N61340/N6134019R0010Cyber_Security_Training_Combined_Synopsis_Final_5.6.19.pdf

This is a combined synopsis/solicitation for commercial items prepared in accordance with (IAW) the format in Subpart 12.6, Streamlined Procedures, under Acquisition of Commercial Items, as supplemented with additional information included in this notice. This announcement constitutes the only solicitation; quotes are being requested and a written (formal) solicitation will not be issued.

Combined Synopsis/Solicitation, #N61340-19-R-0010 is issued as a request for quote (RFQ) and incorporates the provisions and clauses in effect from regulations posted to http://farsite.hill.af.mil inclusive, but not limited to, Federal Acquisition Circular (FAC) 2019-01.

This procurement is being solicited as a 100% small business set-aside with an associated North American Classification System (NAICS) code 611420 (Computer Training), a size standard of $11,000,000.00 and Product & Service Code (PSC) U006.

This RFQ sets forth the requirement for information systems security training to be provided for Naval Air Warfare Center Training Systems Divisions (NAWCTSD) Cybersecurity personnel. The Department of Defense (DoD) and the Department of the Navy (DoN) require all personnel in Cybersecurity or Information Systems Security positions to participate in the Continuous Learning Program (CLP). The performance of this contract will be for a Contractor to develop a training course and to deliver a live course through the Internet to NAWCTSD Cybersecurity certified workforce.

NAWCTSD Personnel Cybersecurity Training

CLIN Item Name UI QTY 0001 Cyber Security Training for NAWCTSD Personnel EA 4

The Government intends to award a purchase order in the form of a Firm-Fixed-Price Contract and the anticipated award date is no later than 30 May 2019.

The Contractor shall deliver on-line live training through the Internet directly to the student’s desktop to facilitate Government personnel access from different locations and different time zones. The period of performance (POP) shall be from 16 June 2019 through 30 September 2019. The Contractor shall deliver the training in four (4) sessions every thirty (30) days to support participation for no less than thirty (30) students per session. The Contractor shall make the instructor-led recorded sessions and training material available to the registered students on-demand throughout the period of performance (PoP). The contractor shall allow students access to the recorded sessions during the PoP in the event students miss training during the live session. The first training session shall be made available no later than 18 June 2019, and each month thereafter until all four (4) sessions have been completed. Upon completion, the contractor shall have each student complete a course training evaluation using the provided Training Evaluation Form at the end of the 3-day session. The completed Training Evaluation Forms shall then be delivered to the Government Technical Point of Contact.

Please see the attached Statement of Work (SOW) and Training Evaluation Form for further details. The vendor shall fulfill all specified training requirements specified in the SOW.

The Government Technical Point of Contact is Ms. Karen Seckington, at karen.seckington@navy.mil.

Evaluation Criteria:

The Government will award a purchase order resulting from this combined synopsis/solicitation to the responsible Offeror whose quote conforming to this notice will be the most advantageous, representing the best value to the Government. A firm-fixed-price purchase order will be awarded for Fiscal Year 2019. If multiple quotes are received, the Government will award on a lowest price technically acceptable basis to the Offeror meeting the specifications and delivery date requirement of this combined synopsis/solicitation.

Each quote should include the following information regarding the requirements:

The Offeror shall provide proof to be a certified Training Provider for the McAfee ePolicy Orchestrator (ePO) System Administration V5.3 or later.

Identify if the contractor will be developing a new course curriculum, or if the course is a part of its existing catalogue.

The Contractor’s proposal shall discuss its capabilities to deliver on-line live training through the Internet and students IT requirements to receive the training to the desktop.

An affirmative statement must also be included that states the vendor will perform in accordance with all the requirements in the Statement of Work.

The failure of an Offeror to provide information sufficient to determine conformance with the combined synopsis/solicitation may result in the Offeror being ineligible for award.

All information shall be furnished at no cost or obligation to the Government. A determination by the Government not to compete this proposed action based upon responses to this notice is solely within the discretion of the Government. To be eligible for award the successful offeror MUST BE IN SYSTEM FOR AWARD MANAGEMENT. Information concerning SAM registration requirements may be viewed via the Internet at https://www.sam.gov/portal/SAM/.

The Government requests to obtain any warranties for items being procured that are consistent with customary commercial practices.

The following Federal Acquisition Regulation (FAR) provisions and clauses apply to this acquisition:

The provision at FAR 52.212-2, Evaluation- Commercial Items, does not apply.

Offerors shall include a completed copy of the provision at 52.212-3, Offeror Representations and Certifications – Commercial Items with its offer.

FAR 52.204-7 - System for Award Management FAR 52.204-13 - System for Award Management Maintenance FAR 52.204-16 - Commercial and Government Entity Code Reporting FAR 52.204-17 - Ownership or Control of Offeror FAR 52.204-20 - Predecessor of Offeror FAR 52.204-21 - Basic Safeguarding of Covered Contractor Information Systems FAR 52.209-11 - Representation by Corporations Regarding Delinquent Tax Liability or a Felony Conviction under any Federal Law FAR 52.212-1 - Instructions to Offerors-Commercial Items FAR 52.212-4 - Contract Terms and Conditions--Commercial Items FAR 52.219-1 - Small Business Program Representations – Alternate I FAR 52.222-22 - Previous Contracts and Compliance Reports FAR 52.222-25 - Affirmative Action Compliance FAR 52.233-1 – Disputes FAR 52.243-1 - Changes—Fixed Price – Alternate I

The clause at FAR 52.212-5, Contract Terms and Conditions Required to Implement Statutes or Executive Orders- Commercial Items applies to this acquisition. The following subparagraphs of FAR 52.212-5(b) and (c) apply:

52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT

STATUTES OR EXECUTIVE ORDERS - COMMERCIAL ITEMS (JAN 2019)

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial items:

(1) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (Jan 2017) (section 743 of Division E, Title VII, of the Consolidated and Further

Continuing Appropriations Act 2015 (Pub. L. 113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(2) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab and Other Covered Entities (Jul 2018) (Section 1634 of Pub. L.

115-91).

(3) 52.209-10, Prohibition on Contracting with Inverted Domestic Corporations (Nov 2015)

(4) 52.233-3, Protest After Award (AUG 1996) (31 U.S.C. 3553).

(5) 52.233-4, Applicable Law for Breach of Contract Claim (OCT 2004) (Public Laws 108-77, 108-78 (19 U.S.C. 3805 note)).

(b) The Contractor shall comply with the FAR clauses in this paragraph (b) that the contracting officer has indicated as being incorporated in this contract by reference to implement provisions of law or Executive orders applicable to acquisitions of commercial items:

___ (1) 52.203-6, Restrictions on Subcontractor Sales to the Government (Sept 2006), with Alternate I (Oct 1995) (41 U.S.C. 4704 and 10 U.S.C. 2402).

___ (2) 52.203-13, Contractor Code of Business Ethics and Conduct (Oct 2015) (41 U.S.C.

3509).

___ (3) 52.203-15, Whistleblower Protections under the American Recovery and Reinvestment Act of 2009 (Jun 2010) (Section 1553 of Pub L. 111-5) (Applies to contracts funded by the American Recovery and Reinvestment Act of 2009).

___ (4) 52.204-10, Reporting Executive Compensation and First-Tier Subcontract Awards (Oct 2018) (Pub. L. 109-282) (31 U.S.C. 6101 note).

___ (5) [Reserved]

___ (6) 52.204-14, Service Contract Reporting Requirements (Oct 2016) (Pub. L. 111-117, section 743 of Div. C).

___ (7) 52.204-15, Service Contract Reporting Requirements for Indefinite-Delivery Contracts (Oct 2016) (Pub. L. 111-117, section 743 of Div. C).

___ (8) 52.209-6, Protecting the Government’s Interest When Subcontracting with Contractors Debarred, Suspended, or Proposed for Debarment (Oct 2015) (31 U.S.C. 6101 note).

___ (9) 52.209-9, Updates of Publicly Available Information Regarding Responsibility Matters (Oct 2018) (41 U.S.C. 2313).

___ (10) [Reserved]

___ (11) (i) 52.219-3, Notice of HUBZone Set-Aside or Sole-Source Award (Nov 2011) (15 U.S.C. 657a).

___ (ii) Alternate I (Nov 2011) of 52.219-3.

___ (12) (i) 52.219-4, Notice of Price Evaluation Preference for HUBZone Small Business Concerns (Oct 2014) (if the offeror elects to waive the preference, it shall so indicate in its offer)(15 U.S.C. 657a).

___ (ii) Alternate I (Jan 2011) of 52.219-4.

___ (13) [Reserved]

_X_ (14) (i) 52.219-6, Notice of Total Small Business Aside (Nov 2011) (15 U.S.C. 644).

___ (ii) Alternate I (Nov 2011).

___ (iii) Alternate II (Nov 2011).

___ (15) (i) 52.219-7, Notice of Partial Small Business Set-Aside (June 2003) (15 U.S.C. 644).

___ (ii) Alternate I (Oct 1995) of 52.219-7.

___ (iii) Alternate II (Mar 2004) of 52.219-7.

___ (16) 52.219-8, Utilization of Small Business Concerns (Oct 2018) (15 U.S.C. 637(d)(2) and (3)).

___ (17) (i) 52.219-9, Small Business Subcontracting Plan (Aug 2018) (15 U.S.C. 637 (d)(4)).

___ (ii) Alternate I (Nov 2016) of 52.219-9.

___ (iii) Alternate II (Nov 2016) of 52.219-9.

___ (iv) Alternate III (Nov 2016) of 52.219-9.

___ (v) Alternate IV (Aug 2018) of 52.219-9.

___ (18) 52.219-13, Notice of Set-Aside of Orders (Nov 2011) (15 U.S.C. 644(r)).

___ (19) 52.219-14, Limitations on Subcontracting (Jan 2017) (15 U.S.C. 637(a)(14)).

___ (20) 52.219-16, Liquidated Damages—Subcontracting Plan (Jan 1999) (15 U.S.C.

637(d)(4)(F)(i)).

___ (21) 52.219-27, Notice of Service-Disabled Veteran-Owned Small Business Set-Aside (Nov 2011) (15 U.S.C. 657f).

_X_ (22) 52.219-28, Post Award Small Business Program Rerepresentation (Jul 2013) (15 U.S.C. 632(a)(2)).

___ (23) 52.219-29, Notice of Set-Aside for, or Sole Source Award to, Economically Disadvantaged Women-Owned Small Business Concerns (Dec 2015) (15 U.S.C. 637(m)).

___ (24) 52.219-30, Notice of Set-Aside for, or Sole Source Award to, Women-Owned Small Business Concerns Eligible Under the Women-Owned Small Business Program (Dec 2015) (15 U.S.C. 637(m)).

_X_ (25) 52.222-3, Convict Labor (June 2003) (E.O. 11755).

___ (26) 52.222-19, Child Labor—Cooperation with Authorities and Remedies (Jan 2018) (E.O. 13126).

_X_ (27) 52.222-21, Prohibition of Segregated Facilities (Apr 2015).

_X_ (28) (i) 52.222-26, Equal Opportunity (Sep 2016) (E.O. 11246).

___ (ii) Alternate I (Feb 1999) of 52.222-26.

___ (29) (i) 52.222-35, Equal Opportunity for Veterans (Oct 2015) (38 U.S.C. 4212).

___ (ii) Alternate I (July 2014) of 52.222-35.

___ (30) (i) 52.222-36, Equal Opportunity for Workers with Disabilities (Jul 2014) (29 U.S.C.

793).

___ (ii) Alternate I (July 2014) of 52.222-36.

___ (31) 52.222-37, Employment Reports on Veterans (Feb 2016) (38 U.S.C. 4212).

___ (32) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (Dec 2010) (E.O. 13496).

_X_ (33) (i) 52.222-50, Combating Trafficking in Persons (JAN 2019)

(22 U.S.C. chapter 78 and E.O. 13627).

___ (ii) Alternate I (Mar 2015) of 52.222-50, (22 U.S.C. chapter 78 and E.O. 13627).

___ (34) 52.222-54, Employment Eligibility Verification (Oct 2015). (E. O. 12989). (Not applicable to the acquisition of commercially available off-the-shelf items or certain other types of commercial items as prescribed in 22.1803.)

___ (35) (i) 52.223-9, Estimate of Percentage of Recovered Material Content for EPA- Designated Items (May 2008) (42 U.S.C. 6962(c)(3)(A)(ii)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

___ (ii) Alternate I (May 2008) of 52.223-9 (42 U.S.C. 6962(i)(2)(C)). (Not applicable to the acquisition of commercially available off-the-shelf items.)

___ (36) 52.223-11, Ozone-Depleting Substances and High Global Warming Potential Hydrofluorocarbons (Jun 2016) (E.O.13693).

___ (37) 52.223-12, Maintenance, Service, Repair, or Disposal of Refrigeration Equipment and Air Conditioners (Jun 2016) (E.O. 13693).

___ (38) (i) 52.223-13, Acquisition of EPEAT® -Registered Imaging Equipment (Jun 2014) (E.O.s 13423 and 13514

___ (ii) Alternate I (Oct 2015) of 52.223-13.

___ (39) (i) 52.223-14, Acquisition of EPEAT® -Registered Television (Jun 2014) (E.O.s 13423 and 13514).

___ (ii) Alternate I (Jun 2014) of 52.223-14.

___ (40) 52.223-15, Energy Efficiency in Energy-Consuming Products (Dec 2007) (42 U.S.C.

8259b).

___ (41) (i) 52.223-16, Acquisition of EPEAT® -Registered Personal Computer Products (Oct 2015) (E.O.s 13423 and 13514).

___ (ii) Alternate I (Jun 2014) of 52.223-16.

_X_ (42) 52.223-18, Encouraging Contractor Policies to Ban Text Messaging while Driving (Aug 2011) (E.O. 13513).

___ (43) 52.223-20, Aerosols (Jun 2016) (E.O. 13693).

___ (44) 52.223-21, Foams (Jun 2016) (E.O. 13696).

___ (45) (i) 52.224-3, Privacy Training (Jan 2017) (5 U.S.C. 552a).

___ (ii) Alternate I (Jan 2017) of 52.224-3.

___ (46) 52.225-1, Buy American--Supplies (May 2014) (41 U.S.C. chapter 83).

___ (47) (i) 52.225-3, Buy American--Free Trade Agreements--Israeli Trade Act (May 2014) (41 U.S.C. chapter 83, 19 U.S.C. 3301 note, 19 U.S.C. 2112 note, 19 U.S.C. 3805 note, 19 U.S.C. 4001 note, Pub. L. 103-182, 108-77, 108-78, 108-286, 108-302, 109-53, 109-169, 109- 283, 110-138, 112-41, 112-42, and 112-43).

___ (ii) Alternate I (May 2014) of 52.225-3.

___ (iii) Alternate II (May 2014) of 52.225-3.

___ (iv) Alternate III (May 2014) of 52.225-3.

___ (48) 52.225-5, Trade Agreements (Aug 2018) (19 U.S.C. 2501, et seq., 19 U.S.C. 3301 note).

_X_ (49) 52.225-13, Restrictions on Certain Foreign Purchases (June 2008) (E.O.’s, proclamations, and statutes administered by the Office of Foreign Assets Control of the Department of the Treasury).

___ (50) 52.225-26, Contractors Performing Private Security Functions Outside the United States (Oct 2016) (Section 862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. 2302 Note).

___ (51) 52.226-4, Notice of Disaster or Emergency Area Set-Aside (Nov 2007) (42 U.S.C.

5150).

___ (52) 52.226-5, Restrictions on Subcontracting Outside Disaster or Emergency Area (Nov 2007) (42 U.S.C. 5150).

___ (53) 52.232-29, Terms for Financing of Purchases of Commercial Items (Feb 2002) (41 U.S.C. 4505), 10 U.S.C. 2307(f)).

___ (54) 52.232-30, Installment Payments for Commercial Items (Jan 2017) (41 U.S.C. 4505, 10 U.S.C. 2307(f)).

_X_ (55) 52.232-33, Payment by Electronic Funds Transfer--System for Award Management (Oct 2018) (31 U.S.C. 3332).

___ (56) 52.232-34, Payment by Electronic Funds Transfer—Other Than System for Award Management (Jul 2013) (31 U.S.C. 3332).

___ (57) 52.232-36, Payment by Third Party (May 2014) (31 U.S.C. 3332).

_X_ (58) 52.239-1, Privacy or Security Safeguards (Aug 1996) (5 U.S.C. 552a).

___ (59) 52.242-5, Payments to Small Business Subcontractors (Jan 2017) (15 U.S.C.

637(d)(12)).

___ (60) (i) 52.247-64, Preference for Privately Owned U.S.-Flag Commercial Vessels (Feb 2006) (46 U.S.C. Appx 1241(b) and 10 U.S.C. 2631).

___ (ii) Alternate I (Apr 2003) of 52.247-64.

___ (iii) Alternate II (Feb 2006) of 52.247-64.

(c) The Contractor shall comply with the FAR clauses in this paragraph (c), applicable to commercial services, that the Contracting Officer has indicated as being incorporated in this contract by reference to implement provisions of law or executive orders applicable to acquisitions of commercial items:

___ (1) 52.222-17, Nondisplacement of Qualified Workers (May 2014) (E.O. 13495)

___ (2) 52.222-41, Service Contract Labor Standards (Aug 2018) (41 U.S.C. chapter 67.).

___ (3) 52.222-42, Statement of Equivalent Rates for Federal Hires (May 2014) (29 U.S.C. 206 and 41 U.S.C. chapter 67).

___ (4) 52.222-43, Fair Labor Standards Act and Service Contract Labor Standards -- Price Adjustment (Multiple Year and Option Contracts) (Aug 2018) (29 U.S.C.206 and 41 U.S.C.

chapter 67).

___ (5) 52.222-44, Fair Labor Standards Act and Service Contract Labor Standards -- Price Adjustment (May 2014) (29 U.S.C. 206 and 41 U.S.C. chapter 67).

___ (6) 52.222-51, Exemption from Application of the Service Contract Labor Standards to Contracts for Maintenance, Calibration, or Repair of Certain Equipment--Requirements (May 2014) (41 U.S.C. chapter 67).

___ (7) 52.222-53, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain Services--Requirements (May 2014) (41 U.S.C. chapter 67).

___ (8) 52.222-55, Minimum Wages Under Executive Order 13658 (Dec 2015) (E.O. 13658).

___ (9) 52.222-62, Paid Sick Leave Under Executive Order 13706 (JAN 2017) (E.O. 13706).

___ (10) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations. (May 2014) (42 U.S.C. 1792).

(d) Comptroller General Examination of Record The Contractor shall comply with the provisions of this paragraph (d) if this contract was awarded using other than sealed bid, is in excess of the simplified acquisition threshold, and does not contain the clause at 52.215-2, Audit and Records -- Negotiation.

(1) The Comptroller General of the United States, or an authorized representative of the Comptroller General, shall have access to and right to examine any of the Contractor’s directly pertinent records involving transactions related to this contract.

(2) The Contractor shall make available at its offices at all reasonable times the records, materials, and other evidence for examination, audit, or reproduction, until 3 years after final payment under this contract or for any shorter period specified in FAR Subpart 4.7, Contractor Records Retention, of the other clauses of this contract. If this contract is completely or partially terminated, the records relating to the work terminated shall be made available for 3 years after any resulting final termination settlement. Records relating to appeals under the disputes clause or to litigation or the settlement of claims arising under or relating to this contract shall be made available until such appeals, litigation, or claims are finally resolved.

(3) As used in this clause, records include books, documents, accounting procedures and practices, and other data, regardless of type and regardless of form. This does not require the Contractor to create or maintain any record that the Contractor does not maintain in the ordinary course of business or pursuant to a provision of law.

(e)

(1) Notwithstanding the requirements of the clauses in paragraphs (a), (b), (c) and (d) of this clause, the Contractor is not required to flow down any FAR clause, other than those in this paragraph (e)(1) in a subcontract for commercial items. Unless otherwise indicated below, the extent of the flow down shall be as required by the clause—

(i) 52.203-13, Contractor Code of Business Ethics and Conduct (Jan 2019) (41 U.S.C.

3509).

(ii) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (Jan 2017) (section 743 of Division E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L. 113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(iii) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab and

Other Covered Entities (Jul 2018) (Section 1634 of Pub. L. 115-91).

(iv) 52.219-8, Utilization of Small Business Concerns (Oct 2018) (15 U.S.C. 637(d)(2) and (3)), in all subcontracts that offer further subcontracting opportunities. If the subcontract (except subcontracts to small business concerns) exceeds $700,000 ($1.5 million for construction of any public facility), the subcontractor must include 52.219-8 in lower tier subcontracts that offer subcontracting opportunities.

(v) 52.222-17, Nondisplacement of Qualified Workers (May 2014) (E.O. 13495). Flow down required in accordance with paragraph (1) of FAR clause 52.222-17.

(vi) 52.222-21, Prohibition of Segregated Facilities (Apr 2015).

(vii) 52.222-26, Equal Opportunity (Sep 2016) (E.O. 11246).

(viii) 52.222-35, Equal Opportunity for Veterans (Oct 2019) (38 U.S.C. 4212).

(ix) 52.222-36, Equal Opportunity for Workers with Disabilities (Jul 2014) (29 U.S.C.

793).

(x) 52.222-37, Employment Reports on Veterans (Feb 2016) (38 U.S.C. 4212).

(xi) 52.222-40, Notification of Employee Rights Under the National Labor Relations Act (Dec 2010) (E.O. 13496). Flow down required in accordance with paragraph (f) of FAR clause 52.222-40.

(xii) 52.222-41, Service Contract Labor Standards (Aug 2018), (41 U.S.C. chapter 67).

(xiii) (A) 52.222-50, Combating Trafficking in Persons (Jan 2019) (22 U.S.C. chapter 78 and E.O. 13627).

(B) Alternate I (Mar 2015) of 52.222-50 (22 U.S.C. chapter 78 E.O. 13627).

(xiv) 52.222-51, Exemption from Application of the Service Contract Labor Standards to Contracts for Maintenance, Calibration, or Repair of Certain Equipment-- Requirements (May 2014) (41 U.S.C. chapter 67.)

(xv) 52.222-53, Exemption from Application of the Service Contract Labor Standards to Contracts for Certain Services--Requirements (May 2014) (41 U.S.C. chapter 67)

(xvi) 52.222-54, Employment Eligibility Verification (Oct 2015) (E. O. 12989).

(xvii) 52.222-55, Minimum Wages Under Executive Order 13658 (Dec 2015).

(xviii) 52.222-62, Paid sick Leave Under Executive Order 13706 (JAN 2017) (E.O.

13706).

(xix) (A) 52.224-3, Privacy Training (Jan 2017) (5 U.S.C. 552a).

(B) Alternate I (Jan 2017) of 52.224-3.

(xx) 52.225-26, Contractors Performing Private Security Functions Outside the United States (Oct 2016) (Section 862, as amended, of the National Defense Authorization Act for Fiscal Year 2008; 10 U.S.C. 2302 Note).

(xxi) 52.226-6, Promoting Excess Food Donation to Nonprofit Organizations. (May 2014) (42 U.S.C. 1792). Flow down required in accordance with paragraph (e) of FAR clause 52.226-6.

(xxii) 52.247-64, Preference for Privately-Owned U.S. Flag Commercial Vessels (Feb 2006) (46 U.S.C. Appx 1241(b) and 10 U.S.C. 2631). Flow down required in accordance with paragraph (d) of FAR clause 52.247-64.

(2) While not required, the Contractor may include in its subcontracts for commercial items a minimal number of additional clauses necessary to satisfy its contractual obligations.

The following Defense Federal Acquisition Regulation Supplement (DFARS) clauses apply to this acquisition:

252.203-7000 Requirements Relating to Compensation of Former DoD Officials 252.203-7002 Requirement to Inform Employees of Whistleblower Rights 252.203-7005 Representation Relating to Compensation of Former DoD Officials.

252.232-7003 Electronic Submission of Payment Requests and Receiving Reports 252.232-7006 Wide Area WorkFlow Payment Instructions

Full version of the FAR / DFARS clauses can be located at http://farsite.hill.af.mil

Quotes are due no later than 2:00pm US Eastern Standard Time on 13 May 2019. Proposals will only be accepted via email to Contract Specialist, Mr. Andrew Yi at Andrew.yi1@navy.mil. Interested offerors shall also cc Mr. Alberto Amparo, Contracting Officer, at alberto.amparo@navy.mil. In addition to the information requested to substantiate technical acceptability responses must include the solicitation number; name, address and telephone number of Offeror; warranty information; discount terms, estimated delivery date; business type; CAGE code; and TAX ID number. Proprietary data in the responses will be protected where so designated.

Statement of Work for Cyber Security Training to be provided to NAWCTSD Personnel

1. Scope:

This Statement of Work (SOW) defines the requirements for information systems security training to be provided for Naval Air Warfare Center Training Systems Division (NAWCTSD) Cybersecurity personnel.

1.1 Background:

The Department of Defense (DoD) and the Department of the Navy (DoN) require all personnel in Cybersecurity or Information Systems Security positions to participate in the Continuous Learning Program (CLP). The DoN annual requirement for this program is forty (40) hours of continuous learning activity.

The performance of this contract will be for a Contractor to develop a training course and to deliver a live course through the Internet to NAWCTSD Cybersecurity certified workforce. This training will satisfy annual CLP requirements and offer the workforce a chance to learn (or refresh) a specific skillset detailed below.

2. Applicable Documents.

2.1. References:

a. DoDD 8140.01, Cyberspace Workforce Management, 11 AUG 2015

b. SECNAVINST 5239. 20A, DoN Cyberspace Information Technology and Cybersecurity Workforce Management and Qualification, 10 FEB 2016

c. SECNAV M-5239.2, DoN Cyberspace Information Technology and Cybersecurity Workforce Management and Qualification Manual, JUN 2016

d. DON DAWIA Operating Guide Policy Change -Continuous Learning Program

e. National Institute of Standards and Technology (NIST) Special Publication 800-53. Revision 4. Security and Privacy Controls for. Federal Information Systems and Organizations, April 2013

f. DISA Database Security Requirements Guide (SRG) Version 2, Release 8, 26 January 2018

g. DISA Application Security and Development Security Implementation Guide (STIG) Version 4.

h. DISA Microsoft SQL Server Database Security Implementation Guide (STIG) Version 1

3. Requirements.

3.1. The Contractor shall develop and deliver on-line training for the following Cybersecurity product:

-- Securing databases using DISA Security Requirements Guide (SRG) and Security Technical Implementation Guides (STIG’s)

3.2. The Contractor shall cover database security using the principles and guidelines identified in the SRGs/STIGs to provides an environment that contributes to the security requirements of DoD systems, and address the applicable NIST SP 800-53 cybersecurity controls that need to be applied to all systems and architectures using topics provided in enclosure (1).

3.3. The Contractor shall deliver on-line live training through the Internet directly to the student’s desktop to facilitate Government personnel access from different locations and different time zones.

3.4. The Contractor shall use a course from its training catalog or develop a new course curriculum.

3.5. The Contractor shall develop and deliver a course with no less than twenty-four (24) hours of training.

The Contractor shall compress the course topics provided in enclosure (1) so as to not exceed twenty-four

(24) total hours.

3.6. The Contractor shall provide each student a certificate with the total hours of training completed at the completion of the course. The certificate shall display the Contractor’s name, logo, student name, course name, hours completed, and date completed.

3.7. The Contractor shall provide live-instructor-led training or live webcasting. CBT or Power Point presentations without a live Instructor are not acceptable.

3.8. The Contractor shall provide an Instructor fluent in English with at least three (3) years of experience teaching English language based courses.

3.9. The Contractor shall record the live-instructor-led sessions.

3.10. The Contractor shall make the initial instructor-led recorded session and training material available to the registered students on-demand throughout the period of performance (PoP). The Contractor shall allow students access to the recorded session during the PoP in the event students miss training during the live session.

3.11. The Contractor’s proposal shall discuss its full capabilities to deliver on-line live training through the Internet and student’s IT requirements to receive the training at the desktop, including technologies used and required to access the on-line training.

3.12. The Contractor shall provide a total of one hundred and twenty (120) training seats during 4-month period of performance.

3.13. The Contractor shall deliver the training in four (4) sessions every thirty (30) days to support participation of no less than thirty (30) students per session. The Contractor shall begin the first session no later than June 18, 2019, and each month thereafter until all 4 sessions have been completed. The Contractor shall deliver a total of four (4) 3-day sessions.

3.14. The Contractor shall conduct the appropriate number of instructor-led sessions during the four-month period of performance until training is completed by all 120 personnel. The Contractor shall have up to twenty-one (21) days to schedule the class.

3.15. Students for this course will be Information System Security Professionals who work for DoD ranging from apprentice to expert knowledge levels.

3.16. The Government shall provide the Contractor a list of personnel who will participate in the training.

The Government shall reserve the right to replace a name that has not used the credit or seat with a new name before the end of the period of performance.

3.17. To minimize the risks of personally identifiable information, the Contractor shall limit information required by students to their name and email address for enrollment.

3.18. Contractor shall not use the email information of students outside of the scope of the contract.

3.19. The Contractor shall create a progress report that shows Government personnel progress towards course completion. The Contractor shall provide a progress report after completion of each session that includes; full name and number of hours taken by each student. The report shall be a Microsoft Excel or Word document due to the Government seven (7) days after the completion of a session. The report shall be emailed to the Government POC at Karen.seckington@navy.mil.

3.20 The contractor shall have each student complete a course training evaluation using the provided Training Evaluation Form at the end of the 3-day session. The completed Training Evaluation Forms shall be delivered to the Government POC.

Enclosure 1

This is the syllabus for a 3-day course for Database Security. The course will cover database architecture, installation, configuration, operation, and platform hardening. Throughout the course, students may be required to practice various policy configurations using a virtual software environment to simulate a students' environment. Students will gain understanding of concepts and skills necessary to perform database hardening and verification, Course Objectives:

Database Security Core - Database security architectures, defense in depth architectures, attack vectors, security threats.

Database Hardening – Explain in detail the techniques for Operating System, Database and Application hardening.

SQL - Installation, Configuration, Hardening, Exploitation, Protection mechanisms, and Security Best Practices Storage Encryption – Data at Rest Key Management - Encryption key management procedures and best practices.

Curriculum shall address the following NIST SP 800-53 security controls:

Information Input Validation Error Handling Information Output Handling and Retention Access Enforcement and Restrictions Auditing Content and Logging Secure Configuration Management Information Protection Security Attributes Conducting Security Verification and Validation