RFQ_M68909-24-Q-7624__Amendment1.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as p rovid ed herein, all terms and cond itions o f th e document referenced in Item 9A o r 10 A, as hereto fore chang ed , remains un ch an ged and in full force and effect.

15A. NAME AND T IT LE OF SIGNER (T ype or print )

30-105-04EXCEP TION T O SF 30

AP PROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) P rescribed by GSA

FAR (48 CFR) 53.243

Amendment to RFQ M68909-24-Q-7624 issued to address vendor questions listed on the SF-30 block 14 continuation page.

1. CONTRACT ID CODE PAGE OF PAGES

J 1 3

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 08-Jul-2024

16B. UNITED STAT ES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Cont ract ing Officer)(Signat ure of person a ut horized t o sign)

8. NAME AND ADDRESS OF CONT RACT OR (No., St reet , County, Sta te and Zip Code) X M6890924Q7624

X 9B. DATED (SEE IT EM 11)

27-Jun-2024

10B. DATED (SEE IT EM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS IT EM ONLY AP PLIES TO AMENDMENT S OF SOLICITAT IONS

X Th e ab ove n umbered solicitation is amend ed as set forth in Item 1 4. Th e hou r and date sp ecified for receipt o f Offer is extend ed , X is not extended.

Offer mu st ackn owled ge receipt of this amen dment p rior to the h our an d d ate specified in the solicitation or as amen ded b y o ne of the following method s:

(a) By completing Items 8 and 15 , and returnin g co pies of the amen dment; (b ) By ackn owled ging receipt of this amen dment o n each copy of the o ffer sub mitted ;

o r (c) By separate letter o r teleg ram wh ich includ es a reference to th e so licitation and amend men t nu mbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtu e of this amen dment y ou desire to change an offer already su bmitted, su ch change may be made by teleg ram or letter, p rovid ed each telegram o r letter mak es reference to th e so licitation and this amen dment, an d is receiv ed prio r to the op en ing hou r and date sp ecified.

12. ACCOUNTING AND AP PROP RIATION DATA (If required)

13. THIS ITEM AP PLIES ONLY T O MODIFICATIONS OF CONT RACT S/ORDERS.

IT MODIFIES T HE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED P URSUANT T O: (Spec ify aut horit y) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN T HE

CONT RACT ORDER NO. IN ITEM 10A.

B. T HE ABOVE NUMBERED CO NTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office , appropria tion dat e, et c.) SET FORT H IN ITEM 14, PURSUANT TO T HE AUT HORITY OF FAR 43.103(B).

C. T HIS SU PP LEMENTAL AGREEMENT IS ENT ERED INTO PURSUANT TO AUT HORITY OF:

D. OT HER (Specify type of modificat ion and aut horit y)

E. IMP ORTANT: Contrac tor is not, is required t o sign this document and re turn copies to t he issuing office.

14. DESCRIP TION OF AMENDMENT/MODIFICATION (Organize d by UCF sec tion headings, inc luding solic ita tion/contrac t subject mat t er whe re feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If app licable)

6. ISSUED BY

3. EFFECTIVE DATE

08-Jul-2024

CODE

COMMANDING OF FICER

CONTRACTS, M CTSSA

BOX 555171

CAMP PENDLET ON CA 92055-5171

M68909 7 . ADMINISTERED BY (If o ther than item 6)

4 . REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

M6890924Q7624

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 30 - BLOCK 14 CONTINUATION PAGE

The following have been added by full text:

AMENDMENT 001

Vendor Question: What cybersecurity platform does the Government intend to use to meet its requirements?

Government Answer: The Government does not intend to use any specific cybersecurity platform. Any platform with the capabilities detailed in the RFQ will meet the Government’s requirements for this procurement.

Vendor Question: What Tenable products must the contractor ensure compatibility with? Which version of these products must the contractor shape their solution to support?

Government Answer: Tenable Nessus (Latest Version)

Vendor Question: What specific requirements and limitations for operating in the air-gapped environment does the Government have in mind?

Government Answer: For any tool/vendor to be considered, the tool must be self-contained whether as a single Virtual Machine or multiple. There can be no reach back to vendor servers or the internet. Software updates must be delivered in a method where it can be downloaded to a disk and must be self-contained as well.

Custom scripts must be able to be imported without review, approval, and dissemination with vendor.

Vendor Question: Are there any specific hardware or software configurations offerors should be aware of?

Government Answer: Vendor solution must be able to be deployed on ESXi. Solution must also be able to ingest data from Rapid7 tools

Vendor Question: Are there any specific scripting languages or frameworks preferred for creating custom attack scripts?

Government Answer: Python (.py), Bash Script (.sh), Windows Batch (.bat) and Powershell (.ps1)

Vendor Question: Are there any specific data formats or APIs that the imported vulnerability scan data should adhere to?

Government Answer: At minimum: XML, CSV, HTML, .nessus

Vendor Question: Can the Government provide any guidelines or documentation on the required depth and complexity of the APT emulation?

Government Answer: Depth and Complexity should emulate APT campaigns from publicly available sources and follow steps from initial access to data exfiltration

Vendor Question: Can the Government provide an expected license count for nodes, users, or seats required to run this software?

Government Answer: Single instance, 15 users

Vendor Question: Are there specific pricing models or structures preferred for this procurement (milestone, subscription)?

Government Answer: Yearly Subscription

M6890924Q7624

(End of Summary of Changes)