersecurity standards including NIST

Cyber Security Framework, ISA/IEC 62443, ISO/IEC 27001, NIST SP 800-53, Center for Internet Security Critical Security Controls, and COBIT 5

Scope

Students will develop and reinforce a common language and understanding of Industrial Control System (ICS) cybersecurity as well as the important considerations that come with cyber-to-physical operations within these environments. Each student will receive a programmable logic controller (PLC) device to keep. The PLC contains physical inputs and outputs that will be programmed in class and mapped to an operator interface, or HMI, also created in class. This improved hardware-enabled approach provides the necessary cyber-to-physical knowledge that allows students to better understand important ICS operational drivers and constraints that require specific safety protection, communications needs, system management approaches, and cybersecurity implementations. Essential terms, architectures, methodologies, and devices are all covered to build a common language for students from a variety of different roles.

This course will provide:

• An understanding of industrial control system components, purposes, deployments, significant drivers, and constraints.

• Hands-on lab learning experiences to control system attack surfaces, methods, and tools

• Control system approaches to system and network defense architectures and techniques

• Incident-response skills in a control system environment

• Governance models and resources for industrial cybersecurity professionals.

• SANS ICS410: ICS/SCADA Security Essential Exam Voucher

• Training for five (5) Students

Delivery This training will be delivered in an online, work at your own pace environment.

Place of Performance Online

Period of Performance 03 Feb 2025 through 02 Feb 2026

(End of Summary of Changes)