SNS Tool SOW.docx
DOCX document 19 KB Posted
- Attached to
- Social Networking Site Tool RFI Federal contract opportunity
- Solicitation number
- M00264-25-RFI-0001
- Issued by
- United States Marine Corps
About this file
This document is a Statement of Work (SOW) for a Social Networking Site (SNS) tool to be acquired by the United States Marine Corps (USMC). The SOW outlines the requirements for a Commercial-Off-the-Shelf (COTS) automated social networking capability that can conduct effective and efficient discovery, reporting, and removal of imposter social media accounts. The tool will be used to protect the reputation and privacy of USMC key personnel, General Officers (GOs), and Senior Executive Service (SES) members, and to reduce malicious attempts to penetrate the Marine Corps Enterprise Network (MCEN).
The key requirements include the ability to query multiple social media sites, provide a dashboard to view and filter identified accounts, discover malicious links and trending topics, and have functional workflows for removal and remediation of discovered entities. The tool must also provide customizable reporting and analytical capabilities, as well as technical helpdesk support and a high level of system uptime. The government expects to obtain a minimum of one subscription/license, with a maximum of up to ten. This SOW is related to a Request for Information (RFI) for the SNS tool, which is being issued by the USMC.
View the file
Other files for this federal contract opportunity
| File | Type | Posted |
|---|---|---|
| SNS Tool RFI Final.docx | DOCX document | |
| SNS Tool RFI Final.docx | DOCX document | |
| SNS Tool SOW.docx | DOCX document | |
| SNS Tool RFI Final.docx | DOCX document |
On GovTribe
Work with this file on GovTribe
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
SOCIAL NETWORKING SITE (SNS) TOOL
STATEMENT OF WORK (SOW)
OVERVIEW:
The Deputy Commandant Information (DC I) C4 Compliance (ICC) Branch, Cybersecurity Team is currently performing Social Networking Site (SNS) crawling, discovery, and harvesting activities to protect the reputation/privacy of United State Marine Corps (USMC) key personnel, General Office (GO), and Senior Executive Service (SES) community, and to reduce malicious attempts to penetrate Marine Corps Enterprise Network (MCEN) boundaries. The purpose of the activity is to identify fictitious and imposter accounts (a.k.a. “evil twins”), which are masquerading as GOs and SESs. These “evil twins” create malicious links for unsuspecting service members and public to access and are fraudulently extorting information and money in the name of USMC key personnel.
The Government seeks a Commercial-Off-the-Shelf (COTS) automated social networking capability to provide the ability to conduct effective and efficient discovery, reporting and removal of imposter social media accounts. The COTS capability will be used to protect the best interests of the USMC. Using latest available COTS automation technology will reduce both human and network resource expenditure, time and work factor efforts allowing for a comprehensive social media review. The COTS also will be used in integrating the discovery of malware and trends with hashtags as an additional aspect of pinpointing emerging trends concerning the USMC, allowing for quick identification of threat agents and entry points for malware and impersonators trying to gain followership through discussion topics.
The Government expects to obtain a minimum of one (1) subscription(s)/license(s) with a maximum of up to ten (10).
Technical Acceptability Criteria:
| • | The capability/solution shall be a fully functional COTS item available by subscription, software as a service or remote license with ready to begin acceptance and enrollment of user profiles and enable required feature/function upon award. |
| • | The capability/solution must have the ability to query at a minimum, but not limited to the following social media sites. The capability/solution shall be responsible for any agreements with the required social media organizations that will enable the capability to execute and perform successfully. |
Dashboard or user interface:
| • | The capability must have the functionality to view all identified accounts in one location |
| • | Filtering functionality of profiles by last name, first name, rank, date, social media venue |
| • | Drill down functionality for individual incident or alert by entity name, date, social media venue, picture, and malicious links |
| • | Risk rating of entity record |
| • | Malicious link or virus attributes data associate to discovered alerts |
| • | Hash tagging search, trending, and analysis capability (discovery of malicious activity) |
| • | Discovery that includes name, rank, and picture of discoverable asset |
| • | Bulk reporting buttons and features |
Discovery
| • | Capability must have functional workflow for removal and remediation, of discovered entities |
| • | Capability must have functional whitelisting procedure to convert false positives into whitelisted accounts that fall off the alert list |
| • | Capability must have functional processes/procedures for identifying hashtag trending topics regarding the USMC with malicious intent |
| • | Capability shall have functional ability to individually identify discovered profiles containing malware, malicious links, and redirects |
Reports/Reporting:
| • | Capability must have a functional, highly flexible customizable reporting feature allowing the manipulation of field data to be excluded or included in each report (e.g., time and date stamps of found alerts, priority, comparable risk rating criteria, malware indication, last name, rank, first name, social media site, status including but not limited to closed, open, whitelist, reported for deletion etc.) |
| • | Capability shall have functional customizable executive level reports, exportable by the customer in Adobe Acrobat .pdf and Microsoft Excel .xls formats containing desired/required information (e.g., last name, rank, social media site, risk level). |
| • | Capability must have trending of analytical data available for further analysis by the customer. i.e.: bar charts, graphs, line charts, showing date/site/alert identifying trending and analysis of data. |
| • | Capability must have bulk reporting buttons and features automating the submission for identified “impersonators” |
Remediation:
| • | Capability must include functional workflow process(es) to remediate alerts once government personnel complete human review and categorize alert profile as fake, fraudulent, or malicious. Remediation for the purposes of this document means that the alerted profile has been deleted by the social media site. |
| • | Capability response time for reported accounts is 6 weeks from the first day of discovery or report by customer |
· Capability provides via the dashboard on demand status of the remediation request and interaction with respective site administrators at any given time between discovery/reporting and complete deletion.
| • | Capability must have business agreements, processes, and relationships in place for fictitious account removal from the following included but not limited to sites: Facebook, X, LinkedIn, Instagram, Pinterest, Reddit, and YouTube. |
| • | Capability must contain training materials. |
Service Level Agreement (SLA):
• Technical Helpdesk Support must be provided to government users during business hours of 0800 - 1700 (ET) Monday – Friday
· Response to inquiries, requests for reports, and specific data, charts, and graphs provided within four business hours following stamped time of initiator request.
• System uptime of 99.97% and
· Written notification no less than 2 weeks prior of any scheduled maintenance or planned outages that may degrade or interrupt service or user access to the system shall be provided to the Contracting Officer’s Representative (COR), Technical Point of Contract (TPOC), and all Marine Corps government users.
• The capability shall be accessible to the Government user 24 hours per day, every calendar day per year.
image1.emf
File details come from the government source that posted it. Updated .