DS Appendix 1-C Data Network Services SOO 08-05-2010 FINAL.pdf

Diplomatic Security

Appendix 1-C: Data Network Services SOO

18/OCT/2010Page i

APPENDIX 1-C

DATA NETWORK SERVICES

STATEMENT OF OBJECTIVE (SOO)

for

DIPLOMATIC SECURITY

FINAL

18/OCT/2010

Diplomatic Security

Appendix 1-C: Data Network Services SOO

18/OCT/2010Page i

Table of Contents

1.0 Data Network Management Services Overview and Objectives

1.1 Services Overview

1.2 Service Objectives

2.0 Service Environment

2.1 Scope of Services and Infrastructure to be Supported

2.2 Baseline Information

3.0 Data Network Services Requirements

3.1 Service Descriptions and Roles & Responsibilities

3.2 Service Specific Milestones

4.0 Service Management

4.1 Service Level Requirements (SLRs)

4.2 Reports

5.0 Referenced Appendices

List of Tables

Table 1. Data Network Baseline Projections

Table 2. General Roles and Responsibilities

Table 3. Engineering/Development Roles and Responsibilities

Table 4. Asset Acquisition and Network Service Provisioning Roles and Responsibilities

Table 5. Network Operations and Administration Roles and Responsibilities

Table 6. Network Monitoring and Reporting Roles and Responsibilities

Table 7. Documentation Roles and Responsibilities

Table 8. Firewall Services Roles and Responsibilities

Table 9. Security Intrusion Detection Services Roles and Responsibilities

Table 10. Security Penetration Services Roles and Responsibilities

Table 11. Security Incident & Audit Management Roles and Responsibilities

Table 12. Network Availability SLRs

Table 13. Network Performance SLRs

Table 14. Network Administration Services SLRs

Table 15. Security Intrusion Detection SLRs

Table 16. Security Penetration Services SLRs

Table 17. Network Service Reports

FINAL DIPLOMATIC SECURITY

Appendix 1-C—Statement of Objective (SOO)

18/OCT/2010Page 1

This is Appendix 1-C: Data Network Management Services SOO to the Agreement between Diplomatic Security (―DS‖) and Contractor.

1.0 Data Network Management Services Overview and Objectives

1.1 Services Overview

This Appendix 1-C: Data Network Management services are the services and activities, as detailed in the following SOO, required to provide and support Diplomatic Security data network environment as described in section 2.0 below. Contractor responsibilities include, but are not limited to, the provisioning, management, administration and troubleshooting of the following Data Network services:

Wide-area Network (WAN)

Local-area Network (LAN)

Virtual Private Network (VPN)

Network Security

The scope of services is for DS supported Networks. The network devices are summarized in Appendix C.1 Network Hardware. This appendix lists DS supported network devices and shared infrastructure.

In addition to the services described in this Data Network Management SOO, the Contractor is responsible for providing the services described in Appendix 1-A: Cross Functional Services

SOO.

1.2 Service Objectives

The following are the key high-level Service objectives DS expects to achieve through outsourced Data Network Management services and this Data Network services Statement of Objectives (SOO):

Provide a reliable, scalable and secure high-speed network infrastructure to DS

Minimize administrative effort by engaging the outsourcer to provide this management function

Achieve the service level requirements specified in section 4

Identify opportunities for improvement and work collaboratively to improve services for end users

Support the Bureau’s flexibility to standup new programs on short notice

Encourage innovation and understanding of emerging technologies

Increase accountability in all functional areas

2.0 Service Environment

2.0 Scope of Services and Infrastructure to be Supported

18/OCT/2010Page 2

The following sub-sections and related SOO Appendices describe and scope the network environment to be supported/complied with. Service Environment Appendices are to be maintained and reviewed with DS by Contractor and made available to DS on a quarterly basis.

2.0.1 Hardware and Software

a. A listing and description of all supported network hardware is provided in Appendix C.1 - Network Hardware. For security purposes, this appendix will include only hardware types. Specific device information will be shared with down-selected suppliers during the Due Diligence period.

b. A listing and description of the supported network software and utilities is provided in Appendix C.2 - Network Software. For security purposes, this appendix will include general listings and specifications.

c. A listing of supported network circuits is provided in Appendix C.3 - Network Circuits.

d. A network topology diagram describing the supported network components is provided in Appendix C.4 - Network Topology.

2.0.2 Service Locations

a. A description and location of all DS facility and office locations requiring network services is provided in Appendix C.5 - DS Service Locations.

This appendix lists cities only which include:

- Miami

- San Francisco

- Chicago

- New York

- New Consular affairs locations

- Other regional locations

2.0.3 Personnel

a. Contractor will be responsible for staffing skilled and appropriately certified Data Network Management staff to meet the Service Level Requirements (SLRs) set forth in this SOO.

2.0.4 Policies, Procedures and Standards

a. A description of the DS policies, procedures and standards with which Network Services will comply is provided in Appendix C.6 – Network Policies, Procedures and Standards.

2.0.5 Agreements and Licenses

a. A list of Network related agreements and licenses to be supported is provided in Appendix C.7 – Network Agreements and Licenses.

18/OCT/2010Page 3

2.0.6 Work-In-Progress/Transition

Network related initiatives in progress that are included in the scope of this document and are the responsibility of Contractor to complete within the time frames specified by are listed in Appendix C.8 – Network Related Work in Progress.

2.0.7 Future initiatives

Other Network related initiatives considered but not in process are included in Appendix C.9 - Network Related Future Initiatives.

2.1 Baseline Information

DS’s projected network usage is presented below. These business requirements represent DS’s most realistic projection of the service requirements for Day 1 implementation based on a combination of past trends and current anticipated overall business direction over the term of the contract.

Table 1. Data Network Baseline Projections

System 0 1 2 3 4 5 Comments

Routers - Small 55 56 57 58 60 61 Projected 2% growth

Router - Medium 14 14 15 15 15 15 Projected 2% growth

Router - Large 8 8 8 8 9 9 Projected 2% growth

DSCs/CSUs 0 0 0 0 0

Firewalls 14 14 15 15 15 15 Projected 2% growth

Modems 0 0 0 0 0

Frame Relay 0 0 0 0 0 Out of Scope

Dedicated Internet Circuits

1 1 1 1 1 1 Projected 2% growth

Point-to-Point Circuits 0 0 0 0 0

ISDN 5 5 5 5 5 6 Projected 2% growth

Dial-up WD Modem Pool

0 0 0 0 0 0

VPN 2 0 0 0 0 0 Projected 1% growth

IMACs per device/per year

8 8 8 8 9 9 Projected 2% growth

Switch - Small 17 17 18 18 18 19 Projected 2% growth

Switch - Medium 538 549 560 571 582 594 Projected 2% growth

Switch - Large 14 14 15 15 15 15 Projected 2% growth

3.0 Data Network Services Requirements

18/OCT/2010Page 4

3.0 Service Descriptions and Roles & Responsibilities

In addition to the services, activities, and roles and responsibilities described in Appendix 1-A:

Cross Functional SOO, Contractor is responsible for the following Data Network Management services, activities and roles and responsibilities.

3.0.1 Data Network Services Requirements

a. Wide Area Network (WAN) Services WAN services include the provision and monitoring and management of networks that interconnect two or more separate facilities that span a geographic area larger than a campus or metropolitan area. Transmission facilities include, but are not limited to, point to point circuits, Frame Relay, dedicated Internet connections, broadband (DSL/Cable Modem) Internet connections, Internet-based VPNs, and dial-up connections. Contractor shall work with public carriers and other DS circuit Contractors on behalf of DS to ensure delivery of WAN services. Support of any network services-related work required by designated carriers, to support the DS network, is considered within the scope of services.

b. Local Area Network (LAN) Services LAN services include the provision and monitoring and management of networks that are usually confined to a single facility or portion of a facility. LAN components include Dynamic Host Control Protocol (DHCP)/Domain Name Server (DNS) supporting all network traffic originating from desktop devices, local file and print servers, application servers, database servers, peripherals, firewalls/routers, other network devices and other user premise devices. This service ends at, but does not include, the LAN attached device network card at the desktop.

c. Virtual Private Network (VPN) Services VPN services include the provision and monitoring and management of methods for remote users and business partners to securely connect to the Network and Data Center Computing Services over the public Internet. This service includes dedicated site-to-site VPN connectivity on a shared public IP network. It requires industry-/Internet-based standards for security to create and preserve privacy, data integrity, and authenticity. The VPN service must be highly scaleable.

d. IP Dial Services Not in current scope, possible future plans

e. Network Security Services Network Security Services Firewall includes the provision and support of methods that provide security to physical and logical devices connected to the network.

Security services include Firewall, Intrusion Detection, Penetration/Vulnerability testing.

f. Management Services Management services include the provision and support of a suite of activities that spans all aspects of system security and networking levels in terms of system and component management and monitoring, information protection, component-addressing methods, access control, and change control.

The Contractor is expected to understand relevant Federal, NIST, DoS, DS, and CTO policies. It is assumed that the Contractor is familiar with delivering services in the Federal Government environment.

18/OCT/2010Page 5

3.0.2 General Responsibilities

The following table identifies General roles and responsibilities associated with this SOO including the network components listed above. An ―X‖ is placed in the column under the party that will be responsible for performing the task. Contractor responsibilities are indicated in the column labeled ―Contractor.‖ While the scope of services is DS Networks, DS Networks will interface with IRM provided circuits. IRM provides an OLA (Operating Level Agreement) for circuit availability.

Table 2. General Roles and Responsibilities

General Roles and Responsibilities Contract or

DS

1. Recommend WAN / LAN/ VPN / Firewall requirements based on industry best practices

X

2. Review and approve requirements and for WAN/LAN/VPN/Firewall services X

3. Review and approve services and standards for all network services X

4. Perform business liaison function to DS operational units X

5. Recommend network capacity thresholds X

6. Approve network capacity planning thresholds X

7. Provide capacity and performance reports on a quarterly basis X

8. Support Procurement of and provision and maintain all network components and circuits

X

9. Report performance against service-level requirements X

3.0.3 Design/Engineering

The following identifies the activities, roles and responsibilities associated with Engineering/Development services that are specific to this Appendix. Additional activities include:

Table 3. Engineering/Development Roles and Responsibilities

Engineering/Development Roles and Responsibilities Contract or

DS

1. Develop network design, engineering and security testing and integration procedures that meet requirements and adhere to defined policies

X

2. Approve network design engineering, security testing and integration procedures

X

3. Prepare network design, engineering and security, plans and schedules to support new and enhanced applications, architectures and standards

X

4. Review and approve network design, engineering and security plans and schedules

X

5. Approve the scheduling of all changes to the network environment X

6. Coordinate with DS, IRM, affiliated entities, and public carriers, as required X

18/OCT/2010Page 6

3.0.4 Asset Acquisition and Network Services Provisioning

Contractor will perform Asset Acquisition and Network Services Provisioning associated with acquiring network equipment and circuits. The following table identifies the underlying roles and responsibilities associated with Asset Acquisition and Network Services Provisioning activities.

Table 4. Asset Acquisition and Network Service Provisioning Roles and Responsibilities

Network Provisioning Roles and Responsibilities Contract or

DS

1. Order and expedite WAN circuits, equipment and services as defined by DS. Circuits will be ordered through IRM.

X

2. Configure WAN/LAN (hardware, software) prior to installation X

3. Document router configuration files and IP addressing schemas X

7. Develop and document network provisioning requirements and policies X

8. Approve network provisioning requirements and policies X

9. Provide capacity planning assistance to develop network resource requirements projections

X

10. Coordinate ordering, procurement support and inventory management of network circuits from public carriers

X

11. Monitor the performance of public carriers (and other third parties) to meet defined schedules, project plans, SLRs etc. and interface with IRM as necessary.

X

12. Ensure that all new circuits, devices and software provisioned are included in configuration management documentation

X

3.0.5 Network Operations and Administration

The following table identifies the activities, roles and responsibilities associated with Network Operations and Administration that are specific to this Appendix.

a. Operations activities include:

1. Network systems management and troubleshooting (e.g. performance, problem, change and capacity monitoring)

2. Bandwidth management

3. Protocol usage statistics (e.g. identify top talkers by protocol)

4. Working with public carriers and other circuit Contractors to perform any operations activities (e.g. provisioning, problem management)

5. Managing and maintaining all Network Service computing resources (e.g.

hardware, operating system software and applications) that are required to provide Designated Services

b. Administration services include activities, such as:

1. Managing router configurations, firewalls, Internet Protocol (IP) addresses and related services (e.g. DNS/DHCP)

2. Asset management, including infrastructure software licenses

3. Physical (e.g. equipment) and logical (e.g. IP address change) IMACs

18/OCT/2010Page 7

Table 5. Network Operations and Administration Roles and Responsibilities

Network Operations and Administration Roles and Responsibilities Contract or

DS

1. Provide LAN/WAN connectivity contained in the service environment X

2. Develop and document network administration requirements and policies X

3. Develop and document procedures for administration that meet requirements and adhere to defined policies and procedures

X

4. Approve administration policies and procedures X

5. Perform day-to-day network operations and administration activities X

6. Manage all network devices in accordance with DS’s policies (including security oversight and change management policies)

X

7. Maintain IP addressing schemes, router configurations, routing tables, VPN configurations, etc.

X

8. Manage user accounts as needed for access and maintaining network resources (e.g. logon user-id and password maintenance)

X

9. Maintain and provide audit information including access, general logs, application logs in accordance with DS’s security policies

X

10. Ensure that network administration activities are coordinated through defined change management processes

X

3.0.6 Network Monitoring and Reporting

The following table identifies the roles and responsibilities associated with Network Monitoring and Reporting services that are specific to this Appendix.

Table 6. Network Monitoring and Reporting Roles and Responsibilities

Network Monitoring and Reporting Roles and Responsibilities Contract or

DS

1. Develop and document requirements and policies for network monitoring and problem management

X

2. Approve requirements and policies for network monitoring and problem management

X

3. Develop and document network monitoring and problem management procedures, including escalation thresholds, that meet requirements and adhere to defined policies

X

4. Approve network monitoring and problem management procedures X

5. Recommend and implement tools for monitoring network devices and traffic

X

6. Implement measures for proactive monitoring and self-healing capabilities to limit network outages

X

7. Monitor network per SLRs X

8. Identify network problems and resolve in accordance Incident and Problem Management Services, polices, procedures and SLRs

X

9. Provide on-site staff at DS facilities as required to perform maintenance and problem resolution activities

X

10. Coordinate resolution of circuit problems with third parties, including public carriers, IRM, ISP and City/County affiliates using the network

X

18/OCT/2010Page 8

3.0.7 Documentation

The following are required document types that are specific to this Schedule.

a. Network system specifications and topologies (for example, router configurations, firewall policies, routing diagrams/IP addressing tables, hardware/software listings, etc.)

b. Detailed circuit location information (e.g. circuit ID including LEC access ID, location, speed)

c. Detailed documentation showing all firewall policy, group, object, etc. information

d. ―As-built‖ documentation for all network devices (including firewalls) that are deployed in development, test, QA, production or other technical environments

The following table identifies the roles and responsibilities associated with Documentation activities that are specific to this Appendix.

Table 7. Documentation Roles and Responsibilities

Documentation Roles and Responsibilities Contract or

DS

1. Recommend documentation requirements X

2. Approve Recommend documentation requirements X

3. Provide documentation as required by DS X

3.0.8 Network Security Services

The Contractor is expected to support the policies and procedures of the DS ISSO including contingency planning and FISMA reporting.

3.0.8.1 Firewall Management

Contractor shall provide Firewall Management Service including firewall engineering and management and access control list engineering and management in compliance with DS’s policies and standards. The following table identifies roles and responsibilities associated with the Firewall Management services.

Table 8. Firewall Services Roles and Responsibilities

Security Firewall Services Roles and Responsibilities Contract or

DS

1. Recommend best practice firewall policies X

2. Develop DS specific firewall polices and requirements X

3. Approve firewall polices X

4. Provide services in conformance to firewall policies and requirements X

5. Perform firewall engineering and firewall security design X

6. Assess firewall security and propose alternative security designs X

7. Review and approve firewall security designs X

8. Review and approve firewall ACL policies X

9. Develop recommendations for improved security X

18/OCT/2010Page 9

Security Firewall Services Roles and Responsibilities Contract or

DS

10. Review and approve recommendations for improved security X

11. Provide Access Control Lists (ACL) X

12. Maintain Access Control Lists (ACL) in accordance with DS Policies

X

13. Maintain, Analyze, document and review firewall audit logs X

3.0.8.2 Security Intrusion Detection Services

Contractor shall provide both NIDS (Network-based Intrusion Detection Service) and HIDS (Host-based Intrusion Detection Service) for DS supported Networks. The following table identifies the roles and responsibilities associated with the Intrusion Detection services.

Table 9. Security Intrusion Detection Services Roles and Responsibilities

Security Intrusion Detection Services Roles and Responsibilities Contract or

DS

1. Develop policies and standards for intrusion detection X

2. Approve policies and standards for intrusion detection X

3. Provide Intrusion Detection Services and reporting X

4. Allow for independent Intrusion Detection Services X

5. Develop recommendations for improved security X

6. Review and approve recommendations for improved security X

7. Implement approved recommendations X

3.0.8.3 Security Vulnerability & Penetration Services

Contractor shall test the susceptibility of DS’s network hosts to a specific attack or suite of attacks targeting all DS Internet address space as well as all DS Intranet address space using automated and custom methods. The following table identifies the roles and responsibilities associated with the Security Penetration services.

Table 10. Security Penetration Services Roles and Responsibilities

Security Penetration Services Roles and Responsibilities Contract or

DS

8. Develop policies for security vulnerability & penetration testing X

9. Approve policies for security vulnerability & penetration testing X

10. Conduct security vulnerability scans & penetration testing X

11. Allow for independent vulnerability & penetration services X

12. Provide reporting on testing results X

13. Develop recommendations for improved security X

14. Review and approve recommendations for improved security X

15. Implement approved recommendations X

18/OCT/2010Page 10

3.0.8.4 Security Incident & Audit Management Services

The following table identifies the roles and responsibilities associated with Security Incident Management services.

Table 11. Security Incident & Audit Management Roles and Responsibilities

Incident Management Services Roles and Responsibilities Contract or

DS

1. Develop policies for security incident management X

2. Approve policies for security incident management X

3. Provide initial review (level 1) of security incidents and the determination if escalation to DS Information Security (level 2, 3 support) is warranted

X

4. Identify and removal from the network of any PC virus/worm infected system

X

5. Identify and provide countermeasures for virus / worm attacks X

6. Establish security audit policies X

7. Provide technical expertise for security audits X

8. Collect and review all incidents reported by all other security services (e.g.

NIDS, HIDS, penetration testing, firewall).

X

9. Maintain a central repository of log files in accordance with DS policies and service levels including application specific and system specific log files

X

10. Provide security reporting X

3.0.9 Support Services

In addition to the Services described in this SOO, Contractor is responsible for providing the Services described in Appendix 1-A: Cross-Functional Services SOO.

3.1 Service Specific Milestones

Milestones specific to the deployment of Network services are listed in the following:

Milestone Description Milestone Date

General Roles and Responsibilities Proposal recommended completion timeline

Engineering/Development Roles and Responsibilities

Proposal recommended completion timeline

Asset Acquisition and Network Service Provisioning Roles and Responsibilities

Proposal recommended completion timeline

Network Operations and Administration Roles and Responsibilities

Proposal recommended completion timeline

Network Monitoring and Reporting Roles and Responsibilities

Proposal recommended completion timeline

Documentation Roles and Responsibilities Proposal recommended completion timeline

Firewall Services Roles and Responsibilities Proposal recommended completion timeline

Security Intrusion Detection Services Roles and Responsibilities

Proposal recommended completion timeline

Security Penetration Services Roles and Responsibilities

Proposal recommended completion timeline

18/OCT/2010Page 11

Security Incident & Audit Management Roles and Responsibilities

Proposal recommended completion timeline

Network Service Reports Proposal recommended completion timeline

TBD

4.0 Service Management

4.0 Service Level Requirements (SLRs)

The following minimum service levels are required at the end of the Transition Period.

Contractor must consistently meet or exceed the following SLRs. All times referenced are in Eastern Standard Time.

Table 12. Network Availability SLRs

DEFINITION Network Availability is defined as the time during which the network is fully functioning as specified below and normal business operations can be carried out with no data loss, downtime, or performance degradation.

All performance criteria are to be measured on a per circuit and component basis– criteria is not to be aggregated and averaged for all circuits and network components.

PRE-SCHEDULED

DOWNTIME

REQUIREMENTS

All pre-scheduled maintenance shall be performed between the period beginning Sunday 0830 to 2030 or as otherwise agreed to by the Government.

Network Availability SLRs

Service Type Service Measure Performance Target SLR

Circuit Availability —

Availability

7x24x365

99.999%

Internet Access Availability

Availability 7x24x365 99.999%

Router Availability - Availability 7x24x365 99.999 %

LAN Availability Availability 7x24x365 99.90%

VPN Availability Availability 7x24x365 99.99 %

18/OCT/2010Page 12

Network Availability SLRs

Service Type Service Measure Performance Target SLR

Formula Availability(%) = 100% - Unavailability (%)

Where Unavailability is defined as:

( Outage Duration x 100%) (Schedule Time –

Planned Outage)

Measurement Interval Monitor Continuously, Measure Daily, Report Monthly

Measurement Tool TBD

Table 13. Network Performance SLRs

DEFINITION Network Performance includes the ability of the network components to deliver data timely and accurately.

All performance criteria are to be measured on a per circuit and component basis– criteria is not to be aggregated and averaged for all circuits and network components. Maximum packet size is 128 bytes.

Network Performance SLRs

Performance Type Per Circuit

Service Measure Performance Target SLR

Network Transit Delay Elapsed Time – round trip transit delay from ingress and egress ports on premise devices.

120 ms 99.99%

Packet Delivery Ratio Successful packet transmission

99.9% 99.95%

(data loss ≤ 0.05%)

Jitter Variation in timing, or time of arrival, of received packets.

10 ms 99.95%

Formula – Transit Delay NTD = t2 – t1

Where:

t1 is the time when a packet leaves the ingress premise, and t2 is the times when the packet arrives at the egress premise

Formula – Packet Delivery

Packet Delivery Ratio = 1 minus PDR

Where: ―PDR‖ = Packets delivered/ packets sent.

18/OCT/2010Page 13

Network Performance SLRs

Performance Type Per Circuit

Service Measure Performance Target SLR

Formula – Jitter J1 = Ti - Ti’

Where: J1 is for two consecutive packets i and i+1 and, Ti = time 1st byte of packet is received by the source port (ingress time)

Ti+1 = time 1 st byte of packet i+1 is received by the source port (ingress time)

Ti’ = time 1st byte of packet is received by the destination port (egress time)

Ti+1’ = time 1 st byte of packet i+1 is received by the destination port (egress time) and

T = Ti+1 - Ti ( is the time interval between packets at ingress

T = Ti+1’ - Ti’ ( is the time interval between packets at egress

Measurement Interval Monitor every 5 minutes, Measure Daily, Report Monthly

Measurement Tool TBD

Table 14. Network Administration Services SLRs

DEFINITION Routers and circuits to be managed proactively using either product-specific or proprietary network monitoring and management tools. Measurement for these network components is 24x7x365 requirement. Pre-scheduled maintenance shall be performed according to the published maintenance window schedule, with the ability to reschedule based on network availability requirements from the various DS groups or clients.

Network Administration Services SLRs

Administration Task Service Measure Performance Target SLR

Network Service capacity reallocation or change

Proactive monitoring and preemptive intervention to advise DS of need to increase capacity.

Sustained avg. daily utilization reaches 70% of installed capacity

98%

Testing of service packs and updates to ―dot‖ releases

Completion of testing and submission of results to DS for approval

Per prescribed schedule 98%

IMAC– Implement service packs and updates to ―dot‖ releases

Overall Schedule Per prescribed schedule

<4 hours

98.00%

Testing of version or major release updates

Completion of testing and submission of results to DS for approval

Per prescribed schedule 98%

IMAC—Implement Overall Schedule Per prescribed schedule <24 hours

18/OCT/2010Page 14

Network Administration Services SLRs

Administration Task Service Measure Performance Target SLR version or major release updates

98.00%

IMAC—service addition or change as scheduled under Change Control process

Elapsed Time Increases of installed capacity within 2 months

Decreases of installed capacity within 6 months

95.00%

Adding/deleting user accounts

Response Time Mon–Fri, 0700–2000 immediately

99.00%

Firewall Management

Implementation of firewall changes related to changing, adding/deleting firewall rules.

Response Time Emergencies: ≤2 hours after approval

Standard Requests:

within 1 business day of approval

99.00%

Formula Transactions completed within Performance Target / Total Transactions

Measurement Interval Monitor Continuously, Measure Daily, Report

Table 15. Security Intrusion Detection SLRs

DEFINITION Network traffic to/from designated systems is monitored for current attack signatures and is retained for 3 days. Measurement for this service is 7x24x365 requirement. Pre-scheduled maintenance shall be performed between the period beginning Sunday 0100 to 0700.

Security Intrusion Detection SLRs

Management Task Service Measure Performance Target SLR

NIDS – monitor for current attack signatures

Overall Schedule 7x24x365 99.99%

HIDS – monitor for changes to selected local files

Overall Schedule 7x24x365 99.99%

NIDS – review all positive priority 1 and priority 2 alerts and notify DS by E-mail

Elapsed Time <15 minutes 99.90%

18/OCT/2010Page 15

Security Intrusion Detection SLRs

Management Task Service Measure Performance Target SLR

Formula Performance = Transactions completed per Management Task within Performance Target / Total Transactions per Management Task occurring during the Measurement Interval

Measurement Interval Monitor Continuously, Measure Daily, Report

Table 16. Security Penetration Services SLRs

DEFINITION Entire networks are tested to determine the susceptibility of their hosts to current attacks. Measurement for this service is Mon-Fri, during business hours, for Intranet testing. Whereas Internet penetration testing occurs outside of business hours [1700 – 0700] and where appropriate, running continuously over the weekend. Pre-scheduled maintenance shall be performed during periods of service inactivity.

Security Vulnerability & Penetration Services SLRs

Management Task Service Measure Performance Target SLR

Testing of vulnerabilities & Penetration

Overall Schedule Mon–Fri, 1700–0700

Sat-Sun, 0000-2400

99.90%

Formula Transactions completed within required time / Total Transactions

Measurement Interval Monitor Continuously, Measure Daily, Report

4.1 Reports

The Contractor will provide written reports to DS regarding Contractor’s compliance with the SLRs specified in this Section and other Network activity reports. Reports are required per the following:

NOTE – Please add any required reports in the table below.

Table 17. Network Service Reports

Report Description Timing

Service Level Requirements (SLRs) Daily, Weekly, Monthly, Quarterly, Annually

TBD

5.0 Referenced Appendices

SOO Appendix Description

18/OCT/2010Page 16

SOO Appendix Description

C.1 Network Hardware

C.2 Network Software

C.3 Network Circuits

C.4 Network Topology

B.5 Service Locations

C.6 Network Policies, Procedures and Standards

C.7 Network Agreements and Licenses

C.8 Network Related Work in Progress

C.9 Network Related Future Initiatives